last executing test programs: 39m19.445254557s ago: executing program 32 (id=885): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000002100), &(0x7f0000002140)=0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x80800) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x307b, 0x0, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x2f2d, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc, 0xe3, 0x9}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x4, 0xe, 0x5, 0x40, 0x8}, 0xad, &(0x7f0000000480)={0x5, 0xf, 0xad, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0xa, 0x8000}, @generic={0x97, 0x10, 0xa, "a8feb4558545a88d2cacc2d90f14349a3e53183ec198cc1d1ca313a18861bb5ca0030c425819350885f7a65d2ad856ecd04f300042c051daef88047d6cbab35df56da31f176aac660f8218b231ee056de5ef17c2ed61ad4516541ef078af2303ce7cb7e50a882e2cc044593e4b26d3699d4bc14d3abf1b482423f237a62a01cb786b2cf3911654441633f851a9d500dbf58bb5a5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x11, 0x9, 0x8b49}]}, 0x8, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4}}, {0xcf, &(0x7f0000000600)=@string={0xcf, 0x3, "9571730d382b97b006bf2f9ee9b7b8f1d1654f4d1efb654772046bcdc980cdc4c7c2b0962214c515e9e8791901377f2f9323d1e18198c4d5511d39b4c60c362cda965cfad9080149ff3ff06694d9eed6497a22c054092d5a08df72bf1ba5c29262cf82857489f880dbaa24f64a6f5877bad0841752d1c624f0aba76d364c9702fea5dc0907671ba95889aa43b10cd80364345604c4a476bf0163684dd040136fa8a421ba83999e199eacf95fdd86a486fcf92fa57877183b346ed792fb0dba28325d79487198483a12cbee55f6"}}, {0x33, &(0x7f0000000700)=@string={0x33, 0x3, "69dfd404ae3ff91b74d714d4b4ba4e1b3add0e157151c18869a6c308586b0475321022e816cf30345e35d57c6f6eb6a5f2"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x100a}}, {0xc0, &(0x7f0000000780)=@string={0xc0, 0x3, "2c3935d5c6dfc44ac337b1f7ff954f0ac0b8cfcb514de4027916f67ce05edd6519f0a2a94e81990d7264df2dc91694004b4622c8f2bcf927aa97f3f1105d44fa664f267698e92d595aa53eb80025a66e298d07e65164b8be67fe23dfc4a14499c98918bd430b687530a96028cfcce5e227c124430fd28874e525b2dd049c325de2a592ab237bb6af66d0feddcf52d1ddb99bdd73488a9e02f78ffdc2fb356aece427103005dc16239cab5bf6c52e68637e4be427d1859149c7493b772e28"}}, {0x13, &(0x7f0000000840)=@string={0x13, 0x3, "9e182da56706eb5a29359bbc05679fdfdb"}}]}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000940), 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 37m53.837454578s ago: executing program 33 (id=1187): shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) socket(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) ioperm(0xff, 0x9, 0x100000001) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306033f0000000000000000000000000500010007000000c666da571ed82388d717bf3bc8143704a79159e8196f92b505a2021875d50f9e6d337d71d3ce601973d42e4779048132b8856186886ea30254c646088efe3179fd"], 0x1c}}, 0x0) 34m14.003646144s ago: executing program 34 (id=1872): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) ppoll(&(0x7f00000002c0), 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioperm(0x2, 0x1, 0x9) r2 = fsmount(0xffffffffffffffff, 0x1, 0x7b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x15) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) write$dsp(r2, &(0x7f0000000180)="93d373052c994cfbe3afedc078ce187c3ed2301530432cd28c338efc57de5d3df309f8b771394e10aed45264843d96", 0x2f) unshare(0x68060200) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000003600000057f696b612ee909e431b5a0786cf728500005e6497560095be527c6b71fd3a9d254d26db813e9b97485fd357fc36ce3ececa6bf6c8d54c81c2804a2197ebdd3de85fe24ffe8bd042c61480af6f3d7ccbba8c205d7692f008d7ec4878e891b8f231eb83c0c9114b46cf5e91dc2e2c4aa7dbccd0f0b2c9b2917b103a89d47a9fcac2495727c973b8e3a6e363"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r6, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000040)=0x1df5, 0x4) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendto$l2tp(r6, &(0x7f00000002c0)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 32m57.761753434s ago: executing program 35 (id=2026): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40015b19, &(0x7f0000000040)) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000000)={"34e17141", 0x200, 0x5, 0x8, 0x5, 0x6d, "8a86ccfd751b15dac5ddb6f309fe93", "2f2c30e1", "39ad577c", "f119ab00", ["5d086e6b8476dc731c55f35c", "749e9fffef9ad43460f115b1", "681218fcfcdc175ade9e1fc0", "e6c7080006da7e3140431a04"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x8, 0x8000, 0x3fe, "a2a0069f416ef72504d1690ea4e7e0ef", 0x3, 0xf, 0x2, 0x9, 0x6, 0xf4, 0x8}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r3, &(0x7f0000000300)=""/99, 0x63) 30m14.779388576s ago: executing program 36 (id=2422): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1800002, 0x12, 0xffffffffffffffff, 0x80000000) write$qrtrtun(r2, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, &(0x7f00000001c0), 0x0, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x6) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0xc, 0x0, 0x1ff}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x0, 0x200, {}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, '|^b!'}, 0x0, 0x1, {0x0}}) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) poll(&(0x7f00000000c0)=[{r9, 0x2000}], 0x1, 0x83) 29m28.862514763s ago: executing program 37 (id=2528): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000200000080000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r4, @ANYRES8=r1, @ANYRESHEX=r5, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000000114010000000000232ee14194ca7e8b10ba9f854f60ffa99b53b3bfe3e6fb7a915012440ceec23bdca481163c645bc7be2078c0d9515a2e9409711074e7070090f53b749fe90ee9655c7d26c5cb3689aa0ea83d7fb8ff"], 0x10}}, 0x0) readv(r8, &(0x7f0000000380)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x88, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x13a7921e7e2b8e5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xc8ea}]}, 0x88}, 0x1, 0x0, 0x0, 0x44091}, 0x26000010) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r10, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x3000000, 0x4, 0x7, 0x0, r9, &(0x7f0000000180)='\x00', 0x1, 0x80000001}]) dup3(r4, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x0) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) 24m21.338904886s ago: executing program 7 (id=3298): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) syz_open_dev$dri(0x0, 0x100000000000d, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)='befs\x00', 0x24d808, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/132, 0x84) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x1014, 0x6, 0x7, 0x101, 0x70bd2b, 0x25dfdbfc, {0x5, 0x0, 0x2}, [@generic="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"]}, 0x1014}}, 0x44001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x1, 0xca) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 24m19.311810849s ago: executing program 7 (id=3302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) 24m18.555121739s ago: executing program 7 (id=3304): unshare(0x6a040000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5d08ae33fbe8ec89}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x7c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x1558, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1538, 0x3, 0x0, 0x1, [{0x14b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "412c6f4ab395806aff5b974c0d9451eed2879cd6d034d4517c7a436b68001b7fded8c22fa65570f13ed9ce0fcd08b0956b465bc8b0543c5fddf181cf53a19c78114e963dd1d9880d042a8c75ec6d9fffc15f9a2477767865df375c93f350f6abcc8117e0c225caa0cac10c04d1ad6ab4e805aa4b269b5aedf90311b6f6a2572a9fd9c2559422e573f48418a265"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "ab27d502a8a0ab4d294756faf8543e706c236d6b1240e354afefc2ccdec962f33875d8138fb0ba470fe6c97ec0ffb9ef3b5b8d10dcf89caa5bd8f36fdd4ffb56380284fe24114068e2a11a01fcf01048406ede1cc1ac922355cfae4ec194a3b2174ce1b12e71b4cb06bf527f793c1317ee72ab8b380815ca71c663d1f55f66460df0a61791b6be679d14a66af5e7d17294b5114f0450a9ed8ed0ccd60eace3c8614fb741373a17c55e0e84948d39a4098cd239bee8ac30be8d4d78df34194082c81be876c05f6cafc1841fb5b53dbc79950c6a95f36967ae24357fba82b0613575c7c8783223fa1063d353df0ff8fea923"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xc2, 0x6, 0x1, 0x0, "12e9526daef5df4116b5a97c51dc9411a89b11e5fadb605768addee1b81addcafaaca03b33453ce746c4338f15facbac08cdb5b4e154f894d3a8e56e7ce1a50d6a4613000828d2d2b5f3871645879937f60ae0d706aee59419dffa26d99b55ff250c2673f1bb2f556bc0d11dc94aeefa3128ed0db6a9eecd968ef1cb8a2924d9829b8437bff46d91867f99d7867b7adb2ec18841f30b937b0f4294d6fe705bcd8c8ad36a36830da3b93ec4e0408b5a733358a07fe3644b8273477d670617"}, @NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "f1d03a1cf960da0bf1fa2dde0508b5c07e81255c34f8979fde8f6fdc9b44128b3ef1d2120ecb3a01"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1148, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "7afe8b53b32ea2e5ec56f7271c69cc89b1ff316728f5b12329bb50500fe03e06c5f1bdbfbbb0d2552d343bc98aaf19fd5191f905fb8ef86c616b41f298bc6083d74b7d87a657e410e280"}, @NFTA_DATA_VALUE={0x37, 0x1, "0e2b7b6d88bc9e20047b9e1dce3dc89cc4f9abfa98e83b47b4ce65d67bbca2c5c2c288295296375f24ecd10040c3e2a565daaa"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "7f59f5289cf404592a103621357a56b5a49503a0fb35325d764f6019823e3c082dc421eb1152547048b7877a04109bac93fefef86fa23c3235561e0fae0992110516926550ed980e1d754c4dc1f400c1217da681e6dd061e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe, 0x1, "92f660682c34851350d0"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "f10518ccca510aea0c5d750c02c1a4ecb475456015cd6aa4543602000000000000002d53bb0e1b1b21321e76c8017d6ea7945427f98d56d6c7"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x140, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0xe, 0x7, 0x1, 0x0, "76e94cb3431298603b71"}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc17ff65b64ce05f8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_USERDATA={0x73, 0x7, 0x1, 0x0, "4a3496f3fc1f2d23e7cf50f594d85c5d840b77f444142bcf0223dadf87330308007c776d24ce10cba7a3ca53a7a010efa7bb704a2262112c6318f69aaf0da231f4c7f321a4e5fb87cb697d979c742b2bdc322fae572220a3f62a1ca720d8b0ffaeb7633aea57179223a5512bc56ced"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_USERDATA={0x29, 0x7, 0x1, 0x0, "9224ed04896b9b0d1e1ede770582dd094c9dfe33092b48eeab1f6c2f51c064587f422ca6be"}]}, @NFT_MSG_DELFLOWTABLE={0xf0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe6b4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x13c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xf9, 0xd, 0x1, 0x0, "770ce6c1946f2cd9bc6b54b6f6f97232b456c3c8b81b42b57a5ce37c63482c60f88eb537164126cab833e84edeb6df77d42edb9e94d97da84a98f8851fbda7db2770fba5abf7a83f518e292d04f213b84fc82e6fb696053c61450efc9ce58451260372cb8b19500c18f7903e4bae83e4cce3e52d2747e326a17efe5daf05725d3d94e31b16541ea0ebdee0fa25c0af6e0698315234176b524e18420a5b36a670d36b87c16a06b4a839687b6c0c3f24809bb3ac79aa302ceb76c49f0c07e278907531b05ddfe0bb94cc82aa3e14c7753debbb107ac9cb11f68e99b4838bcd5dd8f9d26fff53414ebbb35edfa87b3dcaaf0e72e9373d"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x616fd0dd}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1da8c757}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35ee8db0}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}]}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x6f, 0x6, "9c8597542dd0a008e2fe390f89ab2ea26b5d481d95df8734c56f059680e631b4100ab2128dccee1231f9a1b92026714ed6848dc49f58787835f39952ba732e3715e5bfdb145465650702d7e3d92da90569967f81b3f208d47df7b3abc15310e6ce52a41038981412d52f34"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x78a8627e}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ed845e1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43b58e5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b50}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x1, @mcast1, 0xf51}}}, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f00000024c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e10100", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00060000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) 24m17.827544864s ago: executing program 7 (id=3307): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40a80, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x62481, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000200)=0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000100)=0x1) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r4) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x5, 0x9, 0x7, 0xf5, 0xd1, 0x5, 0x3, 0x3, 0x80, 0x1, 0x0, 0x0, 0x3, 0x10, 0x4, 0x5}}) syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100060008060001080006040002bbbbbbbbbbbb00000000aaaaaaaaaabb0a010101c8bbb680a545c826450126a63f56c2104dbdff02b50d1d9c6a057dab6c64d5a8378304e96dffc115228252f7a88e52c85eabb9d863f9fc119399f125aa8ae5448caee3ddaceb80b2fe6f155b60e0aca12c03904b7b0364b10b71ec9e7e3349089101e620d20f3a3be6c22dce1bea279b43fd0fab7920156e95fa9c33ee64d54d55dc8452c18b51a2edd1a4f02b3f67f7c33f08b23f659b1815c7154f2a2f729c1e75e6466517e46ad09f96160fa2f7779d42fbe814cf02fb4275281a"], 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x19, 0x6, {}, {0xee00}, 0x7, 0xfffffffffffffffb}) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r5, &(0x7f0000000180)) 24m16.403234826s ago: executing program 7 (id=3310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18430000faffffff000000000000000018000000000000000000000000e2dec6d08677d8b2aec8cd9600002020207b1af8ff00000000bfa1000000000000070158ff21eaffffb702000008000000b7030000250f00008500000006000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7f7c}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xfffffffd}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYRES8=r2], 0xffda) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050001000700000073797a30000000000c520f1f88553c38a7371f4256da116000078008001240ffffffff11000300686173686e656ec15b89fe742c6e65740000000005000500070000000500040000000000"], 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000080601010000000000000000000000090900020073797a3100000000902663126ef07a0a38f41a0bcde07e019122bdc5f6723e9eed23a97e4de90c937cafc2e88895993328209651e15daf52d9e14c208a1f2a979ce4a7b14ecb4df54508df3978ae32a7c5754874f0af21f5664be2eaddb3dea8f0aa88037e2a3d070fef79e26b71c029ba2669fb4fb46b2d01b26815ea5b1abbc0cb13041a9b06d45d0b9884984a1012d9266d94e1a0bdd54c05217a3cd81a4c87a7217f26"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES16=0x0, @ANYRESOCT=r0], 0x5c}, 0x1, 0xf000, 0x0, 0x20000000}, 0x9234708fdae0f7c2) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) 24m13.88032036s ago: executing program 7 (id=3312): epoll_create1(0x0) truncate(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e21, 0xd, @private2, 0x71}}}, 0xe6) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01000000001fd7ddbbdd03000000"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x900, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xad52}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4085}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r4, 0x3, 0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0xcdf) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='f2fs_sync_fs\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 24m1.652444395s ago: executing program 38 (id=3306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003a00290200000000000000b26f2936d1d6c899e1fb965d3a3087000a000000"], 0x14}}, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000000300)=""/26, 0x1a}], 0x2, 0x7, 0x1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r5, 0x8925, 0x4000024001115) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) 24m0.128414459s ago: executing program 39 (id=3311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100f1070000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0xfffffffffffffdfc, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) r5 = fsopen(&(0x7f00000001c0)='nfs\x00', 0x0) fsmount(r5, 0x1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000160600000000e0ffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 23m57.380864009s ago: executing program 40 (id=3313): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113a00000000008510000002000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8b30, &(0x7f0000000040)={'wlan1\x00', @random="0011002000"}) 23m57.215364845s ago: executing program 41 (id=3312): epoll_create1(0x0) truncate(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e21, 0xd, @private2, 0x71}}}, 0xe6) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01000000001fd7ddbbdd03000000"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x900, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xad52}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4085}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r4, 0x3, 0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0xcdf) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='f2fs_sync_fs\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 15m57.014703265s ago: executing program 3 (id=4022): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800430000600000000000069078ac141400ac1e000144140a01000000000000000000000000000000004424ed636401010100000000ac1414e0dd0f00000000000000000000e00000020000000400000000", @ANYRES32=0x41424344], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000740)=0x410000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 15m56.359207843s ago: executing program 3 (id=4026): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/187) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/58, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x11c) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r6, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2028) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000180)=@filename='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x4, 0x1, 0x0, 0x0, {0x0, 0x40000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0x3, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130}}) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7}, 0x50) openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010101, 0x0, 0x2, 'fo\x00', 0x0, 0x20}, 0x2c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x2, 0x810, 0xffffffffffffffff, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000040)={0x6, 0x0, [{0x7}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x6}, {0x1, 0xfffffffb, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0xc0000000, 0x4, 0x1, 0x5, 0x3, 0x7f, 0x4}]}) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) 15m54.783370413s ago: executing program 3 (id=4031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004090}, 0x80) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"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", 0x1023}}, 0x1006) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r10, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 15m52.491543717s ago: executing program 3 (id=4037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, 0x0, 0x0) r6 = dup(r5) connect$802154_dgram(r6, &(0x7f0000000080)={0x24, @short}, 0x14) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x84) 15m50.301641804s ago: executing program 3 (id=4038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r5, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f00000018c0)=0xff, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(0xffffffffffffffff, 0x3) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000180)={r9, @in={{0x2, 0x0, @empty}}}, 0x90) recvmsg(r7, &(0x7f0000000080)={&(0x7f0000000240)=@generic, 0x80, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000600)=""/132, 0x84}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x8}, 0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 15m49.255205093s ago: executing program 3 (id=4042): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) r1 = dup2(r0, r0) write$FUSE_ENTRY(r1, &(0x7f0000000480)={0x90, 0x0, 0x0, {0x1, 0x0, 0x2, 0x4656559, 0xc32e, 0x9, {0x5, 0x690a, 0x3ffc00000, 0x80000000, 0xfffffffffffffffa, 0xb2, 0x0, 0x5, 0xb, 0xa000, 0x87f, 0x0, 0x0, 0xe6, 0x8}}}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8a0c3, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xaea2, &(0x7f0000000040)={[{0x2, 0x81, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r6, r2, 0x2) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x0, 0x0}) 15m33.01941551s ago: executing program 42 (id=4042): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) r1 = dup2(r0, r0) write$FUSE_ENTRY(r1, &(0x7f0000000480)={0x90, 0x0, 0x0, {0x1, 0x0, 0x2, 0x4656559, 0xc32e, 0x9, {0x5, 0x690a, 0x3ffc00000, 0x80000000, 0xfffffffffffffffa, 0xb2, 0x0, 0x5, 0xb, 0xa000, 0x87f, 0x0, 0x0, 0xe6, 0x8}}}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8a0c3, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xaea2, &(0x7f0000000040)={[{0x2, 0x81, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r6, r2, 0x2) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x0, 0x0}) 9m10.305462985s ago: executing program 6 (id=5040): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32], 0x5c}, 0x1, 0xf000, 0x0, 0x4044040}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x20000) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f00000002c0)={0x0, 0x1, @start={0x5}}) io_setup(0x2, &(0x7f0000000180)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r9, 0x0}]) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0xffffffffffffffff) 9m8.994095991s ago: executing program 6 (id=5043): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0x4, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x13971f5fab90d3e5}]}}]}, 0x3c}}, 0x20000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f0000001540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r4, 0x80047456, 0x20001100) 9m7.066287601s ago: executing program 6 (id=5046): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0xa083, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec0}], 0x1}, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m5.201513048s ago: executing program 6 (id=5048): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) dup(r1) r2 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 9m3.781450795s ago: executing program 6 (id=5055): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a310000000f080041007278650014003300766c616e30"], 0x38}}, 0x0) 9m3.394276916s ago: executing program 6 (id=5056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x800) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, &(0x7f0000002a40)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000240)={0xf0f01f}) (async) r5 = dup(r3) symlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500022f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6500000090780000"], 0x0) (async) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) sendmsg$inet_sctp(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="286d81866e6b77fbbd308e1683", 0xd}], 0x1, &(0x7f00000002c0), 0x0, 0x24008000}, 0xc040) 8m46.652263336s ago: executing program 43 (id=5056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x800) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, &(0x7f0000002a40)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000240)={0xf0f01f}) (async) r5 = dup(r3) symlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500022f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6500000090780000"], 0x0) (async) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) sendmsg$inet_sctp(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="286d81866e6b77fbbd308e1683", 0xd}], 0x1, &(0x7f00000002c0), 0x0, 0x24008000}, 0xc040) 6m5.114509956s ago: executing program 5 (id=5477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000600)={0x6, 0xff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000700)={0x3ff, "6af602d943660ddc18dfa84112e2fa8bff460142a670317bccffa83496a3593a", 0x20, 0x10, 0x2, 0x4}) r3 = syz_open_dev$vivid(&(0x7f0000000940), 0x2, 0x2) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000980)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000009c0)='rpc_socket_nospace\x00', r2, 0x0, 0xa}, 0x18) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) read$FUSE(r1, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000400, r5, &(0x7f0000002b00)) 6m4.1023304s ago: executing program 5 (id=5479): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket(0x22, 0x6, 0x93) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r3, 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x8000000000000000, 0x12) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000680)="b1fdf99049092a863c81e1f669023619c9bf4e2bd5db765f717a3057963f0e3f403dfc089eb27679bd7f0aaa345c123dd3b6c0ebb7895d3e13d6686616379ac77ce548c1ce9e5bec6d6b328c66fcd34c5503d36f735a02583d50753ecde7eda3bf9630436f604fe32ab7661eb11a27304344981dddeff5a27a53f71681d362f9cab48bf619122a3ff211485a63b8124bd517c99316cb1744c27e3a617b7cefa5880900c61a80824ab0a2611d243b91daf0cce03b0a1b409ad2", &(0x7f00000000c0)=""/18}, 0x20) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r6, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) 6m3.648376129s ago: executing program 5 (id=5481): io_uring_setup(0x22d6, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000e1ffffffffffff1c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r8 = creat(0x0, 0x0) close(r8) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYRESHEX=r8, @ANYBLOB, @ANYRESHEX=r7, @ANYBLOB="2c003d88a6b634532363fe8e1582442428b149e9f6518436eb2378d27ab8bca0ba1ac04defff6e20492c4c0e52ab5f57"]) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) (async, rerun: 64) socket$packet(0x11, 0xa, 0x300) (rerun: 64) 6m2.807094933s ago: executing program 5 (id=5483): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x80, 0x1, 0xfffffff8, 0x5, {{0x12, 0x4, 0x3, 0x20, 0x48, 0x68, 0x0, 0x1d, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@ssrr={0x89, 0x27, 0x50, [@dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @loopback, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101, @multicast2]}, @ssrr={0x89, 0x7, 0x80, [@dev={0xac, 0x14, 0x14, 0x43}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="35423cbb6fe8050000000000000000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000102c0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4, {0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000002500)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000580)="1d902b7aceacf6ebbec9f5a4a3adaf05dad59f4bfcb6a49d1a21bd4a9fcae538960b2076e4692589f5d67e0a405367de85012585a13b3c4c421ab9215c321092a5bed619b59650ff96792af9c0c0edb85de8739f66573fc04687318b943958fed8a132be8501195a3c5edec551dcacbd0358a386c514219bba3d29cf21a9fbd0108509734a0bbabeb5a4ad9607834539f6413632f51ef356d35afa1694412d9d3de21d", 0xa3}, {&(0x7f0000000040)="0f01dff2b62cacc01188c33be8ddf616800f774f4f65dd217fbab93f3ae5a5ed9990070e", 0x24}, {&(0x7f00000002c0)="f6afd1f82267f42e6c16c41d88e00af9ff61bffc803c7caed6069b773c15956f9fb2a63d509a362f092569", 0x2b}, {&(0x7f0000000640)="000febaa4cbe183bde49f1b2a759d087cfa6fe45eb6747a1c829d6eb33f072534065cfc378c7ac0e6299e7c05de948c6c3ada8434d0837fe39621cdef61499eb8b862254aa1a14bd70cc6b0176370eb8d072ce2dc19b2d15fc0584e78668c1f3658f8cf90ec9d6e0619ff99c1c06137fad0314fea5584e448d36509c61a74df46aee1756ad92777a56cfc02bd210ed9b2e2373dfb40a29b97e2b0ed289a12be2deb052c690ab1157ce51e07c1297c9a797beb3c8bbdc4c04376fcff14c5757b6da9c3d5e697cb9dc39eb43e6b2e6fa7a473eba49a0fcb7d4f4f33cde3367a237", 0xe0}], 0x4, 0x0, 0x0, 0x40010}}, {{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000007c0)="f572756eede5d8621a108679027afd482eb98c5a0b2502c5c982370e6f54ead50b8d7cdf857bfc5047c0a194bda100deb8c8e2457ad64c9656f9d628d3f7c23cf910c1bf4c2635ad6a8f79fd8ab967662e49e6a70c9e8ef86d40138c47b884d89649115a33e925e5ed68714a51c6a8e3a8fb6fa64f5d6596133e92d3e46822dd184397b63ec45e1f78e84d95b178c529f75bd99138255835bd56f5dbaeb7fc1b910c0c6dedc90ef76133068572e0436f157b0e6802cb24a29f9e0a23791e", 0xbe}, {&(0x7f0000000880)="91a1c39ac9553cd117b2a15d0f0a8a38882a2daa351d07b748fa62c2203fa24e0cdfa1f00f", 0x25}, {&(0x7f00000008c0)="3a8b5926052b1f00adfa93d814393fab3a789a4bd39ce04637ad811d2b8bca015b82c5e3efe2d9e204735461a31285232c9949b4eb57f45eafc803a95a8be0e6493cf04ea93a90c3a41d84ed3bfa2746f79299b624952e4bce8dffcd5be14595b7b8d2a90f74701200ab38fc62bba44d1d35b64d25ef966f53b36755ec9e9de4188dd2a48297ceca48f16b2abbb8cbe33353d891f38ed2ba942f6018a39dca65d6b65a80f2cabcc4d8a080fe05870bc7bb3655ccafb12846d552ed2b23b1df58110110f06b27c9879383437ca59a81c68ef5a1b387dd48f3fc02762af530b32f98acd3fa59804fb8c2aea8d619765851", 0xf0}, {&(0x7f00000009c0)="efa29d41dad4ead27a9f", 0xa}], 0x4, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r8}}}, @rights={{0x2c, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, r3, r4, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x70}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e80)="3d0e671e772ff78aabfa02f66ee978258f302d696074419f4b13e869dd06fb3f5cc0078ccf6b80b9feebc11172ff4a635f2347103c44c614bde7e70089ae2a7d98e31b72edcb091948fabd92f1ff0fb0a8f3d866421f5b8c62128e9061d135ae446940", 0x63}, {&(0x7f0000000f00)="7069ef738265", 0x6}, {&(0x7f0000000f40)="c14e33fba1c2a7359628fe89dc994b6a0bc011a69e957845afcc499d56d14e54f631ce6ed77da78b3269fb3d95905c24e1867ec6180a003ebe96d1ed8f0cf252af91fc8a88ac7178593a0b3169f7727c2f8683d821939ba796a0dda228c068efa215db75ff736069ebc69f6e85e2ba447a4a41604ac741a2702806826bcd716fb75f86153f8533224d1c7cf5b6e93bced1", 0x91}], 0x3, &(0x7f0000001040)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x24000000}}, {{&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x55, &(0x7f0000002380)=[{&(0x7f0000001100)="985bfa6a9a4395df46ff5dbe0d7fd7fd3e19a3e5b49f710ab95bebc52c4a2178f38b34ffc71a2f2db5c56b7cd892443ff9ea5bd646a01ed802a6eccc3620ac6d39569e5bad96ec375f979db50eeed67679dd991a1532ce9b0f63dc2f75ed130a57101351376fb29fb019a5536f7937c909d922544836a37e31c3f46aae35e2986c720364155453b26b819e4e82d7b4ac333dc4dbdd053f06d815eadd6d0854457b7fc44c5814ab12f3fe266ed5076561fa92ef99461cf401a6b0b0ee0d757726b124e15c98e6dd7627c7b8418a65ebb4360cd9afe13292e4ef0d0df9746b9aff88c7af64268b491edd6e98c6202f6d85ae2694c0ad049852ab5573535fd7717da275fed273f1f1e724817ccece34c8802ec7f6016c87a8b8c2beb0865e2e2872e56beb0723c2069082e8527570264c17e7dd035a8ff747988d2a070bc7ec7bae1cffe59b3307a8aaa86e27a6cb21e1bedf39a001bbd1defd73a35eb172f6d6d600270717b2f94e4089db6df5776faaa5fc571fc4f92b4819e2d07532b58107c72bda0ed098b176b20a37335d5921b74870dc03c4b2494ff47412b73476806091467fa7d09cefabdd9b505a99aab7a6ab16cad3bb7d268283909b8a58d7d144fbf156b7d120c4e30c0ba6ee6f84de620632a47791ed947065239840127c959755aba9880935640ab4788bb4a499510ec3c0f0b75279010048913ed8838cbf9df268686b0f0aef64e319edf7e37b665adc4b14e4b531f907306d57a4c9ea4b297e6a6995c8496773aeedac632593385ad142072f8070e57ead3c3d1a9c7c773fe5200c2c6dfba6f555572d827f1428a4fb8f293a151bb291054f2842fa724e7e7a19d9a43a4551b124fcd1626b314af314f0a30dbbb72404079b74a0993f98e89e313156e6de2858fedf4d4c4dc4f9c001b286b15470b78a7959f704697d058ef19e0f37b05b9f80ae8b11c7c6234df7da6edf99bd026a8bbb407780cf87bec1febb2a1b0b2a30c6339c35eefad10e9a4dd413abff07c34214d000109da46777cf7835088ce54046dce7c2e6c2e93142cb936f85660f746ae3c9636822adee978942843c0f662514f447b7acad8bf22197855802b12cfff00a93c9db0559f38c0b012c707d9b0f702ff825992f2fd6ff608b441876fadb4c62bcfba5d7912e37e298f16b560bb9045b1cd5033acce9fded0cb5cdda7193f8a0abcb81e25786a546708efbad070c9ab587cbf6102e3acfac4210da11c1ed0a74e2ad57c09a59bcd97fdbab307ebeb586f0edea10c08cb0cf7c358be6de25c0e628e758133a3fa8dd019822e45c196132e7809dcf8b5fc46e2b3e10f381399df452e9c33abcf924f70176f74cb651ab1596ae6df73f3263be55daee1436734aa8031167a37bd9d6c528e2e444b17d764d4b035d6abf5cafe8ab7bfabad63435bbef9ef65d434ac2884a3a3f2156bb52063423fc13d95399ad541640ba36e9a9a48fd210847ed0ee12ee3d2922750f0bfcb1823960e3bbfabfaf78bd5d110c7594c7383716c5c72cab09144d4eda058fc4ee70a03e299ff1f8d34f43e5580c029599f45890f96adc655677c4d8cad577118ea3affc48b262f05b55432da70f3d070c2c94e15c58b93916d7d82378349cf82046d2ebf8f42afee0af5b1b16fc6bf2c40a8a66880072d0dca8a2868cd37b1814ab666d3bde3a38063bad3e96ed1eb05b297a101d0adade47d0785545335d99c5b455f584b00d159b0e32ae71ba5846893647ac9027d195efacc1cc3d8e7129f6505f2b9d3bda894cd93755fb3cf6cf45506ddb704e4e4df7e32c555a57e3c1cdb76419ab3a243168e4f7428ce276937eb4f384d19b5154d86f216beafc1d45d97dcce293191ec226993d30e6b823dbfcc220ddc75b8b72f5b805a29e58e95c56adfb21470792bf1b8e7b5cc345e9582757934d2dc028347d0f5faa0b6c00494d46a2e4821a0261be5828f0d7bbe00bdb69a808f0d5bd641ccbd2df3d183e362da65bc4b75cb8447d2e4ed3ffc49758f4c61d631930d7c3f04c0667d51a5888c7c845564f85ed7e86a983141a847426e3958ebef3e025abc602e9b54a30a2a57c523aa94aecb61cee22e13a434fa740461d75ef4e41898df0463eb06c264149347447083941f74dca7a929ff2fe749a104f63996b4518dc216fbd946e5d6ede50e21ff93b34bc798b07d7ae8ef74b35ab91f12012cf3125a75f30ae9337f70c41ebac32b7355aa62fc68458de34a52157402147bb6ade46a50bdeeead5c066fdf5a2cdf3a774337eeef73dbd6d414d8fa4d0b3e6b0a8fddf95bafd117154b1d7b246a6da1c66e7d4bbdca9593b410901b5ecb20b4702df09fe77a9d00e3b7928e14ca8cc4ea946ddcda29e4ebb2ac056e64bc208be307c158cb7d29d88e8985c8940547020b28aa1333325e73d7b0f27c20583ec02ceb44f54b814de9919602c99292d77056d18000093091c48838afd2113396020426cdf4c746596fdf47c78619086ee379406a3c4c6155add7180653bedacf08ab12d3f66d001f726d16884677bc9e78a57d1f18cfad54818d0eca07caf33d0315120449045d1ce1ec9011ea008676d120e5cc33d90da168ec7e814389983d5a88cb4952f193c1e64f5e9b71b76cbe8395f42b1fdd60d92ba42b4bbf4d359c2d88c53a1a1a44cd32ba95e1905f66b6798f3bf8c1f19e3cb48da9c9d26fa93c09f31b46ec6c28b492b1faea0ee8405f39d233548adc17605623beb354aef292e74f5c8925e27cc83dd50e02b36a8604281ea2234fd427406fc1e6b0dc5ce232072b3fa5ba73dd3dca7420fe391e04db59c28eaa9c1d3c5808ca9d716b719b82ac2ebaee4bd2e86da903bf65562dd5ebf3ba48a4fb439a451e06373b8ea47d229fba3c31b643b33670055fdfce98152a55f629987d79811aa3e694fa1ed436b07f9d5043220184f88524338a1c42743d2aba3101262a3fa16b882dd72f5ff0d4b85aadd513728979c8aa35b3f58a91d17e51d595c4e59085c05bea6fead450d7049b72169add71cf3699827b2edf4671d1e9025142f1c9d3c47eef407282807986abb4e357f29f3274ab9aeab57ea1607163994a0d70c507e937d2512a2f2ffbca1818d85f69cac5bc5c939e0e808d2c092b864b7999be539c51ad0950bea8f10fb8fb9c7effa53f56bbdf62d547c984f876a88a63840871f2db053c5c053fb84c87b32d9117bb3c3bc05c2b8536fe5f6c419c97c875b7d42056092dca134e61cffa7ca16f796d73d4a78c00d093ec7f2dc7655064e9a1270d21f7dc0026d7d556413a1fe4ffc66bac39e95d8db0aba706511e514d53924980bdd4059b4fd97641508726c86d84ae80b350b4f138cdd34df9c4ea2275c83651e0b08972d0599a7d9125cb03c40403f3d7e430e7a673c97d82bb8ae54831f25c45638a46211d4986e3ed4b55a00daac05590da41f8f851996b78e8bc6494081ef32ddd734dbcfbe93cacec3ba032ac5648d2430897eeb391be4438b6bf42f66ae8a753eb441dbab5ce66a166be66f10d32333d68b67422804bb0bd8d1c3c5acd0085b1d17f83d27713bc95f78b389b22ecc513249c64788a7fdb3e09a977115ffa74b0da77c8e6aec9cbc27a443df4a92f59bc9850177680721dcc7596badc34ba57685cb2c5f3ab6d6d1fc342276b9c2e1f30fb04013198e4ebd73c2058cf354aab55cf283258d5c13f692436c13c4c40222a32713bcc318af4836962b3a2b4b8eede596e5a6c8e8a2a7b2dd6ac383cb0c07e2287fbaf90a729a24584dfa8ea88d102051d56f366cec6de8c6a40b6178fcf80ccbb5f4704b8e4147694417933ed2dbf3931cdb1ab47418b5b46dd5cb354a62367051e3b4dbfd271d2cc26f20741b7bd18596ff34e03d4de15278e798fed64d53232b5eea4b71fa9932f912b6ffd72a5c0e830fbcd342e07af2d4eb00668ea3a3073dff436115ec905bd9322d2f43ef04354982f91a3583aa7d46f346df299823167a4d2113515445b3898d9465738a97b4041272f7b0e9ccc1bd61097131d2db02636bd6a54f8d1a3ccb31946a16a7c353abd4db84c117deef85c948f9275308bce879f99725807dedb0be192556dec3d81d20ac7ad2c64fcd6d5874940b8be7145ee8834f3da8f65cefdba59338dc0a5f95d52f0cbc60da20cf08ce1d3e65eb3b0c45d44851f13311eb4c174eb946bcfa631a0988bdfad81fb43c22c84a21ef707051bab70316300237d2e3c63dd18f3c19f9ccc728bd536d6d01ac9ec719e638b22ec750a8eba26471aeabef377abf64f7c3bd191037549a1da5280ffd7b39eb83aca66451deb6c43366da433455e87ec6fc931e3fd9a693869e96aa5384687320729eed5db0efaeacada1d144585c64e2259a178d77b02c22aa60c7995a15ff063c172df389cb80875a3101cc5efac33f9add126e9f05ddc67d5050cb58f199ab348cd948a1b276609bc8f04424fa854b436686534d24c1cd0b510eb12063d55f8527ce57aa2fab6b30a42a1a9157137399af6a2129ed18c3a9ae8796488c5a62af536dca2032efadb25d68d28b687e5099a1e83ee4449f25b00019615c7dc0b72632b8d0e4810359df77a1b63fb8d527493a5d5eb5e39ac5bb9dffde2ff9fee702f43f615d05a167ebba29bef76bcba7e89bb3be91a2467fd317a8e734466559780f4b6a57a0a8b1a0d3faebf11e56b6ae511a7d07832499fe9c14a56ad63a628bd880354d066902b702b226250a0f625562dc3b4f03689635ac781ea78b77b3cc610c1216aab94ed99a37e1e558a90eb30f6a1e7e7ca07b97c0bfb57f5628c272fbf2ff0efadf0fe3aca44fcf8e4b1ca44ec25cf32ef969b77af288674b74c27c56c7da98f0be4f6160c49948e477e7c27ce8b8146bdd1c74a1e60cf593ba8f4a3eeee73b66a85a5813b53f59ac383f4e341485990fb8a8e6bb84cbdb4840e84a20c768bcd1f55d3ed566f835248af15391058f10a1fe6bce63833dad4407bdba9878064502d3767b5ed6cbe87f9fc4060fb0a04b7dc4aa2608f89faa2278117c30edb4f1a39d828721c0ef943ea98f62f0cd36327754d4e4792e1ccb719ea861555430bd19baf78dc4d9f634a6e0342f52f13d98aa637aaf45d9cc1c6dcc3e39b61bb7ddb385074224d3f2de1c834b70e5714376a0b86e66d997b32bd0ec45a5175138d532b00755daf515adee2d2555912bdc95a2716da69df038b832becdbb81ac734c91cb971b88cf5ad4dc2d9a5c83e43f9ab51358a0290a2ebf47eaa40ef0707283a4f3375d867e34f7b8d3556c6c9d7dfd192d15bab8df1e30e3576cbc177cc6480f704461d6ffb9c66083845ed084149d8e9f00ae4d96975c0a74002921e8bfaecc1d2f0ff88e2484b0c7915d14c9a1f36dd67d1502e52f5832e23f2773d9d0d32b1b87079edb83f8187301c3646fd1f990d94d9290832d6d54f5cfb22bc1a1c745c1245c862f5dc5a098e7d2ceb41a2447ef76958da2f9f0338df3386ec45e433a024f24d904c137d815b4d9ed74ad5a2423581eeb1c18393365fb5acc4fd8e42f62694251c598d182879aa6cf9468cbf9dcbe937a806ffbe840a8fde5c668d30ea5287058c42532b7a5142097bceb86a538013383a766d65c8fe9fb68a5fada53f3fcf2e81aff776856ada3690eeeff24208b081d3bed8b208b56415f5bac78cc1910b25ef89e9c8c0ffbbb7e646fe5317927cf545f66f53b22ffeb16bb1d055bde007172d6ef7bc3f2468d01da0d1b8bd881c0f5f573c84f3001c04c0c05089bb82e80da323edb806220734c0962e08", 0x1000}, {&(0x7f00000021c0)="28c6ab6cc3900cd328add2cb3feee18230998c851e8564960c7aad253b5a19f97dfc3cca", 0x24}, {&(0x7f0000002200)="3705ad4f92cf7ce5ac57c598b7980079402e90f0fcc07e438581d68aee3bff991e5c7926650e7b6ba79efdaa056e2b2d8ec17f2825038f446d2607e810a602af8e00af0417276f16a836d60b506dc1c700bff235f133679447e4a14d0830ef5deda4c4f9aaf0bac7a2617767573599800cf7cbc2cab92b26ad69aab36c063be0bb4f4a1d421af2b7655fd22d9dbb845d0e77d2bf14eea39bfbeb297a0d15b49cb8d57f1a101a0d894a08eaf343312d58f83cf4645d228b48e297b9186376667f136fd845da20ec326084f2afd2c9b949c7e6db9f91e35b172e76fe8732222ed2e37e0024", 0xe4}, {&(0x7f0000002300)="035d9323621175fcd5f9db69f6", 0xd}, {&(0x7f0000002340)="f8c55b9a0e4d2d5f87f7b5977499e70d4a1981604487d696ebb5849fcc866f374e35daaaba1be5bcf2f17dcc9d23ae", 0x2f}], 0x5, &(0x7f0000002480)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r8}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x4000000}}], 0x4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r10 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) socket(0x40000000015, 0x805, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f00000004c0)=0xe8) sendfile(r10, r10, 0x0, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r12, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r13 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 6m1.743356474s ago: executing program 5 (id=5488): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x170, 0x9403, 0x4, 0x170, 0x2c0, 0x2a8, 0x4a8, 0x3d8, 0x2a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'vxcan1\x00', 'macvtap0\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x10010003}}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local}}}, {{@ipv6={@remote, @remote, [], [], 'wlan1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) setuid(0xee00) pipe2(&(0x7f0000000040), 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x6, 0x0, r9, 0x0}]) syz_emit_ethernet(0xa3, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000095000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000b84009302352387adebca667280128bf76a542c44a7ae3eab1411b5f52a67b857baf0362f7aef654e8dbbf567991dd1ff9cbe0e16d926c9b0f131cb270450e8e7c509fc740a5e8ff589ed448e04b721d2cb9d6723b386a8f1ee797193faf636d00"/117], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x8, 0xa, 0x6, 0x0, @local, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x6, 0x2}}}}}}, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00}) 5m59.951144423s ago: executing program 5 (id=5491): r0 = socket$inet6(0xa, 0x2, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc0000001d0a01000000000000000000010000000900010073797a3000000000090002"], 0x4b0}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000001340)=@ethtool_eeprom={0x43, 0x6, 0x2, 0x45, "af0b7ff771a2e0f86b137726d46963fb9e024915df4bca8675f22accf2937ca869ccf2edb6d650b8ea02e0c409d765b7f78c61cd15d2bc2a31a174b35050734c11f2f52aa6"}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"9adcb69322dbf137671593662d4290ce", 0x0, 0x0, {0x1ff, 0x4}, {0x5, 0x1}, 0x2, [0x900000000000000, 0x6, 0x6, 0xfc00000000000000, 0x6, 0x2, 0x40000, 0xe, 0x5, 0x6, 0x4, 0xf2a, 0x2, 0xffffffff, 0x8000000000000001]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000013c0), 0x220000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) futimesat(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000340)={{r2}, r3, 0x8, @inherit={0x50, &(0x7f0000000140)={0x1, 0x1, 0xffffffffffffffff, 0xfffffffffffffff8, {0x1, 0x86a, 0x9, 0x8, 0x6}, [0x401]}}, @subvolid=0x5}) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xba, 0x0, 0x7fff0000}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x90000, &(0x7f00000001c0)='\xef\xfcZ\xf9@\xb7?\x1b\xbcu\xeao\x16\x04i\xa7\br\x8fx\x13\xabs\v\xd2\xa4t\xf1TA\x8b\xebW\xd4\"\x80k\x1d\x13\xa4v\xf9;\xf2\xee\x97\x01\x98/\x1b|B\x02Q\xa8\xbe\x9f](I3^\x95\xa66\xd4\xb7Q\xb3ZUO\xda\r\x88\xef9\xbb\x9f\x10\xe1\xc0T2\xe2Ew\xc0\x9eF\x1a?\x8c\x88#H;\xec\x83S\x87U\x1b\x18\x06\xe1HO8') 5m42.762386316s ago: executing program 44 (id=5491): r0 = socket$inet6(0xa, 0x2, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc0000001d0a01000000000000000000010000000900010073797a3000000000090002"], 0x4b0}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000001340)=@ethtool_eeprom={0x43, 0x6, 0x2, 0x45, "af0b7ff771a2e0f86b137726d46963fb9e024915df4bca8675f22accf2937ca869ccf2edb6d650b8ea02e0c409d765b7f78c61cd15d2bc2a31a174b35050734c11f2f52aa6"}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"9adcb69322dbf137671593662d4290ce", 0x0, 0x0, {0x1ff, 0x4}, {0x5, 0x1}, 0x2, [0x900000000000000, 0x6, 0x6, 0xfc00000000000000, 0x6, 0x2, 0x40000, 0xe, 0x5, 0x6, 0x4, 0xf2a, 0x2, 0xffffffff, 0x8000000000000001]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000013c0), 0x220000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) futimesat(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000340)={{r2}, r3, 0x8, @inherit={0x50, &(0x7f0000000140)={0x1, 0x1, 0xffffffffffffffff, 0xfffffffffffffff8, {0x1, 0x86a, 0x9, 0x8, 0x6}, [0x401]}}, @subvolid=0x5}) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xba, 0x0, 0x7fff0000}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x90000, &(0x7f00000001c0)='\xef\xfcZ\xf9@\xb7?\x1b\xbcu\xeao\x16\x04i\xa7\br\x8fx\x13\xabs\v\xd2\xa4t\xf1TA\x8b\xebW\xd4\"\x80k\x1d\x13\xa4v\xf9;\xf2\xee\x97\x01\x98/\x1b|B\x02Q\xa8\xbe\x9f](I3^\x95\xa66\xd4\xb7Q\xb3ZUO\xda\r\x88\xef9\xbb\x9f\x10\xe1\xc0T2\xe2Ew\xc0\x9eF\x1a?\x8c\x88#H;\xec\x83S\x87U\x1b\x18\x06\xe1HO8') 2m53.706762439s ago: executing program 8 (id=5998): keyctl$read(0xb, 0x0, &(0x7f0000000480)=""/21, 0x15) ioperm(0x0, 0xe4d, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0004001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1d6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000194c0)=""/102395, 0x18ffb) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) 2m52.607715422s ago: executing program 8 (id=6001): pipe2(&(0x7f0000000000), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) semctl$GETPID(0x0, 0x0, 0xb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 2m51.72526696s ago: executing program 8 (id=6004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="506d2e2cb7485c6a090000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7084000000000009b1af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000006d77f734c14da5b0a08f1ac5cb096042164e9ce624ae9b43bb9b43ab29740da9123c6adb84bd2821140763b23b28d81ab75cb3a6c73c2bfd5055bd5eb4411e987a8f4168d0ac6ae42232f222a68362aa2c845880442dd13ee45bc2bbd9e82891b56ca603f4a5397017b78932bacf82e0ff2378c1b8fef3ffb290df734083e923df5e5b73fb427f67ba8038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x10}}]}}]}, 0x3c}}, 0x0) 2m48.971301315s ago: executing program 8 (id=6010): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socket(0x22, 0x6, 0x93) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r1, 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000380)=0x8000000000000000, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000680)="b1fdf99049092a863c81e1f669023619c9bf4e2bd5db765f717a3057963f0e3f403dfc089eb27679bd7f0aaa345c123dd3b6c0ebb7895d3e13d6686616379ac77ce548c1ce9e5bec6d6b328c66fcd34c5503d36f735a02583d50753ecde7eda3bf9630436f604fe32ab7661eb11a27304344981dddeff5a27a53f71681d362f9cab48bf619122a3ff211485a63b8124bd517c99316cb1744c27e3a617b7cefa5880900c61a80824ab0a2611d243b91daf0cce03b0a1b409ad2", &(0x7f00000000c0)=""/18}, 0x20) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r6, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) 2m47.764344768s ago: executing program 8 (id=6015): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="330200007d02000005f2000000040000000001000000050000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e10f00cfc26dd7c5b499bfb42b93807e8b5a5d00f8f669fb716dcf315ecaf385409ac65b9408678c2c3ba61d52c36cde7b07dbdab2884baf05007e04e69db0c3ca00000000000047ec21cabff20f9c1cbe36f4fd1a4cc29e953fa5e052157480e8000000000000000000000000000000002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f455daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0cda77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/549, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x233) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) recvmmsg(r6, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/75, 0x4b}], 0x1}, 0x9}], 0x1, 0x2102, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2m45.664081636s ago: executing program 8 (id=6019): socket$isdn(0x22, 0x2, 0x26) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x11, 0x6, 0x0, 0x22f, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0xa, 0x0, 0x0, 0x70bd28, 0x3505}, @sadb_lifetime={0x4, 0x4, 0x40, 0x7, 0x6, 0x47}, @sadb_lifetime={0x4, 0x3, 0x2, 0x100, 0x1, 0x3de}, @sadb_x_sec_ctx={0x11, 0x18, 0x3, 0xc0, 0x7c, "a1bcd2511cd4171e89246941f40b23a967e2c0dff49713c69d2033b883d7f5b4349eed7c545e7f4e0d3bde5dbfadc7a920ece2f5e97bf61cb9f8766d3b0b6c1ccb0ecf13f62ad05b8d71a79e2015ecbca513b032b6773d89f3744b0ebc2adfc39c93a34aeaaf7f9551768ae29bdc9a188668cddaa78f6b2f3417d5e4"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bb5, 0x51, {0x6, 0x6c, 0x6, 0x9, 0x0, 0x2, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100}}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x1178}}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r2, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r3}) 2m29.35338586s ago: executing program 45 (id=6019): socket$isdn(0x22, 0x2, 0x26) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x11, 0x6, 0x0, 0x22f, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0xa, 0x0, 0x0, 0x70bd28, 0x3505}, @sadb_lifetime={0x4, 0x4, 0x40, 0x7, 0x6, 0x47}, @sadb_lifetime={0x4, 0x3, 0x2, 0x100, 0x1, 0x3de}, @sadb_x_sec_ctx={0x11, 0x18, 0x3, 0xc0, 0x7c, "a1bcd2511cd4171e89246941f40b23a967e2c0dff49713c69d2033b883d7f5b4349eed7c545e7f4e0d3bde5dbfadc7a920ece2f5e97bf61cb9f8766d3b0b6c1ccb0ecf13f62ad05b8d71a79e2015ecbca513b032b6773d89f3744b0ebc2adfc39c93a34aeaaf7f9551768ae29bdc9a188668cddaa78f6b2f3417d5e4"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bb5, 0x51, {0x6, 0x6c, 0x6, 0x9, 0x0, 0x2, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100}}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x1178}}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r2, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r3}) 15.200083795s ago: executing program 9 (id=6382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xc0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) r3 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20018800}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 13.058116482s ago: executing program 9 (id=6384): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xa040) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x1, 0x0, 0x10001}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r3, 0x0, 0x2fff, 0x2, &(0x7f0000000240)='\x00~', 0x4}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) madvise(&(0x7f0000062000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) syz_usb_ep_read(r4, 0x40, 0x7f, &(0x7f0000000000)=""/127) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x40187013, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x9, 0x4f}) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000380)={0x10b, 0x1, 0xffffffffffff0707, 0x7, "969684ab70591290030839647579df59517c7c7eab012027149a6f0c561d8487f98531553c5f326645f0f82b4bd7d32f0b419e31da199750cb2c51526eb8bb93c8393667894f03af6a83c33ee281e932190311a075850902fa21990314680477d3ad4996eb4c359f1c259b9c149e0a7893ffc56014af0bcc002c677568b711d49ccf896b8029668061e84d40a68c2ad126dcc513245ae58c8ede800ac0dd8f26f4080efb967238b6110b0178250bb899dae8b641820c8263bc3d5fc0874d0648cf2a7dea15a756c4073cfab0f137678fcc36ac6c3a884fceb556938b5e932349875021b63f4cf1ea7398a704850e672337d2bd"}) 10.876331486s ago: executing program 9 (id=6389): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf91000000000000560700000000e0ff8400000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.897706346s ago: executing program 0 (id=6396): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0/file0\x00', 0x4000, 0x185) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/cpu/#/msr\x00'}], 0xa, "0d00e12ea005c6f5603faedbd50048c027b9dd19dc84e7b494bfca8fa533664bb20a9ed4f6222a20657ad02550b32316f9e092db67ed51a0057c8988d6808a60ff2e9d13cab120bfae31072a4d250733caeefcb110ea6ff528670d6aeb87b101e96d1b4297c621c50674443352419c568b0394e3da7499be7f7140e09bc381cddc"}, 0x10c) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7.479435447s ago: executing program 4 (id=6397): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x16060, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r3, &(0x7f0000000040), 0x0) socketpair(0x1d, 0x4, 0x9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x40000, 0x0, 0x1, 0x1, 0x3f}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) 7.222148224s ago: executing program 9 (id=6398): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x3f, 0x0, 0x0, 0xc0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x21, &(0x7f00000002c0), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) wait4(0x0, 0x0, 0x8, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x7, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r8, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000080002"], 0x2c}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146ead}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749bc}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r12, @ANYRESHEX=r11, @ANYRES32=r2, @ANYRESOCT=r12], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.095471524s ago: executing program 4 (id=6401): pipe2$watch_queue(&(0x7f0000000280), 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x519302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x947e}, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) 5.841031991s ago: executing program 2 (id=6402): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socket(0x22, 0x6, 0x93) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r1, 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000380)=0x8000000000000000, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000680)="b1fdf99049092a863c81e1f669023619c9bf4e2bd5db765f717a3057963f0e3f403dfc089eb27679bd7f0aaa345c123dd3b6c0ebb7895d3e13d6686616379ac77ce548c1ce9e5bec6d6b328c66fcd34c5503d36f735a02583d50753ecde7eda3bf9630436f604fe32ab7661eb11a27304344981dddeff5a27a53f71681d362f9cab48bf619122a3ff211485a63b8124bd517c99316cb1744c27e3a617b7cefa5880900c61a80824ab0a2611d243b91daf0cce03b0a1b409ad2", &(0x7f00000000c0)=""/18}, 0x20) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r6, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) 5.750151029s ago: executing program 4 (id=6403): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001600)=""/4099, 0x1003) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x18000, &(0x7f0000000000)="dfa340f31e69723c8ad422645f870cead8b3130bd549145ed5e36fa4958952f4ff82fb11a7487f6e2fc1dc", 0x2b, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="5a4acc3bb9508130e0813c523a70057abadeaa30b1343674237465522015d4537090764656f7fdd8afa9e26e9cfba948603830505494d5846d11e3e0c3d8d5ffad3e6a305015e0e6719a1fd4f1ab26f08527e813f948139fcf563ee8d47c2234b42956ddab640fbb") io_uring_enter(0xffffffffffffffff, 0x43bb, 0x9177, 0x0, &(0x7f0000000380)={[0x8]}, 0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f00000002c0)={0x0, 0x0, 0x1c, 0x9, 0x14c, &(0x7f0000000740)="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"}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800010027bd700000000000020000200103fe020000000008000400", @ANYRES32=r8, @ANYBLOB="f8020000095b1a5b"], 0x2c}}, 0x0) 5.735652014s ago: executing program 0 (id=6404): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00003bd000/0x3000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66420f38806b0426f30f09450f01c965670f01c466b893008ed8b8010000000f01d90f0dbc5c70000000b929030000b88035b747ba000000000f300f20e035400000000f22e0420f01c9", 0x4a}], 0x1, 0x1, &(0x7f0000000140), 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f0000000040)=[0x1, 0x2, 0x8], 0x0, 0x0) 5.655527954s ago: executing program 1 (id=6405): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000280)={{0x80}, 'port1\x00', 0xe3, 0x1e0c07, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x7, 0xff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x2, r4}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x50, r3, 0x1f4bb000) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000020605000000000000000000000000001200648a5053a18f42803a69702c6d616300000005000400000000ff0900020073797a30000000001c0007800c00be2613172102938d80020c000180080001400000000005000500020000000500010006001a00"], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$KVM_SET_CPUID2(r8, 0xc048aeca, &(0x7f0000000080)=ANY=[@ANYRES16=r5]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 5.189784996s ago: executing program 2 (id=6406): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 5.127960279s ago: executing program 1 (id=6407): r0 = socket$kcm(0x2, 0x3, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x248100, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x444240, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [], [0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2a00a9, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r4, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x7, 0x9, 0x7fffffff, 0x4002, 0xe, "e8ac4b0400000000886eb9fc28257e00"}) setresuid(0xee00, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000000)=[r7]) setregid(0xffffffffffffffff, r7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r6, r7}}, './file0\x00'}) accept4(r0, 0x0, &(0x7f0000000000), 0x80800) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000000004000000000700"], 0x10}, 0x4008804) msgget(0x0, 0x10c) 4.522469008s ago: executing program 2 (id=6408): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) flock(0xffffffffffffffff, 0x5) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xfffffffffffffffd) getcwd(&(0x7f0000000000)=""/176, 0xb0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121480, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x621d, 0x10100}, &(0x7f00000002c0), 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x0, "4c06fc83a3d66b2691be598712154366fd6fb1855bd177c54c02ed6b8c51910d"}) sendmsg$tipc(r2, 0x0, 0x40044) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r5, 0x0, 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2}}, 0x20) 4.33884537s ago: executing program 1 (id=6409): capset(0x0, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa442, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 4.277803462s ago: executing program 0 (id=6410): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="850000007e000000950000000000000008395e79f3ccd5"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) 3.64715844s ago: executing program 2 (id=6411): r0 = io_uring_setup(0x7945, &(0x7f00000000c0)={0x0, 0x608d, 0x800, 0x2, 0x106}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000380)={0x10000, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/137, 0x89}], &(0x7f0000000340)=[0x4, 0x5, 0x7, 0x81, 0x1, 0x0, 0x7, 0x2], 0x1}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000040)="f20f2dd6b9750900000f3264e00d662e0f00da66b85e008ee8640f3266ba4200b800680000efd9ea0f2130363e660f3882be19cc29ec", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x633, 0x0, 0x1, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, @in6=@local, {0x0, 0x10}, {}, {0x40}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x9c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.55974757s ago: executing program 1 (id=6412): socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x2008, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, [0x0], [0xfd, 0x5, 0x40, 0x10], [0x0, 0x0, 0xa, 0xfffffff5], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sync_file_range(r4, 0x0, 0x0, 0x3) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3}) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.367396991s ago: executing program 4 (id=6413): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000f0000000000000000000000000000056293afdcd7e81405fb2ae52c2215d888c6adfa214c354f0dc7d49150f61ac3c525a1add7f63841f3695834a37000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/fscreate\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = memfd_create(&(0x7f0000000080)='/dou!,\xd0W\xe4\x9b;6\xdc\xb6\f\x00\x00\x00\x00\x00\x00\x03\x87:\xbe\xf1\xe9\xdb\xae\xb0V\xf0!\xbdw\x1di\x04\xfd\xc5\xe1\xca\xc6jd\xfds\xcc\x96_\x13\xe7\xdb\xdd>\xcc\"3,\xc0l\x9a+tL\x92\xbbs\xd0q\xc9\xe2\xa8;\xd6\xb5P\x13\xb8?\xefZ\xcc\x84\xa1\xb4\xad\x848\a\xe2y\xb7\v\xd6v\x00\xe9\xe1\x814X\xa5\x85\x018\x82\xff\x01\x00\x00\x00\x86j\x83l\xe0\xd7\x8cEN\a\x00\x00\x00\x87z\xc3,\x99@\x8b\x7f\x1c\xb4\xa1\x811\xe2)(e:\xe3\xb6I\xaa\x9e\x8e\x0ep\xb4%\xcd\x8e\xb6\'\x8b$\xee\x8f\xdf\x12z\x99\x97\x03\x88m\b\xa4\xb2\xa9\x11g9\xd5\xbc\x1d2\xe1\xee\xde\xc6\xc2Q\xc3\x18\xc5`\xae\x00\x80a^\xbf\xb9\xeb\xc4\x191\xday\xfce\x84.\xb4\xb8(\x13\x88\x9a+\xab_\xe3\xf5IQ\xa1msBG4\x98\xddm\xd5\x02\x87\xb8\x03\xb5\x03\xbaj\xe7~S\xd7\xeb-\x98\x1b\x8eq]\x16\x9b,lc\xbbS\xd5\x87[\xe7\xe0j\x1a{x\xe5\xd0\r\xb9?\xa4\x10\xdf3\xfa[c \x81\x13-4\xf2v\x80\x12\xea\xc1u\x01\x9bY\x91\xb6\xad\x8f\xb8\xc6\xfb\x91\x01#\xd7g<)\xc6!\xd0\x96#\xf9{\xd3o\xf1\xbdJwk\xe0\xbbL,\x19\x8c\xb7,Y\xb9\x8e\xe98\x1f3\xdfS\\\\{6\xbbH\x8a\x96]\xa6\x81!@\x1c\xcc\xb1\xb9\xd9,\xc0\xa1\xe8i\xe8\xbcvz\xc3\x90H\xdf\xf7W\x7f+\xca\x00\xfc\xed:\xf3\\\x0fVr\x9f=\xdf\xba\xdb\x16\x8bAy\xc6\xeb\xd1\x00\xea\xb8\xc0\xd1mj\xaa\xd5\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\xea\x03\x12\xa2q)\xa0kUJh\x8fy\x96\t\xb8\xa4\xdaW$WkL~\x95\x81l*\x872!\xc7\x18\x12\x8fL\x81\xe0\x069\\\x1b&\xca\x904(', 0x7) fallocate(r7, 0x0, 0x0, 0x200401) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c000000296e644c8a7d6500002f9078ac1e0001e00000010000655800189078040000000000000086ddffff00000000"], 0xfdef) pipe(&(0x7f0000000100)) socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 3.088529329s ago: executing program 9 (id=6414): pipe2$watch_queue(&(0x7f0000000280), 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x519302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x947e}, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) 2.942662602s ago: executing program 2 (id=6415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x0, 0xf0, 0x0) 2.532810661s ago: executing program 0 (id=6416): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettaction={0xb0, 0x32, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8000}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x75b}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x81) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x34, r5, 0x1, 0x0, 0x800, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x34}}, 0x0) 1.926273871s ago: executing program 4 (id=6417): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000002005000005e20300000000000900820073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 1.878775291s ago: executing program 9 (id=6418): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x280, 0x150, 0x150, 0x280, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9], 0x0, [], 0x0, 0x0, 0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) modify_ldt$write(0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mincore(&(0x7f0000d80000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/76) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xffffffff}]}, 0x2c}}, 0x40004) bpf$MAP_CREATE(0x0, 0x0, 0x14) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00220b000000900bc074069347"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.849131508s ago: executing program 1 (id=6419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) (fail_nth: 4) 1.687454565s ago: executing program 2 (id=6420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x1000, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203243, 0x0, [0x2], [0x800], [], [0x0, 0x1]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc91, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x8, 0x32dd80) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) setitimer(0x1, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff00"}) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) inotify_init1(0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000000000, 0x100}, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x8, 0x5}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000480)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r5, r4}) pipe2$9p(&(0x7f0000000100), 0x800) 1.483769114s ago: executing program 0 (id=6421): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) flock(0xffffffffffffffff, 0x5) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xfffffffffffffffd) getcwd(&(0x7f0000000000)=""/176, 0xb0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121480, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x621d, 0x10100}, &(0x7f00000002c0), 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x0, "4c06fc83a3d66b2691be598712154366fd6fb1855bd177c54c02ed6b8c51910d"}) sendmsg$tipc(r2, 0x0, 0x40044) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r5, 0x0, 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2}}, 0x20) 1.259720164s ago: executing program 1 (id=6422): capset(0x0, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa442, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 652.174181ms ago: executing program 4 (id=6423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000ffffff000000000b00", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000000000005000c"], 0x44}, 0x1, 0x2}, 0x0) 0s ago: executing program 0 (id=6424): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x6) getpid() sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a", 0x11}], 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r5, 0x125f, 0xfffb) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) accept$netrom(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000340)=""/95, 0x5f, &(0x7f00000003c0)=""/206, 0x1, 0x3}}, 0x48) kernel console output (not intermixed with test programs): 9][T28497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2572.870686][ T29] audit: type=1400 audit(2000000837.734:106878): avc: denied { create } for pid=28558 comm="syz.0.6139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2572.877341][T25020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2572.914878][ T5867] dvb-usb: schedule remote query interval to 400 msecs. [ 2572.941184][T25020] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2572.956044][T25020] usb 2-1: media controller created [ 2572.969940][ T29] audit: type=1400 audit(2000000837.781:106879): avc: denied { write } for pid=28558 comm="syz.0.6139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2572.990249][ C0] vkms_vblank_simulate: vblank timer overrun [ 2573.005308][ T5867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2573.043332][T25020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2573.079119][ T5867] usb 10-1: USB disconnect, device number 8 [ 2573.095035][ T29] audit: type=1400 audit(2000000837.837:106880): avc: denied { accept } for pid=28558 comm="syz.0.6139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2573.114736][ C0] vkms_vblank_simulate: vblank timer overrun [ 2573.229945][ T29] audit: type=1400 audit(2000000837.950:106881): avc: denied { nlmsg_write } for pid=28558 comm="syz.0.6139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2573.285625][T28497] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2573.335912][ T5867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2573.352294][ T29] audit: type=1400 audit(2000000837.968:106882): avc: denied { read write } for pid=26412 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2573.392114][T28497] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2573.443698][T28497] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2573.497514][ T29] audit: type=1400 audit(2000000837.968:106883): avc: denied { read write open } for pid=26412 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2573.548184][T28566] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input120 [ 2573.560581][T28497] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2573.637336][ T29] audit: type=1400 audit(2000000837.968:106884): avc: denied { ioctl } for pid=26412 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2573.786508][ T5867] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2573.979902][ T5867] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2574.012670][ T5867] usb 10-1: config 0 has no interfaces? [ 2574.039996][ T5867] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2574.090227][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.147188][ T5867] usb 10-1: config 0 descriptor?? [ 2574.232390][T25020] az6027: usb out operation failed. (-71) [ 2574.248323][T25020] stb0899_attach: Driver disabled by Kconfig [ 2574.276717][T25020] az6027: no front-end attached [ 2574.276717][T25020] [ 2574.296702][T25020] az6027: usb out operation failed. (-71) [ 2574.312886][T25020] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2574.333175][T25020] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input121 [ 2574.377993][T28497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2574.402574][ T5867] usb 10-1: USB disconnect, device number 9 [ 2574.420307][T25020] dvb-usb: schedule remote query interval to 400 msecs. [ 2574.433252][T25020] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2574.458065][T25020] usb 2-1: USB disconnect, device number 75 [ 2574.601741][T25020] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2574.612177][T28497] 8021q: adding VLAN 0 to HW filter on device team0 [ 2574.686026][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2574.693103][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2574.739503][T14222] bridge0: port 2(bridge_slave_1) entered blocking state [ 2574.746604][T14222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2577.938137][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 2577.938153][ T29] audit: type=1400 audit(2000000842.907:107164): avc: denied { read } for pid=28596 comm="syz.1.6149" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2577.969102][T28599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2578.007997][ T29] audit: type=1400 audit(2000000842.907:107165): avc: denied { read open } for pid=28596 comm="syz.1.6149" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2578.027896][T28598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2578.123043][ T29] audit: type=1400 audit(2000000842.935:107166): avc: denied { ioctl } for pid=28596 comm="syz.1.6149" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2578.220813][ T29] audit: type=1400 audit(2000000842.954:107167): avc: denied { ioctl } for pid=28596 comm="syz.1.6149" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2578.246625][ T29] audit: type=1400 audit(2000000842.963:107168): avc: denied { create } for pid=28600 comm="syz.9.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2578.891860][ T29] audit: type=1400 audit(2000000842.973:107169): avc: denied { read } for pid=28595 comm="syz.4.6148" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2578.891899][ T29] audit: type=1400 audit(2000000842.973:107170): avc: denied { read open } for pid=28595 comm="syz.4.6148" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2578.891932][ T29] audit: type=1400 audit(2000000842.973:107171): avc: denied { ioctl } for pid=28595 comm="syz.4.6148" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2578.891965][ T29] audit: type=1400 audit(2000000843.019:107172): avc: denied { ioctl } for pid=28595 comm="syz.4.6148" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2578.891999][ T29] audit: type=1400 audit(2000000843.029:107173): avc: denied { execmem } for pid=28600 comm="syz.9.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2578.892715][T28605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2578.892858][T28605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2579.831357][ T5866] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2580.013159][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 2580.063412][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2580.817578][ T5866] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2580.996255][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.005067][ T5866] usb 5-1: Product: syz [ 2581.011487][ T5866] usb 5-1: Manufacturer: syz [ 2581.016236][ T5866] usb 5-1: SerialNumber: syz [ 2581.027126][ T5866] usb 5-1: config 0 descriptor?? [ 2581.053904][ T5866] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2581.861763][T28626] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 2583.237092][T28631] FAULT_INJECTION: forcing a failure. [ 2583.237092][T28631] name failslab, interval 1, probability 0, space 0, times 0 [ 2583.264623][T28631] CPU: 1 UID: 0 PID: 28631 Comm: syz.0.6156 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2583.275404][T28631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2583.285458][T28631] Call Trace: [ 2583.288735][T28631] [ 2583.291667][T28631] dump_stack_lvl+0x16c/0x1f0 [ 2583.296354][T28631] should_fail_ex+0x497/0x5b0 [ 2583.301044][T28631] ? fs_reclaim_acquire+0xae/0x150 [ 2583.306170][T28631] should_failslab+0xc2/0x120 [ 2583.310851][T28631] __kmalloc_noprof+0xcb/0x510 [ 2583.315614][T28631] ? bitmap_find_next_zero_area_off+0xb0/0xd0 [ 2583.321686][T28631] __vb2_queue_alloc+0x238/0x1230 [ 2583.326715][T28631] ? trace_kmalloc+0x2d/0xd0 [ 2583.331315][T28631] ? vid_out_queue_setup+0x90a/0xcd0 [ 2583.336619][T28631] vb2_core_reqbufs+0xa73/0xfb0 [ 2583.341479][T28631] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2583.346868][T28631] __vb2_init_fileio+0x3f3/0x1110 [ 2583.351897][T28631] ? vb2_fop_write+0xe3/0x3e0 [ 2583.356585][T28631] __vb2_perform_fileio+0x9de/0x1620 [ 2583.361883][T28631] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 2583.367603][T28631] ? iovec_from_user.part.0+0x7e/0x130 [ 2583.373082][T28631] vb2_fop_write+0x202/0x3e0 [ 2583.377684][T28631] v4l2_write+0x226/0x360 [ 2583.382026][T28631] ? __pfx_v4l2_write+0x10/0x10 [ 2583.386887][T28631] vfs_writev+0x6da/0xdd0 [ 2583.391232][T28631] ? find_held_lock+0x2d/0x110 [ 2583.396019][T28631] ? __pfx_vfs_writev+0x10/0x10 [ 2583.400878][T28631] ? find_held_lock+0x2d/0x110 [ 2583.405656][T28631] ? __pfx_lock_release+0x10/0x10 [ 2583.410683][T28631] ? trace_lock_acquire+0x14e/0x1f0 [ 2583.413933][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 2583.413945][ T29] audit: type=1400 audit(2000000848.033:107358): avc: denied { create } for pid=28632 comm="syz.1.6158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2583.415887][T28631] ? __fget_files+0x206/0x3a0 [ 2583.433989][ T29] audit: type=1400 audit(2000000848.052:107359): avc: denied { connect } for pid=28632 comm="syz.1.6158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2583.441583][T28631] ? do_writev+0x133/0x340 [ 2583.455556][ T29] audit: type=1400 audit(2000000848.052:107360): avc: denied { write } for pid=28632 comm="syz.1.6158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2583.465905][T28631] do_writev+0x133/0x340 [ 2583.465937][T28631] ? __pfx_do_writev+0x10/0x10 [ 2583.498850][T28631] do_syscall_64+0xcd/0x250 [ 2583.503363][T28631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2583.509262][T28631] RIP: 0033:0x7fa80417ff19 [ 2583.513676][T28631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2583.533284][T28631] RSP: 002b:00007fa804ed5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2583.541701][T28631] RAX: ffffffffffffffda RBX: 00007fa804345fa0 RCX: 00007fa80417ff19 [ 2583.549674][T28631] RDX: 0000000000000002 RSI: 0000000020008200 RDI: 0000000000000003 [ 2583.557646][T28631] RBP: 00007fa804ed50a0 R08: 0000000000000000 R09: 0000000000000000 [ 2583.565615][T28631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2583.573585][T28631] R13: 0000000000000000 R14: 00007fa804345fa0 R15: 00007ffdea74fe48 [ 2583.581572][T28631] [ 2583.636093][ T29] audit: type=1400 audit(2000000848.220:107361): avc: denied { create } for pid=28633 comm="syz.9.6157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2583.707353][ T29] audit: type=1400 audit(2000000848.239:107362): avc: denied { read write } for pid=28279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2583.785261][ T29] audit: type=1400 audit(2000000848.239:107363): avc: denied { read write open } for pid=28279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2583.866366][ T29] audit: type=1400 audit(2000000848.239:107364): avc: denied { ioctl } for pid=28279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2583.944034][T28638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6159'. [ 2583.955831][ T29] audit: type=1400 audit(2000000848.239:107365): avc: denied { sys_module } for pid=28497 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2584.000367][ T29] audit: type=1400 audit(2000000848.239:107366): avc: denied { module_request } for pid=28497 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2584.038840][ T29] audit: type=1400 audit(2000000848.267:107367): avc: denied { connect } for pid=28633 comm="syz.9.6157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2584.103815][T28641] overlayfs: failed to resolve './file0': -2 [ 2584.257378][ T5866] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2584.498165][T17704] usb 5-1: USB disconnect, device number 44 [ 2584.582526][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 2584.660152][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2584.693779][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2584.770553][ T5866] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2584.779599][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.835240][ T5866] usb 2-1: Product: syz [ 2584.839421][ T5866] usb 2-1: Manufacturer: syz [ 2584.865643][ T5866] usb 2-1: SerialNumber: syz [ 2584.887793][ T5866] usb 2-1: config 0 descriptor?? [ 2584.905193][ T5866] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2584.935914][ T5866] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2584.952539][T28652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2585.528347][T28497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2585.834500][T28662] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2585.904359][T28497] veth0_vlan: entered promiscuous mode [ 2585.914710][T28662] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2585.923159][T28662] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2586.014577][T28497] veth1_vlan: entered promiscuous mode [ 2586.027162][ T5866] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2586.065213][ T5866] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2586.220436][T28497] veth0_macvtap: entered promiscuous mode [ 2586.281868][T28497] veth1_macvtap: entered promiscuous mode [ 2586.315116][T28638] batman_adv: batadv0: Adding interface: geneve2 [ 2586.336856][T28638] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 2586.500446][ T5866] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 2586.538988][ T5866] em28xx 2-1:0.0: No AC97 audio processor [ 2586.561987][ T5866] usb 2-1: USB disconnect, device number 76 [ 2586.565699][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2586.570335][ T5866] em28xx 2-1:0.0: Disconnecting em28xx [ 2586.604026][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2586.626078][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2586.661322][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2586.665562][ T5866] em28xx 2-1:0.0: Freeing device [ 2586.713136][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2586.759608][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2586.785242][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2586.861314][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2586.906321][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2587.035747][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.046367][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2587.056931][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.067732][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2587.078883][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.089291][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2587.100403][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.116390][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2587.143183][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.154657][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2587.165257][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.175356][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2587.185957][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.200062][T28497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2587.290043][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.311407][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.379190][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.393668][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.400185][T17704] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2587.414523][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.436055][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.457877][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.477070][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.489996][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.503311][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.513504][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.526229][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.536155][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.547062][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.557585][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.586408][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.597921][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.609148][T17704] usb 5-1: Using ep0 maxpacket: 16 [ 2587.615372][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.626169][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.638629][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.650661][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.650725][T17704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2587.672008][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.681990][T28497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2587.710868][T28497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2587.721609][T17704] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2587.730793][T17704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2587.739392][T17704] usb 5-1: Product: syz [ 2587.753968][T28497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2587.770928][T17704] usb 5-1: Manufacturer: syz [ 2587.804832][T17704] usb 5-1: SerialNumber: syz [ 2587.873765][T17704] usb 5-1: config 0 descriptor?? [ 2587.913669][T28497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2587.934365][T28497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2587.951629][T17704] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2587.979808][T28497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2588.010582][T28497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2588.619533][T25766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2588.627359][T25766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2588.826660][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 2588.826675][ T29] audit: type=1400 audit(2000000853.094:107733): avc: denied { create } for pid=28693 comm="syz.0.6176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2588.952537][ T29] audit: type=1400 audit(2000000853.140:107734): avc: denied { perfmon } for pid=28687 comm="syz.9.6175" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2588.975629][T14238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2589.012340][T14238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2589.020734][ T29] audit: type=1400 audit(2000000853.140:107735): avc: denied { perfmon } for pid=28687 comm="syz.9.6175" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2589.133874][ T29] audit: type=1400 audit(2000000853.140:107736): avc: denied { bpf } for pid=28687 comm="syz.9.6175" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2589.220758][ T29] audit: type=1400 audit(2000000853.150:107737): avc: denied { read } for pid=28693 comm="syz.0.6176" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2589.316854][ T29] audit: type=1400 audit(2000000853.150:107738): avc: denied { read } for pid=28497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2589.408290][ T29] audit: type=1400 audit(2000000853.150:107739): avc: denied { read open } for pid=28693 comm="syz.0.6176" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2589.494407][ T29] audit: type=1400 audit(2000000853.159:107740): avc: denied { write } for pid=28497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2589.658412][ T29] audit: type=1400 audit(2000000853.178:107741): avc: denied { read } for pid=28497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2589.976093][T28704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2590.216158][ T29] audit: type=1400 audit(2000000853.178:107742): avc: denied { ioctl } for pid=28693 comm="syz.0.6176" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2590.333222][T28475] usb 5-1: USB disconnect, device number 45 [ 2592.361487][T28712] usb usb8: usbfs: process 28712 (syz.1.6179) did not claim interface 0 before use [ 2592.376090][T28712] FAULT_INJECTION: forcing a failure. [ 2592.376090][T28712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2592.389511][T28712] CPU: 1 UID: 0 PID: 28712 Comm: syz.1.6179 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2592.400266][T28712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2592.410317][T28712] Call Trace: [ 2592.413591][T28712] [ 2592.416518][T28712] dump_stack_lvl+0x16c/0x1f0 [ 2592.421205][T28712] should_fail_ex+0x497/0x5b0 [ 2592.425898][T28712] _copy_from_user+0x2e/0xd0 [ 2592.430495][T28712] copy_msghdr_from_user+0x99/0x160 [ 2592.435691][T28712] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2592.441499][T28712] ___sys_sendmsg+0xff/0x1e0 [ 2592.446084][T28712] ? __pfx____sys_sendmsg+0x10/0x10 [ 2592.451284][T28712] ? __pfx_lock_release+0x10/0x10 [ 2592.456291][T28712] ? trace_lock_acquire+0x14e/0x1f0 [ 2592.461489][T28712] ? __fget_files+0x206/0x3a0 [ 2592.466155][T28712] __sys_sendmsg+0x16e/0x220 [ 2592.470741][T28712] ? __pfx___sys_sendmsg+0x10/0x10 [ 2592.475855][T28712] do_syscall_64+0xcd/0x250 [ 2592.480348][T28712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2592.486226][T28712] RIP: 0033:0x7fe31d97ff19 [ 2592.490624][T28712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2592.510216][T28712] RSP: 002b:00007fe31e78c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2592.518622][T28712] RAX: ffffffffffffffda RBX: 00007fe31db46160 RCX: 00007fe31d97ff19 [ 2592.526577][T28712] RDX: 0000000000000084 RSI: 0000000020000040 RDI: 0000000000000003 [ 2592.534531][T28712] RBP: 00007fe31e78c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.542486][T28712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.550438][T28712] R13: 0000000000000000 R14: 00007fe31db46160 R15: 00007ffcbd220298 [ 2592.558401][T28712] [ 2592.927564][ T5866] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2593.141213][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 2593.172035][ T5866] usb 3-1: New USB device found, idVendor=04cb, idProduct=0111, bcdDevice=d1.8d [ 2593.215464][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.247254][ T5866] usb 3-1: Product: syz [ 2593.258911][ T5866] usb 3-1: Manufacturer: syz [ 2593.280391][ T5866] usb 3-1: SerialNumber: syz [ 2593.320932][ T5866] usb 3-1: config 0 descriptor?? [ 2593.361708][ T5866] gspca_main: finepix-2.14.0 probing 04cb:0111 [ 2593.632901][T25020] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2593.846827][T25020] usb 2-1: Using ep0 maxpacket: 32 [ 2594.613889][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 2594.613905][ T29] audit: type=1400 audit(2000000858.500:107984): avc: denied { ioctl } for pid=28717 comm="syz.1.6181" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2594.676015][T22454] usb 3-1: USB disconnect, device number 63 [ 2594.715247][T25020] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 2594.723505][T25020] usb 2-1: config 0 has no interface number 0 [ 2594.730257][T25020] usb 2-1: config 0 interface 159 has no altsetting 0 [ 2594.788037][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2594.803275][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2594.855236][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2594.889577][T25020] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=f0.de [ 2594.905034][ T29] audit: type=1400 audit(2000000858.500:107985): avc: denied { create } for pid=28734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2594.925533][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2594.943486][T25020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.969186][T25020] usb 2-1: Product: syz [ 2594.973359][T25020] usb 2-1: Manufacturer: syz [ 2594.977947][T25020] usb 2-1: SerialNumber: syz [ 2594.980603][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2594.990001][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2595.005357][T25020] usb 2-1: config 0 descriptor?? [ 2595.097673][ T29] audit: type=1400 audit(2000000858.500:107986): avc: denied { read write } for pid=28734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2595.225302][T25020] usb 1-1: USB disconnect, device number 35 [ 2595.226861][ T29] audit: type=1400 audit(2000000858.500:107987): avc: denied { read write open } for pid=28734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2595.384378][ T29] audit: type=1400 audit(2000000858.500:107988): avc: denied { ioctl } for pid=28717 comm="syz.1.6181" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2595.384428][T28734] syzkaller0 speed is unknown, defaulting to 1000 [ 2595.409492][ C0] vkms_vblank_simulate: vblank timer overrun [ 2595.517563][ T29] audit: type=1400 audit(2000000858.584:107989): avc: denied { sys_module } for pid=28722 comm="syz.4.6183" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2595.521782][T28734] lo speed is unknown, defaulting to 1000 [ 2595.609257][ T29] audit: type=1400 audit(2000000858.584:107990): avc: denied { module_request } for pid=28722 comm="syz.4.6183" kmod=0826E4871439A024E755B9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2595.880650][ T29] audit: type=1400 audit(2000000858.659:107991): avc: denied { ioctl } for pid=28734 comm="syz-executor" path="socket:[113967]" dev="sockfs" ino=113967 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2596.059688][ T29] audit: type=1400 audit(2000000858.687:107992): avc: denied { ioctl } for pid=28717 comm="syz.1.6181" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2596.117212][T17704] usb 2-1: USB disconnect, device number 77 [ 2596.117415][ T29] audit: type=1400 audit(2000000858.687:107993): avc: denied { ioctl } for pid=28717 comm="syz.1.6181" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2596.824762][T28756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2597.117948][T28475] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2597.214861][T13825] Bluetooth: hci1: command tx timeout [ 2597.300495][T28475] usb 5-1: Using ep0 maxpacket: 16 [ 2597.323534][T28475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2597.327527][T28734] chnl_net:caif_netlink_parms(): no params data found [ 2597.368000][T28475] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2597.384592][T28475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2597.404302][T28475] usb 5-1: Product: syz [ 2597.417357][T28475] usb 5-1: Manufacturer: syz [ 2597.423026][T28475] usb 5-1: SerialNumber: syz [ 2597.446716][T28475] usb 5-1: config 0 descriptor?? [ 2597.488899][T28475] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2597.610055][T28734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2597.642353][T28734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2597.660457][T28734] bridge_slave_0: entered allmulticast mode [ 2597.672000][T28734] bridge_slave_0: entered promiscuous mode [ 2597.709495][T28734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2597.716671][T28734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2597.724516][T28734] bridge_slave_1: entered allmulticast mode [ 2597.736101][T28734] bridge_slave_1: entered promiscuous mode [ 2598.682628][T28734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2598.728987][T28734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2598.815018][T28734] team0: Port device team_slave_0 added [ 2598.838726][T28734] team0: Port device team_slave_1 added [ 2598.897683][T28734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2598.912235][T28734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2598.956566][T28734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2598.996157][T28734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2599.012410][T28734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2599.060297][T28734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2599.175442][T28734] hsr_slave_0: entered promiscuous mode [ 2599.190716][T28734] hsr_slave_1: entered promiscuous mode [ 2599.203612][T28734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2599.211992][T28734] Cannot create hsr debugfs directory [ 2599.437960][T13825] Bluetooth: hci1: command tx timeout [ 2599.439312][T28734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.523082][T28734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.624336][T28734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.721295][T28734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.918457][T25020] usb 5-1: USB disconnect, device number 46 [ 2599.954891][T28734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2599.981224][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 2599.981238][ T29] audit: type=1400 audit(2000000863.523:108229): avc: denied { read write } for pid=26412 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2600.020025][T28734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2600.031618][ T29] audit: type=1400 audit(2000000863.561:108230): avc: denied { read write open } for pid=26412 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2600.077209][ T29] audit: type=1400 audit(2000000863.579:108231): avc: denied { ioctl } for pid=26412 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2600.081707][T28734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2600.180975][T28734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2600.219201][ T29] audit: type=1400 audit(2000000863.748:108232): avc: denied { create } for pid=28734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2600.265080][ T29] audit: type=1400 audit(2000000863.748:108233): avc: denied { write } for pid=28734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2600.286192][ T29] audit: type=1400 audit(2000000863.748:108234): avc: denied { read } for pid=28734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2600.310850][ T29] audit: type=1400 audit(2000000863.748:108235): avc: denied { read } for pid=28734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2600.331914][ T29] audit: type=1400 audit(2000000863.757:108236): avc: denied { create } for pid=28786 comm="syz.4.6196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2600.352813][ T29] audit: type=1400 audit(2000000863.776:108237): avc: denied { write } for pid=28734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2600.376619][ T29] audit: type=1400 audit(2000000863.776:108238): avc: denied { read write } for pid=28786 comm="syz.4.6196" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2600.460329][T28765] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 2600.464436][T13825] Bluetooth: hci6: command 0x0406 tx timeout [ 2600.473113][T28765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2600.496629][T28765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2600.504966][T28765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2600.517931][T28765] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2600.526192][T28734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2600.541246][T28765] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2600.553633][T28765] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2600.564682][T28765] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2600.575020][T28734] 8021q: adding VLAN 0 to HW filter on device team0 [ 2600.577859][T28765] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2600.594068][T21536] bridge0: port 1(bridge_slave_0) entered blocking state [ 2600.601167][T21536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2600.612230][T28765] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2600.627015][T28765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2600.634320][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2600.641424][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2600.659333][T28765] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2600.673222][T28765] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2601.009471][ T5866] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2601.220142][ T5866] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 2602.134432][T28792] Bluetooth: MGMT ver 1.23 [ 2602.293064][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.296655][T25020] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2602.329975][ T5866] usb 5-1: config 0 descriptor?? [ 2602.383269][ T5866] usb 5-1: Invalid firmware size=18. [ 2602.581338][T25020] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.602580][T25020] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2602.612149][T25020] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.666950][T25020] usb 10-1: config 0 descriptor?? [ 2602.687925][T13825] Bluetooth: hci7: command 0x0c1a tx timeout [ 2602.693993][T13825] Bluetooth: hci2: command 0x0405 tx timeout [ 2602.700187][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 2602.700204][T27326] Bluetooth: hci3: command 0x0405 tx timeout [ 2602.782786][T27326] Bluetooth: hci1: command 0x0419 tx timeout [ 2602.782849][T13825] Bluetooth: hci8: command 0x0c1a tx timeout [ 2603.086263][T28787] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 2603.092879][T28787] PKCS7: Only support pkcs7_signedData type [ 2603.112609][T28786] delete_channel: no stack [ 2603.117849][ T5866] usb 5-1: USB disconnect, device number 47 [ 2603.193507][T25020] usbhid 10-1:0.0: can't add hid device: -71 [ 2603.213414][T25020] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2603.245195][T25020] usb 10-1: USB disconnect, device number 10 [ 2603.415134][ T5867] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2603.596671][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 2603.623700][ T5867] usb 2-1: config 4 has an invalid interface number: 83 but max is 0 [ 2603.645136][ T5867] usb 2-1: config 4 has no interface number 0 [ 2603.660808][ T5867] usb 2-1: config 4 interface 83 has no altsetting 0 [ 2603.714187][T25020] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2603.744423][T28803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2603.752615][ T5867] usb 2-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=4e.2b [ 2603.783424][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.813187][ T5867] usb 2-1: Product: syz [ 2603.817357][ T5867] usb 2-1: Manufacturer: syz [ 2603.843910][ T5867] usb 2-1: SerialNumber: syz [ 2603.886837][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2603.893197][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2603.895781][T25020] usb 10-1: Using ep0 maxpacket: 16 [ 2603.960011][T25020] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2604.002801][T25020] usb 10-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 2604.011945][T25020] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2604.068569][T25020] usb 10-1: config 0 descriptor?? [ 2604.232209][ T5867] gspca_main: etoms-2.14.0 probing 102c:6251 [ 2604.297508][ T5867] usb 2-1: USB disconnect, device number 78 [ 2604.387795][T25020] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 2604.396186][T25020] input: Griffin PowerMate as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input125 [ 2604.688051][T22454] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2604.868751][T22454] usb 5-1: device descriptor read/64, error -71 [ 2604.912113][T13825] Bluetooth: hci7: command 0x0c1a tx timeout [ 2604.997547][T13825] Bluetooth: hci8: command 0x0c1a tx timeout [ 2605.000979][T27326] Bluetooth: hci1: command 0x0419 tx timeout [ 2605.234071][T22454] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2605.897712][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 2605.897752][ T29] audit: type=1400 audit(2000000868.575:108551): avc: denied { map_create } for pid=28816 comm="syz.2.6204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2605.991437][T22454] usb 5-1: device descriptor read/64, error -71 [ 2605.992115][ T29] audit: type=1400 audit(2000000868.575:108552): avc: denied { bpf } for pid=28816 comm="syz.2.6204" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2606.020304][T25020] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2606.109396][T22454] usb usb5-port1: attempt power cycle [ 2606.197133][ T29] audit: type=1400 audit(2000000868.584:108553): avc: denied { map_read map_write } for pid=28816 comm="syz.2.6204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2606.209501][T28823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.231392][T28823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2606.346387][ T29] audit: type=1400 audit(2000000868.593:108554): avc: denied { prog_load } for pid=28816 comm="syz.2.6204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2606.366215][T25020] usb 2-1: Using ep0 maxpacket: 16 [ 2606.404326][T25020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2606.436646][ T29] audit: type=1400 audit(2000000868.593:108555): avc: denied { bpf } for pid=28816 comm="syz.2.6204" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2606.461185][T25020] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2606.492332][T25020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.513419][ C0] powermate: config urb returned -71 [ 2606.514793][ T5866] usb 10-1: USB disconnect, device number 11 [ 2606.518738][ C0] powermate: usb_submit_urb(config) failed [ 2606.525406][ C0] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2606.526445][ T29] audit: type=1400 audit(2000000868.603:108556): avc: denied { prog_load } for pid=28816 comm="syz.2.6204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2606.560196][T22454] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2606.573391][T25020] usb 2-1: Product: syz [ 2606.577758][T25020] usb 2-1: Manufacturer: syz [ 2606.600975][T22454] usb 5-1: device descriptor read/8, error -71 [ 2606.605694][T25020] usb 2-1: SerialNumber: syz [ 2606.656617][ T29] audit: type=1400 audit(2000000868.621:108557): avc: denied { bpf } for pid=28816 comm="syz.2.6204" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2606.678659][T25020] usb 2-1: config 0 descriptor?? [ 2606.683772][ T29] audit: type=1400 audit(2000000868.621:108558): avc: denied { perfmon } for pid=28816 comm="syz.2.6204" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2606.715243][T25020] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2606.724674][ T29] audit: type=1400 audit(2000000868.621:108559): avc: denied { perfmon } for pid=28816 comm="syz.2.6204" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2606.730109][T28734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2606.748839][ T29] audit: type=1400 audit(2000000868.631:108560): avc: denied { perfmon } for pid=28816 comm="syz.2.6204" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2606.900263][T22454] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2606.935237][T22454] usb 5-1: device descriptor read/8, error -71 [ 2607.075501][T22454] usb usb5-port1: unable to enumerate USB device [ 2607.142308][T27326] Bluetooth: hci7: command 0x0c1a tx timeout [ 2607.232161][T27326] Bluetooth: hci1: command 0x0419 tx timeout [ 2607.232227][T13825] Bluetooth: hci8: command 0x0c1a tx timeout [ 2607.377730][T28734] veth0_vlan: entered promiscuous mode [ 2607.459494][T28734] veth1_vlan: entered promiscuous mode [ 2607.771317][T28734] veth0_macvtap: entered promiscuous mode [ 2607.790432][T28734] veth1_macvtap: entered promiscuous mode [ 2608.210093][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.516761][T25020] usb 2-1: USB disconnect, device number 79 [ 2608.551167][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.571870][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.600001][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.633494][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.657279][T28840] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2608.685217][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.695111][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.736593][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.751178][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.762523][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.773636][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.784187][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.794463][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.822678][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.845690][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.857477][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.894299][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.915387][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.938722][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.957575][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.967687][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2608.980291][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2608.990558][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2609.017868][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.041764][T28734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2609.083923][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.094675][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.108173][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.121963][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.132159][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.144124][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.154335][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.172512][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.185583][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.201470][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.211811][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.223070][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.233359][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.244260][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.254932][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.265413][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.282166][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.293561][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.303449][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.314002][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.323902][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.334497][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.344975][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.355490][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.376662][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2609.387162][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2609.398343][T28734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2609.426464][T28734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2609.435497][T28734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2609.445978][T13825] Bluetooth: hci1: command 0x0419 tx timeout [ 2609.453251][T28734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2609.462117][T28734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2609.873520][T13825] Bluetooth: hci6: command 0x0406 tx timeout [ 2609.879597][T28832] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 2610.455624][T28832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2610.462196][T28832] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2610.468297][T28832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2610.474843][T28832] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2610.480891][T28832] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2610.486982][T28832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2610.717602][T14238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2610.725434][T14238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2610.846359][ T5911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2610.854192][ T5911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2611.071695][T28862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2611.271597][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 2611.271613][ T29] audit: type=1400 audit(2000000874.084:108850): avc: denied { mounton } for pid=28734 comm="syz-executor" path="/root/syzkaller.g4E6Zv/syz-tmp/newroot/syzcgroup/cpu" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2611.366154][ T29] audit: type=1400 audit(2000000874.103:108851): avc: denied { read write } for pid=25064 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2611.508338][ T29] audit: type=1400 audit(2000000874.103:108852): avc: denied { read write open } for pid=25064 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2611.703861][ T29] audit: type=1400 audit(2000000874.103:108853): avc: denied { ioctl } for pid=25064 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2612.309753][T13825] Bluetooth: hci3: command 0x0405 tx timeout [ 2612.346872][ T29] audit: type=1400 audit(2000000874.131:108854): avc: denied { mounton } for pid=28734 comm="syz-executor" path="/root/syzkaller.g4E6Zv/syz-tmp/newroot/syzcgroup/net" dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2612.587232][ T29] audit: type=1400 audit(2000000874.150:108855): avc: denied { unmount } for pid=28734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2612.614997][T13825] Bluetooth: hci2: command 0x0405 tx timeout [ 2612.621621][T27326] Bluetooth: hci4: command 0x0c1a tx timeout [ 2612.661289][ T29] audit: type=1400 audit(2000000874.206:108856): avc: denied { mounton } for pid=28734 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2612.694550][T27326] Bluetooth: hci8: command 0x0c1a tx timeout [ 2612.700570][T27326] Bluetooth: hci7: command 0x0c1a tx timeout [ 2612.706121][T28877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2612.706667][T13825] Bluetooth: hci1: command 0x0419 tx timeout [ 2612.713006][T28877] audit: audit_lost=2595 audit_rate_limit=0 audit_backlog_limit=64 [ 2612.768425][T22454] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2612.783569][ T29] audit: type=1400 audit(2000000874.243:108857): avc: denied { mount } for pid=28734 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2613.507497][T22454] usb 10-1: Using ep0 maxpacket: 16 [ 2613.549879][T22454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2613.613585][T22454] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2613.632373][T22454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.665194][T22454] usb 10-1: Product: syz [ 2613.682859][T22454] usb 10-1: Manufacturer: syz [ 2613.696785][T22454] usb 10-1: SerialNumber: syz [ 2613.764977][T22454] usb 10-1: config 0 descriptor?? [ 2613.785542][T28886] FAULT_INJECTION: forcing a failure. [ 2613.785542][T28886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2613.927801][T22454] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2613.940702][T28886] CPU: 1 UID: 0 PID: 28886 Comm: syz.4.6221 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2613.951480][T28886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2613.961525][T28886] Call Trace: [ 2613.964780][T28886] [ 2613.967697][T28886] dump_stack_lvl+0x16c/0x1f0 [ 2613.972388][T28886] should_fail_ex+0x497/0x5b0 [ 2613.977079][T28886] _copy_from_user+0x2e/0xd0 [ 2613.981679][T28886] copy_msghdr_from_user+0x99/0x160 [ 2613.986887][T28886] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2613.992708][T28886] ? hlock_class+0x4e/0x130 [ 2613.997222][T28886] ? __lock_acquire+0x15a9/0x3c40 [ 2614.002257][T28886] ___sys_sendmsg+0xff/0x1e0 [ 2614.006858][T28886] ? __pfx____sys_sendmsg+0x10/0x10 [ 2614.012059][T28886] ? __pfx___lock_acquire+0x10/0x10 [ 2614.017251][T28886] ? handle_mm_fault+0x497/0xaa0 [ 2614.022175][T28886] ? __pfx___might_resched+0x10/0x10 [ 2614.027436][T28886] ? __might_fault+0xe3/0x190 [ 2614.032092][T28886] __sys_sendmmsg+0x201/0x420 [ 2614.036750][T28886] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2614.041938][T28886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2614.047916][T28886] ? fput+0x67/0x440 [ 2614.051801][T28886] ? ksys_write+0x1ba/0x250 [ 2614.056292][T28886] ? __pfx_ksys_write+0x10/0x10 [ 2614.061133][T28886] __x64_sys_sendmmsg+0x9c/0x100 [ 2614.066062][T28886] ? lockdep_hardirqs_on+0x7c/0x110 [ 2614.071247][T28886] do_syscall_64+0xcd/0x250 [ 2614.075740][T28886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2614.081618][T28886] RIP: 0033:0x7f6c3537ff19 [ 2614.086017][T28886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2614.105608][T28886] RSP: 002b:00007f6c360f2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2614.114005][T28886] RAX: ffffffffffffffda RBX: 00007f6c35546080 RCX: 00007f6c3537ff19 [ 2614.121961][T28886] RDX: 0400000000000159 RSI: 0000000020001c00 RDI: 0000000000000005 [ 2614.129918][T28886] RBP: 00007f6c360f20a0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.137873][T28886] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 2614.145827][T28886] R13: 0000000000000000 R14: 00007f6c35546080 R15: 00007ffc58ab4268 [ 2614.153794][T28886] [ 2614.914427][T28892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2615.209708][T28895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6223'. [ 2615.925570][T28903] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 2615.934636][T28903] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 2616.198474][ T5866] usb 10-1: USB disconnect, device number 12 [ 2616.730283][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 2616.730317][ T29] audit: type=1400 audit(2000000879.098:109065): avc: denied { create } for pid=28902 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.028383][ T29] audit: type=1400 audit(2000000879.107:109066): avc: denied { ioctl } for pid=28902 comm="syz.2.6227" path="socket:[114616]" dev="sockfs" ino=114616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.055078][ T29] audit: type=1400 audit(2000000879.116:109067): avc: denied { create } for pid=28902 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.161710][ T29] audit: type=1400 audit(2000000879.126:109068): avc: denied { create } for pid=28902 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.234689][ T29] audit: type=1400 audit(2000000879.126:109069): avc: denied { write } for pid=28902 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.289851][ T29] audit: type=1400 audit(2000000879.135:109070): avc: denied { read } for pid=28902 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.344278][ T29] audit: type=1400 audit(2000000879.145:109071): avc: denied { read } for pid=28902 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.385095][ T29] audit: type=1400 audit(2000000879.154:109072): avc: denied { ioctl } for pid=28902 comm="syz.2.6227" path="socket:[114617]" dev="sockfs" ino=114617 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.463779][ T29] audit: type=1400 audit(2000000879.163:109073): avc: denied { write } for pid=28902 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2617.505212][ T29] audit: type=1400 audit(2000000879.191:109074): avc: denied { read write } for pid=28902 comm="syz.2.6227" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2617.590746][T28922] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6228'. [ 2618.621275][T28900] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2618.804323][T28900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2618.822673][T28900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2618.836461][T28900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2618.865196][T28900] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2618.882040][T28900] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2618.910620][T28900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2619.279734][T13825] Bluetooth: hci6: command 0x0406 tx timeout [ 2619.455195][T28938] FAULT_INJECTION: forcing a failure. [ 2619.455195][T28938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2619.469392][T28939] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2619.485367][T28938] CPU: 1 UID: 0 PID: 28938 Comm: syz.2.6232 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2619.496144][T28938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2619.506200][T28938] Call Trace: [ 2619.509476][T28938] [ 2619.512406][T28938] dump_stack_lvl+0x16c/0x1f0 [ 2619.517094][T28938] should_fail_ex+0x497/0x5b0 [ 2619.521785][T28938] _copy_to_user+0x32/0xd0 [ 2619.526213][T28938] copy_siginfo_to_user+0x23/0xc0 [ 2619.531247][T28938] x64_setup_rt_frame+0x814/0xcf0 [ 2619.536291][T28938] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 2619.541851][T28938] ? __pfx_do_futex+0x10/0x10 [ 2619.546533][T28938] arch_do_signal_or_restart+0x5e6/0x7e0 [ 2619.552175][T28938] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2619.558347][T28938] ? __do_sys_rt_sigreturn+0x16c/0x240 [ 2619.563816][T28938] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 2619.569637][T28938] syscall_exit_to_user_mode+0x150/0x2a0 [ 2619.575281][T28938] do_syscall_64+0xda/0x250 [ 2619.579783][T28938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2619.585661][T28938] RIP: 0033:0x7fc585d7ff17 [ 2619.590058][T28938] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 2619.609648][T28938] RSP: 002b:00007fc586c4e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2619.618052][T28938] RAX: 00000000000000ca RBX: 00007fc585f45fa0 RCX: 00007fc585d7ff19 [ 2619.626013][T28938] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000000002000cffc [ 2619.633970][T28938] RBP: 00007fc586c4e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.641928][T28938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2619.649880][T28938] R13: 0000000000000000 R14: 00007fc585f45fa0 R15: 00007ffc212f0da8 [ 2619.657847][T28938] [ 2620.411776][T28951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2620.990566][T13825] Bluetooth: hci2: command 0x0405 tx timeout [ 2620.990606][T27326] Bluetooth: hci4: command 0x0c1a tx timeout [ 2620.996572][T22229] Bluetooth: hci3: command 0x0405 tx timeout [ 2621.203788][T28964] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6241'. [ 2621.362481][T22229] Bluetooth: hci7: command 0x0c1a tx timeout [ 2621.368752][T13825] Bluetooth: hci8: command 0x0c1a tx timeout [ 2621.375014][T27326] Bluetooth: hci1: command 0x0419 tx timeout [ 2621.684839][T17704] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2622.177131][T17704] usb 5-1: Using ep0 maxpacket: 8 [ 2622.394876][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 2622.394895][ T29] audit: type=1400 audit(2000000884.495:109377): avc: denied { ioctl } for pid=28953 comm="syz.4.6240" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2622.500618][ T29] audit: type=1400 audit(2000000884.523:109378): avc: denied { ioctl } for pid=28953 comm="syz.4.6240" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2622.529690][T17704] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2622.581656][T17704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.597193][T17704] usb 5-1: Product: syz [ 2622.643529][T17704] usb 5-1: Manufacturer: syz [ 2622.655525][ T29] audit: type=1400 audit(2000000884.542:109379): avc: denied { read write } for pid=28279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2622.659948][T17704] usb 5-1: SerialNumber: syz [ 2622.737913][ T29] audit: type=1400 audit(2000000884.542:109380): avc: denied { read write open } for pid=28279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2622.801240][T17704] usb 5-1: config 0 descriptor?? [ 2622.822461][ T29] audit: type=1400 audit(2000000884.551:109381): avc: denied { ioctl } for pid=28279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2622.880403][ T29] audit: type=1400 audit(2000000884.561:109382): avc: denied { ioctl } for pid=28953 comm="syz.4.6240" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2622.914396][T28714] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2622.985974][ T29] audit: type=1400 audit(2000000884.570:109383): avc: denied { ioctl } for pid=28953 comm="syz.4.6240" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2623.011086][ C0] vkms_vblank_simulate: vblank timer overrun [ 2623.065860][T28955] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2623.093978][T28955] audit: audit_lost=2598 audit_rate_limit=0 audit_backlog_limit=64 [ 2623.099416][T28975] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2623.108571][T28714] usb 10-1: Using ep0 maxpacket: 32 [ 2623.115821][T17704] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2623.153523][T28714] usb 10-1: config 0 has an invalid interface number: 5 but max is 0 [ 2623.193092][T28714] usb 10-1: config 0 has no interface number 0 [ 2623.221630][T28714] usb 10-1: config 0 interface 5 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2623.295245][T28714] usb 10-1: config 0 interface 5 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2623.353839][T28714] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2623.425019][T28714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.603376][T28714] usb 10-1: config 0 descriptor?? [ 2624.235414][T28989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6249'. [ 2625.379034][T27326] Bluetooth: hci6: command 0x0406 tx timeout [ 2625.406201][T17704] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2625.437750][T17704] usb 5-1: USB disconnect, device number 52 [ 2625.475852][T28977] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 2625.933139][T28977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2625.952163][T28977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2625.958382][T28977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2625.972015][T28977] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2625.994477][T28977] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2626.004276][T28977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2626.161631][T28998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2626.282354][T17704] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2626.823566][T28714] usbhid 10-1:0.5: can't add hid device: -71 [ 2626.833597][T28714] usbhid 10-1:0.5: probe with driver usbhid failed with error -71 [ 2626.895185][T28714] usb 10-1: USB disconnect, device number 13 [ 2627.094994][T29004] No control pipe specified [ 2627.564129][T29013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6254'. [ 2627.981797][T27326] Bluetooth: hci3: command 0x0405 tx timeout [ 2628.115123][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 2628.115387][ T29] audit: type=1400 audit(2000000889.846:109701): avc: denied { read write } for pid=28734 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2628.207050][T13825] Bluetooth: hci8: command 0x0c1a tx timeout [ 2628.345486][T22229] Bluetooth: hci7: command 0x0c1a tx timeout [ 2628.357572][T22229] Bluetooth: hci2: command 0x0405 tx timeout [ 2628.363576][T22229] Bluetooth: hci4: command 0x0c1a tx timeout [ 2628.369841][T27326] Bluetooth: hci1: command 0x0419 tx timeout [ 2628.384836][ T29] audit: type=1400 audit(2000000889.902:109702): avc: denied { ioctl } for pid=29006 comm="syz.2.6256" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2628.494883][ T29] audit: type=1400 audit(2000000889.911:109703): avc: denied { ioctl } for pid=29006 comm="syz.2.6256" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2628.634115][ T29] audit: type=1400 audit(2000000889.911:109704): avc: denied { ioctl } for pid=29006 comm="syz.2.6256" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2628.762526][ T29] audit: type=1400 audit(2000000889.920:109705): avc: denied { ioctl } for pid=29006 comm="syz.2.6256" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2628.810431][T17704] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2629.117222][T29026] netlink: 'syz.1.6260': attribute type 2 has an invalid length. [ 2629.125069][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6260'. [ 2629.247192][ T29] audit: type=1400 audit(2000000889.930:109706): avc: denied { prog_load } for pid=29006 comm="syz.2.6256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2629.311047][T17704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2629.366243][T17704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2629.376642][ T29] audit: type=1400 audit(2000000889.939:109707): avc: denied { bpf } for pid=29006 comm="syz.2.6256" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2629.436204][T17704] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2629.471084][T17704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.489891][ T29] audit: type=1400 audit(2000000889.948:109708): avc: denied { prog_load } for pid=29006 comm="syz.2.6256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2629.524414][T28734] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2629.524454][T29029] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2629.542442][T17704] usb 10-1: config 0 descriptor?? [ 2630.034180][T17704] usbhid 10-1:0.0: can't add hid device: -71 [ 2630.040475][T17704] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2630.051419][T17704] usb 10-1: USB disconnect, device number 14 [ 2630.227253][T25020] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2630.247528][T29041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2630.747293][T25020] usb 2-1: config 9 has an invalid interface number: 12 but max is 0 [ 2630.766685][T25020] usb 2-1: config 9 has no interface number 0 [ 2630.789265][T25020] usb 2-1: config 9 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2630.822332][T25020] usb 2-1: config 9 interface 12 has no altsetting 0 [ 2630.907654][T25020] usb 2-1: New USB device found, idVendor=0582, idProduct=0080, bcdDevice=ef.e0 [ 2630.938905][T25020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.982309][T25020] usb 2-1: Product: 䊏喨ጻ鄲窃ꐯ릹ʽ먳ꬶ슩൑풨苈ᶞ薟ﳈ랿㓬섭⇮课耋꣯埅셫㳒ᧅ짶„骇금혢悼龌꿕ꃰ抶㵷짖↋ទ◮뫾ଃ靳ꧽ䦓胜擔１坵삾Ɥ綘龯폠枅뙑ꆣ뮀팰䕆綣⎁亞減꿒磞⃿揼稈 [ 2631.028678][T28714] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2631.082290][T25020] usb 2-1: Manufacturer: 뫐탮਴⎗킑쭏ﱑ橢驳ⰺ歱跑䨺ꘑ௉ഐ繼눙뗋淭饾몐큋㗮๵쎏炳ヱၘ࿇㿧㎋뜾䙀悰훛咉ꪸ睲铉鲰㙈鵛믗୩䁉諟ﻊ瞲陸㳾쀺꽙傡븹풻潌쥍靑먗괚ꋗ윘䊙 [ 2631.105128][ C0] vkms_vblank_simulate: vblank timer overrun [ 2631.202557][T25020] usb 2-1: SerialNumber:  [ 2631.270014][T28714] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2631.312276][T28714] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2631.584476][T28714] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2631.595206][T28714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.603306][T28714] usb 1-1: Product: syz [ 2631.607620][T28714] usb 1-1: Manufacturer: syz [ 2631.612391][T28714] usb 1-1: SerialNumber: syz [ 2632.647321][T28714] usb 1-1: config 0 descriptor?? [ 2632.662793][T29035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2632.705089][T29035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2632.908592][T25020] usb 2-1: USB disconnect, device number 80 [ 2633.027869][T22454] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2633.078885][T28714] dm9601 1-1:0.0: probe with driver dm9601 failed with error -71 [ 2633.095170][T28714] usb 1-1: USB disconnect, device number 36 [ 2633.220512][T22454] usb 10-1: Using ep0 maxpacket: 16 [ 2633.356581][T22454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2633.568454][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 2633.568470][ T29] audit: type=1400 audit(2000000894.943:110016): avc: denied { ioctl } for pid=29052 comm="syz.9.6266" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2633.600259][ C0] vkms_vblank_simulate: vblank timer overrun [ 2633.727482][T29061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6270'. [ 2634.093369][T22454] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2634.142594][ T29] audit: type=1400 audit(2000000894.962:110017): avc: denied { read write } for pid=28497 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2634.173171][T22454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.201304][T22454] usb 10-1: Product: syz [ 2634.234322][T22454] usb 10-1: Manufacturer: syz [ 2634.246150][ T29] audit: type=1400 audit(2000000894.962:110018): avc: denied { read write open } for pid=28497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2634.263551][T22454] usb 10-1: SerialNumber: syz [ 2634.371289][T22454] usb 10-1: config 0 descriptor?? [ 2634.385722][T22454] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2634.425526][ T29] audit: type=1400 audit(2000000894.962:110019): avc: denied { ioctl } for pid=28497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2634.524473][ T29] audit: type=1400 audit(2000000895.018:110020): avc: denied { ioctl } for pid=29052 comm="syz.9.6266" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2634.658023][ T29] audit: type=1400 audit(2000000895.065:110021): avc: denied { create } for pid=29056 comm="syz.0.6270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2634.725688][ T29] audit: type=1400 audit(2000000895.084:110022): avc: denied { create } for pid=29056 comm="syz.0.6270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2634.739555][T29065] team_slave_0: entered promiscuous mode [ 2634.752272][T29065] team_slave_1: entered promiscuous mode [ 2635.146335][T29065] team0: Device macsec1 is already an upper device of the team interface [ 2635.159220][ T29] audit: type=1400 audit(2000000895.084:110023): avc: denied { write } for pid=29056 comm="syz.0.6270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2635.243270][T29065] team_slave_0: left promiscuous mode [ 2635.248732][T29065] team_slave_1: left promiscuous mode [ 2635.278469][ T29] audit: type=1400 audit(2000000895.121:110024): avc: denied { create } for pid=29056 comm="syz.0.6270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2635.337963][T29072] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2635.400210][T29077] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 2635.450783][T29072] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6273'. [ 2636.135807][T29083] netlink: 'syz.2.6276': attribute type 2 has an invalid length. [ 2636.144515][T29083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6276'. [ 2636.360764][T29084] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2636.375371][T17704] usb 10-1: USB disconnect, device number 15 [ 2636.673196][T29087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2637.650420][T29094] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 2637.723259][T29094] x_tables: duplicate underflow at hook 1 [ 2638.036038][T29102] netlink: 'syz.4.6282': attribute type 1 has an invalid length. [ 2638.055781][T29103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2638.093734][T29102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2638.240268][T29105] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2638.303121][T29106] bond1: (slave veth5): Enslaving as an active interface with a down link [ 2638.977374][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 2638.977413][ T29] audit: type=1400 audit(2000000900.004:110264): avc: denied { read write open } for pid=28734 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2639.008936][ C1] vkms_vblank_simulate: vblank timer overrun [ 2639.228293][ T29] audit: type=1400 audit(2000000900.191:110265): avc: denied { create } for pid=29113 comm="syz.2.6286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2639.292905][ T29] audit: type=1400 audit(2000000900.191:110266): avc: denied { write } for pid=29113 comm="syz.2.6286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2639.355473][ T29] audit: type=1400 audit(2000000900.191:110267): avc: denied { read } for pid=29113 comm="syz.2.6286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2639.408419][ T29] audit: type=1400 audit(2000000900.191:110268): avc: denied { read } for pid=29113 comm="syz.2.6286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2639.511345][ T29] audit: type=1400 audit(2000000900.219:110269): avc: denied { ioctl } for pid=28734 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2639.661232][ T29] audit: type=1400 audit(2000000900.387:110270): avc: denied { map_create } for pid=29120 comm="syz.9.6287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2639.686939][T29129] overlayfs: failed to resolve './file1': -2 [ 2639.741564][T22454] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2639.781869][T29130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6290'. [ 2639.842233][ T29] audit: type=1400 audit(2000000900.387:110271): avc: denied { bpf } for pid=29120 comm="syz.9.6287" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2639.863029][ C1] vkms_vblank_simulate: vblank timer overrun [ 2639.915496][T25020] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2639.988036][T22454] usb 2-1: Using ep0 maxpacket: 16 [ 2640.062005][ T29] audit: type=1400 audit(2000000900.387:110272): avc: denied { map_read map_write } for pid=29120 comm="syz.9.6287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2640.103806][T22454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2640.137030][ T29] audit: type=1400 audit(2000000900.387:110273): avc: denied { prog_load } for pid=29120 comm="syz.9.6287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2640.171605][T25020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2640.186120][T25020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2640.217870][T25020] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2640.239417][T25020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.243350][T22454] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2640.375789][T22454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.387109][T25020] usb 5-1: config 0 descriptor?? [ 2640.580270][T22454] usb 2-1: Product: syz [ 2640.597851][T22454] usb 2-1: Manufacturer: syz [ 2640.613297][T22454] usb 2-1: SerialNumber: syz [ 2640.647471][T22454] usb 2-1: config 0 descriptor?? [ 2641.048430][T22454] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2641.231885][T25020] usbhid 5-1:0.0: can't add hid device: -71 [ 2641.237976][T25020] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2641.262339][T25020] usb 5-1: USB disconnect, device number 53 [ 2641.990655][T29146] FAULT_INJECTION: forcing a failure. [ 2641.990655][T29146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2642.050025][T29146] CPU: 0 UID: 0 PID: 29146 Comm: syz.0.6294 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2642.060793][T29146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2642.070822][T29146] Call Trace: [ 2642.074076][T29146] [ 2642.076982][T29146] dump_stack_lvl+0x16c/0x1f0 [ 2642.081637][T29146] should_fail_ex+0x497/0x5b0 [ 2642.086294][T29146] _copy_from_user+0x2e/0xd0 [ 2642.090865][T29146] bpf_test_init.isra.0+0xf1/0x150 [ 2642.095960][T29146] bpf_prog_test_run_xdp+0x4f0/0x1580 [ 2642.101325][T29146] ? lock_acquire+0x2f/0xb0 [ 2642.105812][T29146] ? __fget_files+0x40/0x3a0 [ 2642.110388][T29146] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2642.116181][T29146] ? __fget_files+0x206/0x3a0 [ 2642.120846][T29146] ? fput+0x67/0x440 [ 2642.124726][T29146] ? __bpf_prog_get+0xa0/0x290 [ 2642.129479][T29146] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2642.135272][T29146] __sys_bpf+0xfc6/0x49c0 [ 2642.139591][T29146] ? __pfx_lock_release+0x10/0x10 [ 2642.144600][T29146] ? __pfx___sys_bpf+0x10/0x10 [ 2642.149350][T29146] ? vfs_write+0x306/0x1150 [ 2642.153840][T29146] ? __mutex_unlock_slowpath+0x164/0x690 [ 2642.159471][T29146] ? fput+0x67/0x440 [ 2642.163351][T29146] ? ksys_write+0x1ba/0x250 [ 2642.167834][T29146] ? __pfx_ksys_write+0x10/0x10 [ 2642.172670][T29146] __x64_sys_bpf+0x78/0xc0 [ 2642.177077][T29146] ? lockdep_hardirqs_on+0x7c/0x110 [ 2642.182261][T29146] do_syscall_64+0xcd/0x250 [ 2642.186752][T29146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2642.192632][T29146] RIP: 0033:0x7f1b3e77ff19 [ 2642.197044][T29146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2642.216648][T29146] RSP: 002b:00007f1b3f5ae058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2642.225050][T29146] RAX: ffffffffffffffda RBX: 00007f1b3e945fa0 RCX: 00007f1b3e77ff19 [ 2642.233003][T29146] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 2642.240955][T29146] RBP: 00007f1b3f5ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2642.248910][T29146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.256863][T29146] R13: 0000000000000000 R14: 00007f1b3e945fa0 R15: 00007fffbd1c9458 [ 2642.264835][T29146] [ 2642.307644][T29150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2642.878144][T29155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6298'. [ 2643.472832][ T5867] usb 2-1: USB disconnect, device number 81 [ 2644.085206][T29168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6299'. [ 2644.530082][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 2644.530099][ T29] audit: type=1400 audit(2000000904.625:110507): avc: denied { execmem } for pid=29161 comm="syz.1.6302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2644.805791][T29163] No control pipe specified [ 2644.847347][ T29] audit: type=1400 audit(2000000904.653:110508): avc: denied { write } for pid=29160 comm="syz.9.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2644.995281][ T29] audit: type=1400 audit(2000000904.653:110509): avc: denied { prog_load } for pid=29160 comm="syz.9.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2645.268770][ T29] audit: type=1400 audit(2000000904.653:110510): avc: denied { bpf } for pid=29160 comm="syz.9.6300" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2645.437731][ T29] audit: type=1400 audit(2000000904.681:110511): avc: denied { prog_load } for pid=29160 comm="syz.9.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2645.527872][T28279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2645.579150][ T29] audit: type=1400 audit(2000000904.681:110512): avc: denied { bpf } for pid=29160 comm="syz.9.6300" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2645.580930][T28279] audit: audit_lost=2657 audit_rate_limit=0 audit_backlog_limit=64 [ 2645.674786][ T29] audit: type=1400 audit(2000000904.756:110513): avc: denied { create } for pid=29158 comm="syz.0.6299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2645.701276][T29183] overlayfs: failed to resolve './file1': -2 [ 2645.741318][T28279] audit: backlog limit exceeded [ 2646.469770][T29182] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2646.491565][T29182] syzkaller0 speed is unknown, defaulting to 1000 [ 2646.498522][T29182] lo speed is unknown, defaulting to 1000 [ 2647.352696][T29200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2648.058892][ T5867] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2648.213668][T29210] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 2648.721621][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 2648.891039][ T5867] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2648.929768][ T5867] usb 5-1: config 0 has no interface number 0 [ 2649.026561][ T5867] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2649.057773][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2649.106364][ T5867] usb 5-1: Product: syz [ 2649.110551][ T5867] usb 5-1: Manufacturer: syz [ 2649.150089][ T5867] usb 5-1: SerialNumber: syz [ 2649.183958][ T5867] usb 5-1: config 0 descriptor?? [ 2649.280257][ T5867] smsc95xx v2.0.0 [ 2649.576834][T17704] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2649.748185][T17704] usb 10-1: Using ep0 maxpacket: 16 [ 2649.790882][T17704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2649.874242][T17704] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2649.906846][T17704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2649.923351][T22454] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2649.929645][T17704] usb 10-1: Product: syz [ 2649.942359][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 2649.942391][ T29] audit: type=1400 audit(2000000910.265:110795): avc: denied { ioctl } for pid=29218 comm="syz.2.6314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2649.948361][T17704] usb 10-1: Manufacturer: syz [ 2649.954374][ T29] audit: type=1400 audit(2000000910.265:110796): avc: denied { ioctl } for pid=29218 comm="syz.2.6314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2649.992303][T17704] usb 10-1: SerialNumber: syz [ 2650.079951][T17704] usb 10-1: config 0 descriptor?? [ 2650.124049][T17704] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2650.150384][T22454] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 2650.163775][T22454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.190787][ T29] audit: type=1400 audit(2000000910.265:110797): avc: denied { ioctl } for pid=29218 comm="syz.2.6314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2650.236557][T22454] usb 3-1: config 0 descriptor?? [ 2650.280121][T22454] usb 3-1: Invalid firmware size=18. [ 2650.326076][ T29] audit: type=1400 audit(2000000910.340:110798): avc: denied { ioctl } for pid=29202 comm="syz.4.6309" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2650.399199][ T29] audit: type=1400 audit(2000000910.340:110799): avc: denied { ioctl } for pid=29202 comm="syz.4.6309" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2650.506984][ T29] audit: type=1400 audit(2000000910.359:110800): avc: denied { ioctl } for pid=29218 comm="syz.2.6314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2650.614125][ T29] audit: type=1400 audit(2000000910.359:110801): avc: denied { create } for pid=29224 comm="syz.0.6317" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2651.077533][ T29] audit: type=1400 audit(2000000910.424:110802): avc: denied { ioctl } for pid=29216 comm="syz.9.6313" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2651.155237][T29219] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 2651.162972][T29219] PKCS7: Only support pkcs7_signedData type [ 2651.195090][T29218] delete_channel: no stack [ 2651.199984][ T5866] usb 3-1: USB disconnect, device number 65 [ 2651.206257][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2651.220031][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2651.262477][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2651.300384][ T29] audit: type=1400 audit(2000000910.424:110803): avc: denied { ioctl } for pid=29216 comm="syz.9.6313" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2651.308698][ T5867] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 2651.412569][ T29] audit: type=1400 audit(2000000910.424:110804): avc: denied { ioctl } for pid=29216 comm="syz.9.6313" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2651.434963][ T5867] usb 5-1: USB disconnect, device number 54 [ 2651.454645][T29235] overlayfs: failed to resolve './file1': -2 [ 2652.560246][T25020] usb 10-1: USB disconnect, device number 16 [ 2652.823011][T29253] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2652.873212][T21534] Bluetooth: hci5: Frame reassembly failed (-84) [ 2655.029538][T22229] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2655.364004][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 2655.364021][ T29] audit: type=1400 audit(2000000915.335:111071): avc: denied { read } for pid=29283 comm="syz.9.6331" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2655.393089][ C0] vkms_vblank_simulate: vblank timer overrun [ 2655.767797][ T29] audit: type=1400 audit(2000000915.335:111072): avc: denied { read open } for pid=29283 comm="syz.9.6331" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2655.862684][ T29] audit: type=1400 audit(2000000915.504:111073): avc: denied { create } for pid=29283 comm="syz.9.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2655.883955][T29284] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2655.935415][T29284] syzkaller0 speed is unknown, defaulting to 1000 [ 2655.942326][T29284] lo speed is unknown, defaulting to 1000 [ 2656.034993][ T29] audit: type=1400 audit(2000000915.541:111074): avc: denied { map_create } for pid=29283 comm="syz.9.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2656.162737][ T29] audit: type=1400 audit(2000000915.578:111075): avc: denied { create } for pid=29283 comm="syz.9.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2656.263758][ T29] audit: type=1400 audit(2000000915.681:111076): avc: denied { create } for pid=29283 comm="syz.9.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2656.312645][ T29] audit: type=1400 audit(2000000915.681:111077): avc: denied { read write } for pid=28497 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2656.337043][ C0] vkms_vblank_simulate: vblank timer overrun [ 2656.371076][ T29] audit: type=1400 audit(2000000915.691:111078): avc: denied { read write open } for pid=28497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2656.414508][ T29] audit: type=1400 audit(2000000915.691:111079): avc: denied { ioctl } for pid=28497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2656.504818][T17704] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2656.560908][ T29] audit: type=1400 audit(2000000915.737:111080): avc: denied { read write } for pid=26412 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2656.887848][T17704] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 2656.908312][T17704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.072890][T29295] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2657.140272][T17704] usb 5-1: config 0 descriptor?? [ 2657.302681][T29307] No control pipe specified [ 2657.479753][T17704] usb 5-1: Invalid firmware size=18. [ 2657.639631][T29291] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 2657.646223][T29291] PKCS7: Only support pkcs7_signedData type [ 2657.656238][T29306] libceph: resolve '. [ 2657.656238][T29306] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 2657.656238][T29306] ' (ret=-3): failed [ 2657.686917][T29288] delete_channel: no stack [ 2657.693794][T22454] usb 5-1: USB disconnect, device number 55 [ 2658.209929][T29323] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6339'. [ 2659.452242][T29331] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6340'. [ 2660.718088][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 2660.718123][ T29] audit: type=1400 audit(2000000920.349:111242): avc: denied { prog_load } for pid=29330 comm="syz.9.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2661.066283][ T29] audit: type=1400 audit(2000000920.349:111243): avc: denied { bpf } for pid=29330 comm="syz.9.6341" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2661.161674][T29339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6343'. [ 2661.197994][ T29] audit: type=1400 audit(2000000920.349:111244): avc: denied { prog_load } for pid=29330 comm="syz.9.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2661.239288][T29339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6343'. [ 2661.293742][ T29] audit: type=1400 audit(2000000920.349:111245): avc: denied { bpf } for pid=29330 comm="syz.9.6341" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2661.458835][ T29] audit: type=1400 audit(2000000920.358:111246): avc: denied { ioctl } for pid=29330 comm="syz.9.6341" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2661.621092][ T29] audit: type=1400 audit(2000000920.358:111247): avc: denied { ioctl } for pid=29330 comm="syz.9.6341" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2661.743017][ T29] audit: type=1400 audit(2000000920.358:111248): avc: denied { ioctl } for pid=29330 comm="syz.9.6341" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2661.849784][T25020] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2661.963782][T29353] netlink: 'syz.0.6347': attribute type 2 has an invalid length. [ 2661.973029][T29353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6347'. [ 2661.991471][ T29] audit: type=1400 audit(2000000920.358:111249): avc: denied { ioctl } for pid=29330 comm="syz.9.6341" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2662.084087][T29355] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2662.090849][T29355] audit: audit_lost=2660 audit_rate_limit=0 audit_backlog_limit=64 [ 2662.440491][T25020] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2662.493211][T25020] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2662.524868][T25020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2662.551077][T25020] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2662.814584][T29355] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2662.966491][T29362] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 2663.630586][T29364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2663.652727][T29364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2663.768932][T25020] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 2664.323206][T25020] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 2664.329177][T29371] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6352'. [ 2664.398127][T25020] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 2664.444709][T29373] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6353'. [ 2664.832548][T25020] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2665.076437][T29379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2665.108307][T25020] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 2665.194354][T25020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2665.247987][T17704] usb 3-1: USB disconnect, device number 66 [ 2665.276257][T25020] usb 5-1: config 0 descriptor?? [ 2665.360971][T25020] usb 5-1: Invalid firmware size=18. [ 2665.829431][T29374] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 2665.836021][T29374] PKCS7: Only support pkcs7_signedData type [ 2665.953457][T29389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21486 sclass=netlink_route_socket pid=29389 comm=syz.9.6358 [ 2666.115599][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 2666.115632][ T29] audit: type=1400 audit(2000000925.213:111475): avc: denied { create } for pid=29383 comm="syz.9.6358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2666.347525][T29372] delete_channel: no stack [ 2666.352529][ T5867] usb 5-1: USB disconnect, device number 56 [ 2666.404127][ T29] audit: type=1400 audit(2000000925.232:111476): avc: denied { ioctl } for pid=29383 comm="syz.9.6358" path="socket:[117955]" dev="sockfs" ino=117955 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2666.697310][ T29] audit: type=1400 audit(2000000925.325:111477): avc: denied { create } for pid=29383 comm="syz.9.6358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2666.949288][ T29] audit: type=1400 audit(2000000925.335:111478): avc: denied { write } for pid=29383 comm="syz.9.6358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2667.088344][ T29] audit: type=1400 audit(2000000925.625:111479): avc: denied { map_create } for pid=29387 comm="syz.2.6360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2667.227389][ T29] audit: type=1400 audit(2000000925.634:111480): avc: denied { create } for pid=29387 comm="syz.2.6360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2667.312508][ T29] audit: type=1400 audit(2000000925.643:111481): avc: denied { bind } for pid=29387 comm="syz.2.6360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2667.408829][ T29] audit: type=1400 audit(2000000925.643:111482): avc: denied { create } for pid=29387 comm="syz.2.6360" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2667.448484][T29407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2667.456090][T29408] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2667.484180][T29408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6365'. [ 2667.865174][T29414] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6363'. [ 2668.478836][T29417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2668.791042][T29427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2669.867863][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2669.874807][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2671.329821][T29450] FAULT_INJECTION: forcing a failure. [ 2671.329821][T29450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2671.417926][T29450] CPU: 0 UID: 0 PID: 29450 Comm: syz.0.6376 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2671.428712][T29450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2671.438766][T29450] Call Trace: [ 2671.442045][T29450] [ 2671.444974][T29450] dump_stack_lvl+0x16c/0x1f0 [ 2671.449662][T29450] should_fail_ex+0x497/0x5b0 [ 2671.454353][T29450] _copy_from_user+0x2e/0xd0 [ 2671.458957][T29450] memdup_user+0x71/0xd0 [ 2671.463206][T29450] strndup_user+0x78/0xe0 [ 2671.467541][T29450] __x64_sys_mount+0x181/0x320 [ 2671.472308][T29450] ? __pfx___x64_sys_mount+0x10/0x10 [ 2671.477610][T29450] do_syscall_64+0xcd/0x250 [ 2671.482126][T29450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2671.488023][T29450] RIP: 0033:0x7f1b3e77ff19 [ 2671.491693][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 2671.491720][ T29] audit: type=1400 audit(2000000930.414:111724): avc: denied { read } for pid=29451 comm="syz.9.6377" dev="nsfs" ino=4026534850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2671.492424][T29450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2671.502009][ T29] audit: type=1400 audit(2000000930.414:111725): avc: denied { read open } for pid=29451 comm="syz.9.6377" path="net:[4026534850]" dev="nsfs" ino=4026534850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2671.519861][T29450] RSP: 002b:00007f1b3f5ae058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2671.519883][T29450] RAX: ffffffffffffffda RBX: 00007f1b3e945fa0 RCX: 00007f1b3e77ff19 [ 2671.519897][T29450] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00000000200002c0 [ 2671.519910][T29450] RBP: 00007f1b3f5ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2671.519922][T29450] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000001 [ 2671.519933][T29450] R13: 0000000000000000 R14: 00007f1b3e945fa0 R15: 00007fffbd1c9458 [ 2671.519960][T29450] [ 2671.520004][ C0] vkms_vblank_simulate: vblank timer overrun [ 2672.090278][T29454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2672.233075][ T29] audit: type=1400 audit(2000000930.554:111726): avc: denied { create } for pid=29451 comm="syz.9.6377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2672.326407][ T29] audit: type=1400 audit(2000000930.592:111727): avc: denied { create } for pid=29453 comm="syz.1.6378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2672.430332][ T29] audit: type=1400 audit(2000000930.592:111728): avc: denied { create } for pid=29453 comm="syz.1.6378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2672.518545][ T29] audit: type=1400 audit(2000000930.601:111729): avc: denied { read } for pid=29453 comm="syz.1.6378" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2672.627866][ T29] audit: type=1400 audit(2000000930.601:111730): avc: denied { read open } for pid=29453 comm="syz.1.6378" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2672.739226][ T29] audit: type=1400 audit(2000000930.666:111731): avc: denied { create } for pid=29453 comm="syz.1.6378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2672.762620][T29459] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2672.861148][T29470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2673.864773][T29472] xt_nfacct: accounting object `sy' does not exists [ 2674.450819][T29478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6381'. [ 2674.849491][T17704] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2675.035396][T17704] usb 1-1: Using ep0 maxpacket: 16 [ 2675.088203][T17704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2675.103644][T29484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2675.132432][T17704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2675.162892][T17704] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2675.172288][T17702] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 2675.202216][T17704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.218928][T17704] usb 1-1: config 0 descriptor?? [ 2675.362878][T17702] usb 10-1: config 4 has an invalid interface number: 231 but max is 0 [ 2675.372944][T17702] usb 10-1: config 4 has no interface number 0 [ 2675.427541][T17702] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2675.447484][T17702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2675.483370][T29476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2675.492704][T29476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2675.502489][T17702] usb 10-1: Product: syz [ 2675.506954][T17702] usb 10-1: Manufacturer: syz [ 2675.522521][T29476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6383'. [ 2675.536701][T17702] usb 10-1: SerialNumber: syz [ 2675.561143][T17702] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2676.377309][T29492] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2676.389013][T29492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2676.396433][T29492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2676.408332][T29492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2676.431687][T29492] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2676.438785][T17702] vp7045: USB control message 'out' went wrong. [ 2676.453225][T29492] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2676.458704][T17702] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2676.470959][T29492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2676.479946][T29476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.488403][T29476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.499712][T17704] hid (null): bogus close delimiter [ 2676.526904][T17702] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2676.540838][T17704] hid-generic 0003:0158:0100.0036: unknown main item tag 0x0 [ 2676.548257][T17704] hid-generic 0003:0158:0100.0036: unknown main item tag 0x0 [ 2676.566874][T17702] usb 10-1: USB disconnect, device number 17 [ 2676.582454][T17704] hid-generic 0003:0158:0100.0036: bogus close delimiter [ 2676.594605][T17704] hid-generic 0003:0158:0100.0036: item 0 0 2 10 parsing failed [ 2676.602813][T17704] hid-generic 0003:0158:0100.0036: probe with driver hid-generic failed with error -22 [ 2676.839137][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 2676.839152][ T29] audit: type=1400 audit(2000000935.428:111988): avc: denied { ioctl } for pid=29496 comm="syz.9.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2676.878832][ T29] audit: type=1400 audit(2000000935.428:111989): avc: denied { ioctl } for pid=29496 comm="syz.9.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2676.925330][T27326] Bluetooth: hci5: command 0x1003 tx timeout [ 2676.931945][T22229] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2676.953822][ T29] audit: type=1400 audit(2000000935.428:111990): avc: denied { ioctl } for pid=29496 comm="syz.9.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2676.982063][ T29] audit: type=1400 audit(2000000935.428:111991): avc: denied { ioctl } for pid=29496 comm="syz.9.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2677.009729][ T5867] usb 1-1: USB disconnect, device number 37 [ 2677.018049][ T29] audit: type=1400 audit(2000000935.484:111992): avc: denied { mounton } for pid=29497 comm="syz.1.6390" path="/60/file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2677.043529][ T29] audit: type=1400 audit(2000000935.493:111993): avc: denied { mount } for pid=29497 comm="syz.1.6390" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2677.048624][T29500] syz.1.6390 (29500): drop_caches: 2 [ 2677.067615][ T29] audit: type=1400 audit(2000000935.559:111994): avc: denied { ioctl } for pid=29496 comm="syz.9.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2677.106376][ T29] audit: type=1400 audit(2000000935.559:111995): avc: denied { read write } for pid=29501 comm="syz.2.6391" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2677.130965][ T29] audit: type=1400 audit(2000000935.559:111996): avc: denied { read write open } for pid=29501 comm="syz.2.6391" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2677.156054][ T29] audit: type=1400 audit(2000000935.587:111997): avc: denied { ioctl } for pid=29501 comm="syz.2.6391" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2677.185859][T22454] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2677.276202][T17704] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2677.436134][T22454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2677.448216][T22454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2677.458058][T17704] usb 3-1: Using ep0 maxpacket: 16 [ 2677.470189][T17704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2677.477877][T22454] usb 10-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 2677.494965][T17704] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2677.500725][T22454] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.507237][T17704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.521089][T17704] usb 3-1: Product: syz [ 2677.525949][T17704] usb 3-1: Manufacturer: syz [ 2677.530960][T17704] usb 3-1: SerialNumber: syz [ 2677.539101][T22454] usb 10-1: config 0 descriptor?? [ 2677.551180][T17704] usb 3-1: config 0 descriptor?? [ 2677.566288][T17704] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2677.875009][T22229] Bluetooth: hci6: command 0x0406 tx timeout [ 2678.559358][T22229] Bluetooth: hci2: command 0x0405 tx timeout [ 2678.559398][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 2678.571486][T27326] Bluetooth: hci4: command 0x0c1a tx timeout [ 2678.634126][T27326] Bluetooth: hci1: command 0x0419 tx timeout [ 2678.640171][T27326] Bluetooth: hci8: command 0x0c1a tx timeout [ 2678.646285][ T53] Bluetooth: hci7: command 0x0c1a tx timeout [ 2679.040177][T17704] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2679.658533][T17704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2679.685901][T17704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.697056][T17704] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2679.709459][T17704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.754397][T17704] usb 1-1: config 0 descriptor?? [ 2680.000718][T22454] usbhid 10-1:0.0: can't add hid device: -71 [ 2680.041704][T22454] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2680.096950][T22454] usb 10-1: USB disconnect, device number 18 [ 2680.223648][T25020] usb 3-1: USB disconnect, device number 67 [ 2680.413081][T17704] usbhid 1-1:0.0: can't add hid device: -71 [ 2680.428533][T17704] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2680.448109][T17704] usb 1-1: USB disconnect, device number 38 [ 2681.219649][T29522] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2681.704372][T22454] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2681.908351][T22454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2681.929581][T22454] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2681.961321][T22454] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2682.003454][T22454] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2682.052190][T22454] usb 10-1: config 0 descriptor?? [ 2682.246417][ T29] kauditd_printk_skb: 3051 callbacks suppressed [ 2682.246433][ T29] audit: type=1400 audit(2000000940.479:115049): avc: denied { map_create } for pid=29536 comm="syz.4.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2682.319859][T29543] overlayfs: overlapping lowerdir path [ 2682.343501][ T29] audit: type=1400 audit(2000000940.488:115050): avc: denied { map_read map_write } for pid=29536 comm="syz.4.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2682.420447][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6403'. [ 2682.434292][ T29] audit: type=1400 audit(2000000940.488:115051): avc: denied { prog_load } for pid=29536 comm="syz.4.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2682.533647][ T29] audit: type=1400 audit(2000000940.507:115052): avc: denied { bpf } for pid=29536 comm="syz.4.6403" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2682.554413][ C0] vkms_vblank_simulate: vblank timer overrun [ 2682.605454][ T29] audit: type=1400 audit(2000000940.516:115053): avc: denied { read write } for pid=28497 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2682.629849][ C0] vkms_vblank_simulate: vblank timer overrun [ 2682.694945][ T29] audit: type=1400 audit(2000000940.516:115054): avc: denied { prog_load } for pid=29536 comm="syz.4.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2682.701382][T29550] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2682.714250][ C0] vkms_vblank_simulate: vblank timer overrun [ 2682.789810][T22454] kovaplus 0003:1E7D:2D50.0037: item fetching failed at offset 2/5 [ 2682.790660][ T29] audit: type=1400 audit(2000000940.516:115055): avc: denied { read write open } for pid=28497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2682.823268][ C0] vkms_vblank_simulate: vblank timer overrun [ 2682.831612][T22454] kovaplus 0003:1E7D:2D50.0037: parse failed [ 2682.865150][T22454] kovaplus 0003:1E7D:2D50.0037: probe with driver kovaplus failed with error -22 [ 2682.952981][ T29] audit: type=1400 audit(2000000940.516:115057): avc: denied { bpf } for pid=29536 comm="syz.4.6403" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2683.038433][ T29] audit: type=1400 audit(2000000940.516:115056): avc: denied { ioctl } for pid=28497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2683.149124][ T29] audit: type=1400 audit(2000000940.535:115058): avc: denied { read write } for pid=28279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2683.187180][T29529] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6398'. [ 2683.601702][T29554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2683.634124][T22454] usb 10-1: USB disconnect, device number 19 [ 2683.739850][T29563] ubi: mtd0 is already attached to ubi0 [ 2686.200917][T29598] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6417'. [ 2686.599631][T17704] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2687.131572][T17704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2687.198088][T17704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2687.250475][T17704] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2687.280120][T17704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2687.300756][T29601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2687.357751][ T30] INFO: task syz.8.6019:28120 blocked for more than 143 seconds. [ 2687.371334][ T30] Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2687.371908][T17704] usb 10-1: config 0 descriptor?? SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2687.401309][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2687.412830][T29607] ubi: mtd0 is already attached to ubi0 [ 2687.441102][ T30] task:syz.8.6019 state:D stack:27344 pid:28120 tgid:28119 ppid:21054 flags:0x00004004 [ 2687.475065][ T30] Call Trace: [ 2687.484196][ T30] [ 2687.493106][ T30] __schedule+0xe58/0x5ad0 [ 2687.549803][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2687.581211][ T30] ? lockdep_hardirqs_on_prepare+0x411/0x420 [ 2687.609586][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 2687.609599][ T29] audit: type=1400 audit(2000000945.502:115335): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2687.638828][ T30] ? __pfx___schedule+0x10/0x10 [ 2687.707901][ T30] ? schedule+0x298/0x350 [ 2687.717586][ T29] audit: type=1400 audit(2000000945.502:115336): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2687.720885][ T30] ? __pfx_lock_release+0x10/0x10 [ 2687.784834][ T30] ? lock_acquire+0x2f/0xb0 [ 2687.806400][ T30] ? schedule+0x1fd/0x350 [ 2687.810780][ T30] schedule+0xe7/0x350 [ 2687.814876][ T30] schedule_preempt_disabled+0x13/0x30 [ 2687.817074][ T29] audit: type=1400 audit(2000000945.502:115337): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2687.838499][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 2687.848426][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2687.871322][ T30] ? rmap_walk_file+0x54b/0x690 [ 2687.876208][ T30] ? lock_acquire+0x2f/0xb0 [ 2687.880738][ T30] ? rmap_walk_file+0x54b/0x690 [ 2687.887404][ T29] audit: type=1400 audit(2000000945.502:115338): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2687.899256][ T30] down_read+0x124/0x330 [ 2687.915107][ T30] ? __pfx_down_read+0x10/0x10 [ 2687.919911][ T30] ? migrate_huge_page_move_mapping+0x6a2/0x750 [ 2687.926787][ T29] audit: type=1400 audit(2000000945.511:115339): avc: denied { read write } for pid=28279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2687.936249][ T30] ? __pfx_lock_release+0x10/0x10 [ 2687.952025][ T29] audit: type=1400 audit(2000000945.530:115340): avc: denied { read write open } for pid=28279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2687.982006][ T29] audit: type=1400 audit(2000000945.530:115341): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2687.985185][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 2688.005937][ T29] audit: type=1400 audit(2000000945.558:115342): avc: denied { ioctl } for pid=28279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2688.011301][ T30] rmap_walk_file+0x54b/0x690 [ 2688.047288][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2688.055084][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2688.060295][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2688.065896][ T30] rmap_walk+0x7a/0xd0 [ 2688.069971][ T30] remove_migration_ptes+0x11e/0x1b0 [ 2688.075285][ T30] ? __pfx_remove_migration_ptes+0x10/0x10 [ 2688.081095][ T30] ? try_to_migrate+0x196/0x300 [ 2688.085982][ T30] ? __pfx_remove_migration_pte+0x10/0x10 [ 2688.091712][ T30] ? hugetlbfs_migrate_folio+0xb0/0xd0 [ 2688.097235][ T30] ? __pfx_hugetlbfs_migrate_folio+0x10/0x10 [ 2688.103216][ T30] ? move_to_new_folio+0x271/0x700 [ 2688.109336][ T30] migrate_pages+0xa3d/0x21f0 [ 2688.114029][ T30] ? __pfx_alloc_migration_target+0x10/0x10 [ 2688.120025][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 2688.125151][ T30] ? __pfx___up_read+0x10/0x10 [ 2688.130005][ T30] do_migrate_pages+0x486/0x740 [ 2688.134876][ T30] ? __pfx_do_migrate_pages+0x10/0x10 [ 2688.140297][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 2688.145331][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2688.152685][ T30] ? cap_capable+0x1cf/0x240 [ 2688.157752][ T30] ? security_capable+0x250/0x260 [ 2688.163164][ T30] kernel_migrate_pages+0x5b2/0x750 [ 2688.168374][ T30] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 2688.174456][ T30] ? rcu_is_watching+0x12/0xc0 [ 2688.179222][ T30] __x64_sys_migrate_pages+0x96/0x100 [ 2688.184690][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2688.189894][ T30] do_syscall_64+0xcd/0x250 [ 2688.194466][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2688.200362][ T30] RIP: 0033:0x7f73fb17ff19 [ 2688.204818][ T30] RSP: 002b:00007f73fc00e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 2688.215184][ T30] RAX: ffffffffffffffda RBX: 00007f73fb345fa0 RCX: 00007f73fb17ff19 [ 2688.223177][ T30] RDX: 00000000200002c0 RSI: 0000000000000003 RDI: 0000000000000000 [ 2688.231176][ T30] RBP: 00007f73fb1f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 2688.239206][ T30] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000000 [ 2688.247236][ T30] R13: 0000000000000000 R14: 00007f73fb345fa0 R15: 00007ffc46670568 [ 2688.255221][ T30] [ 2688.258383][ T30] INFO: task syz.8.6019:28134 blocked for more than 144 seconds. [ 2688.266782][ T30] Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2688.274417][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2688.283698][ T30] task:syz.8.6019 state:D stack:28512 pid:28134 tgid:28119 ppid:21054 flags:0x00004004 [ 2688.293939][ T30] Call Trace: [ 2688.297210][ T30] [ 2688.300449][ T30] __schedule+0xe58/0x5ad0 [ 2688.304880][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2688.310161][ T30] ? __pfx___schedule+0x10/0x10 [ 2688.315016][ T30] ? schedule+0x298/0x350 [ 2688.319347][ T30] ? __pfx_lock_release+0x10/0x10 [ 2688.325663][ T30] ? lock_acquire+0x2f/0xb0 [ 2688.330252][ T30] ? schedule+0x1fd/0x350 [ 2688.334589][ T30] schedule+0xe7/0x350 [ 2688.338651][ T30] io_schedule+0xbf/0x130 [ 2688.343015][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 2688.348299][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 2688.353816][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2688.359633][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 2688.365225][ T30] ? __pfx___might_resched+0x10/0x10 [ 2688.370519][ T30] __filemap_get_folio+0x6a4/0xaf0 [ 2688.376281][ T30] hugetlbfs_zero_partial_page+0xaf/0x520 [ 2688.382015][ T30] hugetlbfs_fallocate+0xe12/0x11d0 [ 2688.387402][ T30] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 2688.393371][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 2688.398726][ T30] ? madvise_vma_behavior+0x1b6d/0x1da0 [ 2688.404292][ T30] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 2688.411780][ T30] vfs_fallocate+0x459/0xf90 [ 2688.416464][ T30] madvise_vma_behavior+0x1b6d/0x1da0 [ 2688.421855][ T30] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2688.427630][ T30] ? find_vma_prev+0xdb/0x160 [ 2688.432308][ T30] ? __pfx_find_vma_prev+0x10/0x10 [ 2688.438913][ T30] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 2688.444482][ T30] ? __pfx_futex_wait+0x10/0x10 [ 2688.449792][ T30] ? do_madvise+0x25b/0x770 [ 2688.454338][ T30] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2688.460192][ T30] madvise_walk_vmas+0x1cf/0x2c0 [ 2688.465189][ T30] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 2688.470995][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 2688.476379][ T30] do_madvise+0x30e/0x770 [ 2688.480821][ T30] ? __pfx_do_madvise+0x10/0x10 [ 2688.486074][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 2688.491204][ T30] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 2688.497373][ T30] ? syscall_user_dispatch+0x7a/0x130 [ 2688.503128][ T30] __x64_sys_madvise+0xa9/0x110 [ 2688.507995][ T30] do_syscall_64+0xcd/0x250 [ 2688.512654][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2688.518557][ T30] RIP: 0033:0x7f73fb17ff19 [ 2688.522997][ T30] RSP: 002b:00007f73fbfed058 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2688.531414][ T30] RAX: ffffffffffffffda RBX: 00007f73fb346080 RCX: 00007f73fb17ff19 [ 2688.539469][ T30] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000000020000000 [ 2688.548635][ T30] RBP: 00007f73fb1f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 2688.559258][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2688.567284][ T30] R13: 0000000000000000 R14: 00007f73fb346080 R15: 00007ffc46670568 [ 2688.575267][ T30] [ 2688.636676][ T30] [ 2688.636676][ T30] Showing all locks held in the system: [ 2688.672368][ T30] 1 lock held by khungtaskd/30: [ 2688.677239][ T30] #0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 2688.715084][ T30] 2 locks held by getty/5580: [ 2688.728563][ T30] #0: ffff888036f180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2688.757991][ T30] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 2688.827813][ T30] 3 locks held by kworker/1:5/5866: [ 2688.865240][ T30] 3 locks held by kworker/0:12/17702: [ 2688.870645][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 2688.883630][ T30] #1: ffffc9000e037d80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2688.939723][ T30] #2: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x6c/0x270 [ 2688.949418][ T30] 5 locks held by kworker/0:14/17704: [ 2688.971394][ T30] #0: ffff888021ab2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 2688.983295][ T30] #1: ffffc9000e077d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2688.994807][ T30] #2: ffff888144fff190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 2689.004001][ T30] #3: ffff88805c9b0190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 2689.013258][ T30] #4: ffff888021aa5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 2689.022572][ T30] 2 locks held by kworker/u8:10/21541: [ 2689.028119][ T30] 1 lock held by syz.8.6019/28120: [ 2689.033669][ T30] #0: ffff88803685e278 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: rmap_walk_file+0x54b/0x690 [ 2689.044346][ T30] 3 locks held by syz.8.6019/28134: [ 2689.051151][ T30] #0: ffff88801b764420 (sb_writers#17){.+.+}-{0:0}, at: madvise_vma_behavior+0x1b6d/0x1da0 [ 2689.061344][ T30] #1: ffff88803685dfa8 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: hugetlbfs_fallocate+0xc27/0x11d0 [ 2689.072603][ T30] #2: ffff88803685e278 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: hugetlbfs_fallocate+0xc94/0x11d0 [ 2689.083804][ T30] 1 lock held by syz-executor/28279: [ 2689.089090][ T30] #0: ffffffff8feda988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2689.099478][ T30] 1 lock held by syz-executor/28734: [ 2689.104813][ T30] #0: ffffffff8feda988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2689.113958][ T30] 2 locks held by kworker/u8:3/29311: [ 2689.119326][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2689.129311][ T30] #1: ffffc900033a7d80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2689.142490][ T30] 2 locks held by syz.9.6418/29593: [ 2689.148197][ T30] #0: ffffffff8feda988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2689.157859][ T30] #1: ffffffff8e1c6e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 2689.167943][ T30] 1 lock held by syz.2.6420/29608: [ 2689.173045][ T30] #0: ffffffff8feda988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2689.182048][ T30] 1 lock held by syz.4.6423/29606: [ 2689.187198][ T30] #0: ffffffff8e1c6e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 2689.226864][ T30] [ 2689.229383][ T30] ============================================= [ 2689.229383][ T30] [ 2689.237795][ T30] NMI backtrace for cpu 1 [ 2689.242120][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2689.252618][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2689.262669][ T30] Call Trace: [ 2689.265938][ T30] [ 2689.268855][ T30] dump_stack_lvl+0x116/0x1f0 [ 2689.273526][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2689.278457][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2689.284424][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2689.290397][ T30] watchdog+0xf14/0x1240 [ 2689.294632][ T30] ? __pfx_watchdog+0x10/0x10 [ 2689.299295][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2689.304481][ T30] ? __kthread_parkme+0x148/0x220 [ 2689.309498][ T30] ? __pfx_watchdog+0x10/0x10 [ 2689.314165][ T30] kthread+0x2c1/0x3a0 [ 2689.318224][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2689.323415][ T30] ? __pfx_kthread+0x10/0x10 [ 2689.328003][ T30] ret_from_fork+0x45/0x80 [ 2689.332410][ T30] ? __pfx_kthread+0x10/0x10 [ 2689.336992][ T30] ret_from_fork_asm+0x1a/0x30 [ 2689.341755][ T30] [ 2689.346028][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2689.351251][ C0] NMI backtrace for cpu 0 [ 2689.351262][ C0] CPU: 0 UID: 0 PID: 29606 Comm: syz.4.6423 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2689.351280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2689.351287][ C0] RIP: 0010:debug_check_no_obj_freed+0x220/0x600 [ 2689.351307][ C0] Code: 89 64 24 38 49 bd 22 01 00 00 00 00 ad de 48 c1 ea 03 4d 89 fc 80 3c 1a 00 0f 85 dc 00 00 00 48 8d 78 18 41 83 c6 01 4c 8b 38 <48> 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 fa 02 00 00 48 8b 50 18 4c [ 2689.351319][ C0] RSP: 0018:ffffc9000ceff8b0 EFLAGS: 00000002 [ 2689.351331][ C0] RAX: ffff888030d577e0 RBX: dffffc0000000000 RCX: ffffffff8177255d [ 2689.351340][ C0] RDX: 1ffff110061aaefc RSI: 0000000000000004 RDI: ffff888030d577f8 [ 2689.351352][ C0] RBP: ffffc9000ceff9f0 R08: 0000000000000001 R09: fffff520019dff04 [ 2689.351361][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc900164dd000 [ 2689.351369][ C0] R13: dead000000000122 R14: 000000000000000d R15: 0000000000000000 [ 2689.351378][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2689.351392][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2689.351402][ C0] CR2: 0000001b31a1fffc CR3: 000000000df7e000 CR4: 00000000003526f0 [ 2689.351411][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2689.351419][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2689.351427][ C0] Call Trace: [ 2689.351432][ C0] [ 2689.351438][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2689.351460][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2689.351474][ C0] ? nmi_handle+0x1ac/0x5d0 [ 2689.351488][ C0] ? debug_check_no_obj_freed+0x220/0x600 [ 2689.351503][ C0] ? default_do_nmi+0x6a/0x160 [ 2689.351522][ C0] ? exc_nmi+0x170/0x1e0 [ 2689.351540][ C0] ? end_repeat_nmi+0xf/0x53 [ 2689.351559][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 2689.351577][ C0] ? debug_check_no_obj_freed+0x220/0x600 [ 2689.351592][ C0] ? debug_check_no_obj_freed+0x220/0x600 [ 2689.351611][ C0] ? debug_check_no_obj_freed+0x220/0x600 [ 2689.351626][ C0] [ 2689.351630][ C0] [ 2689.351638][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2689.351653][ C0] ? lock_acquire+0x2f/0xb0 [ 2689.351666][ C0] ? find_unlink_vmap_area+0x6e/0x3d0 [ 2689.351686][ C0] ? _raw_spin_unlock+0x28/0x50 [ 2689.351699][ C0] ? find_unlink_vmap_area+0x303/0x3d0 [ 2689.351718][ C0] remove_vm_area+0x1ae/0x3f0 [ 2689.351731][ C0] ? __pfx_kcov_close+0x10/0x10 [ 2689.351745][ C0] vfree+0x90/0x890 [ 2689.351758][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2689.351771][ C0] ? __pfx_kcov_close+0x10/0x10 [ 2689.351785][ C0] kcov_put+0x2a/0x40 [ 2689.351798][ C0] kcov_close+0xd/0x20 [ 2689.351811][ C0] __fput+0x3f8/0xb60 [ 2689.351828][ C0] ? cleanup_mnt+0x266/0x450 [ 2689.351863][ C0] task_work_run+0x14e/0x250 [ 2689.351877][ C0] ? __pfx_task_work_run+0x10/0x10 [ 2689.351893][ C0] do_exit+0xadd/0x2d70 [ 2689.351912][ C0] ? get_signal+0x8f7/0x26c0 [ 2689.351929][ C0] ? __pfx_do_exit+0x10/0x10 [ 2689.351947][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 2689.351962][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2689.351980][ C0] do_group_exit+0xd3/0x2a0 [ 2689.352002][ C0] get_signal+0x24ed/0x26c0 [ 2689.352020][ C0] ? __pfx_get_signal+0x10/0x10 [ 2689.352039][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 2689.352057][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2689.352080][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 2689.352095][ C0] do_syscall_64+0xda/0x250 [ 2689.352111][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2689.352126][ C0] RIP: 0033:0x7f6c3537ff19 [ 2689.352136][ C0] Code: Unable to access opcode bytes at 0x7f6c3537feef. [ 2689.352142][ C0] RSP: 002b:00007f6c36113058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2689.352155][ C0] RAX: 0000000000000044 RBX: 00007f6c35545fa0 RCX: 00007f6c3537ff19 [ 2689.352163][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2689.352172][ C0] RBP: 00007f6c353f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 2689.352180][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2689.352188][ C0] R13: 0000000000000000 R14: 00007f6c35545fa0 R15: 00007ffc58ab4268 [ 2689.352202][ C0] [ 2689.773735][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2689.780596][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2689.791080][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2689.801119][ T30] Call Trace: [ 2689.804381][ T30] [ 2689.807295][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2689.811876][ T30] panic+0x71d/0x800 [ 2689.815764][ T30] ? __pfx_panic+0x10/0x10 [ 2689.820170][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2689.825527][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2689.831495][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2689.836851][ T30] ? watchdog+0xd7e/0x1240 [ 2689.841254][ T30] ? watchdog+0xd71/0x1240 [ 2689.845661][ T30] watchdog+0xd8f/0x1240 [ 2689.849897][ T30] ? __pfx_watchdog+0x10/0x10 [ 2689.854559][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2689.859743][ T30] ? __kthread_parkme+0x148/0x220 [ 2689.864757][ T30] ? __pfx_watchdog+0x10/0x10 [ 2689.869420][ T30] kthread+0x2c1/0x3a0 [ 2689.873476][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2689.878655][ T30] ? __pfx_kthread+0x10/0x10 [ 2689.883232][ T30] ret_from_fork+0x45/0x80 [ 2689.887629][ T30] ? __pfx_kthread+0x10/0x10 [ 2689.892207][ T30] ret_from_fork_asm+0x1a/0x30 [ 2689.896969][ T30] [ 2689.900165][ T30] Kernel Offset: disabled [ 2689.904468][ T30] Rebooting in 86400 seconds..