last executing test programs: 19m48.933761413s ago: executing program 32 (id=1350): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="11136f1e08cf3ba4f6d701bf122a985053ea747ed65c6587f15a79b7cddd3e43a89a18305eb906b2e806ce5afa0f64ee9ffee92d1e102e6e7a5f3c4012d95cbea20a6c7f7392eb02ea1332388db841afb0384fdafa8a1615d83fc69b23b1f26894f1a370218dd6fec1a52ea7f6a92b5ec3bc5dba09db127e5a4c5b9341f7bc2b0343124686617a911473e9d5fc894dea070dd0da0d63b838a25a7fd6e82ed13d9feaf0078c3b4a1d39ec", 0xaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3f00, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000e00)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x5, {0x5, 0x24, "82a794"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 19m20.888565143s ago: executing program 33 (id=1381): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/251, 0xfb}], 0x1, 0x0, 0xffffff25}}], 0x1, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000640)=0x28b) socket$inet6(0xa, 0x80002, 0x88) r5 = io_uring_setup(0x1fe6, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) 15m33.662495309s ago: executing program 34 (id=1904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5c}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x1, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20008811) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/184, 0xb8}], 0x4}}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x3, 0x0, 0x0) 13m57.587770703s ago: executing program 35 (id=2125): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000240), 0x9, 0x2100) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000280)={0x2, 0x1, 0x9, 0x5, 0x7ff, 0x9}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2e}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0x10, r4, 0x9) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') poll(0x0, 0x0, 0x40000) 12m3.357406788s ago: executing program 36 (id=2415): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$int_in(r4, 0x5421, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8) close(r4) chdir(0x0) syz_open_dev$dri(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) 10m41.516227061s ago: executing program 37 (id=2628): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x1010d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) socket$netlink(0x10, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mountstats\x00') fchdir(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'team0\x00', @link_local}) r3 = fsopen(&(0x7f0000000480)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES64, @ANYRES8, @ANYBLOB="a27fdb9fe2af32cefc17bd9c8d8a22af9c8526a43432ec1f046f84491d0959ca10d67a0ca8415d92409564754ad489e2895291ed04440eb727724fe7dacc0d7455058b101d45aa7a9458c689ad02c65ac9be8741b75f45a704560a01eb60b8f7a75246e8ff180ce2f59d23541d13735cbca2d6284c0bf9ece6a390845517a383a3a4d1ac4437cde639331a7eaa880828bcb81093ed2900d9da8e249996b14a7e421373328099ee5b0a2c536c12a0e1ac3ef44bf22f39d02ce2dbd3db292040d9b4731ea594cc0fdad69059c3", @ANYRES16=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000040)="b9ff03076844268cb89e14f088a847e0ffff00124000632177fbac141416e000030a94029f03032f87e589ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r6, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40305839, &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="00000000000000000000cd4c75faa991fde700210000000000000000ed4ed1e2c1a662eed2e935af3832c5a2982f4aa148645f1a92040cad54626b0d0746358ce6c6c71d93ee8db82ab21fcd3b450e20d2e3a775ebfd160d3b7a67b1e79bc659e5233b3079"], 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0182101, &(0x7f00000004c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(r7, 0x894c, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[], 0x0) 9m16.992695866s ago: executing program 7 (id=2861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfa1}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f48bad00200600fe8000000000000000000000000000bbfe8400000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000"], 0x0) 9m16.889286178s ago: executing program 7 (id=2863): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000500)={0x0, 0x469c, 0x200, 0x200000, 0x1b0}, &(0x7f0000000100), &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000003c0)={0x3, 0x100, 0x200, 0x5}, &(0x7f0000000400)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c44ee1e9efc656176653a392d4e07"]) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1b, 0x8032, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 9m15.829949864s ago: executing program 7 (id=2869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 9m15.449891974s ago: executing program 7 (id=2872): sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x880, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2}}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2b6, &(0x7f0000000140)={@random="b8cc31a6ec38", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x4, 0x2a8, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc5, 0x1, [0xf44], "e453a00bcd4ea4e1ce7ebbb01c9df475a9f653845237facb272a810f557763ab962ac03c88a282b7f8c51a64ce59e031f3ac83d9cee4cee462d1236bdd368e56304e7344e205356fd65f99e256b1e2fcaccc9acf4596d489dc456e49583a44a6647d230d50b7924be468ad6eb68a2983393080c1fffa044112bd07d3de80a953ca607e7747cf41d549a411c400fd138db225ff843bd55961bcc6a9ac7fe77cf0e868e88b79742dcabbeb98c55ba20eca2bab636b0dbbb7604f12cf73f317b34f75233b8958"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "60fd0c13979fc4f2317d4ddb579b4594d65284d87138dd6c112b694cdba0b475cca5d7a9a392302d1bd167dd52cb05bab24894171da6d13d347dbfce12d367fb6e4af9cd6456f5f2d67c4c6b47b5e53e3a22e89617ad9c70223aa4bf410f67915bd35a6cea8f3b533d32392dc9a4985947f10d4f2bb652ef960c5923a311f473a05df0d412fc26b5b2721523b6ba75ff1d5b1aa0169e2f1c749c135fab5d195c"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x101], "452499d88b1bed61617c539f5cc57353f18530b6bdace8f884ec9b273496c8c3a5dc015306ac96c74293195a579f9300d00cc4b078a1cfc53a73b55d50c9a4112e1fb099811f17c06e9807599a1cafde19dfe729e8353207"}, {0x8, 0x88be, 0x2, {{0xa, 0x1, 0x4, 0x2, 0x0, 0x2, 0x7, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x7, 0x3, 0x1, 0x1, 0x2, 0x3}, 0x2, {0x8, 0xffff, 0x3, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "00e2b98b8f0d090fb7a78cff47e934d18e8a465ce058f437ce440970131cb8de06f08a6d18992efb4b9936314e4f9960ce88f102534d76a8f9ecdfc6e2ac2c534ab8dd302fd0f8c35518545ce1a5bdd8dfa33121f49926b9ebfc2d919eedb53fe3b19795adc9e66d1c422ef37e6ba5c38b671164251b70561d1c6d79c693a038fa50f8e207dce1076e47715ba952cc"}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4bd, 0x13, 0xf30, 0x556]}) socketpair(0x1e, 0x3, 0x4, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4840) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 9m15.148665765s ago: executing program 7 (id=2875): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) 9m14.999426411s ago: executing program 7 (id=2877): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0x67dd, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4000, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 9m12.083346294s ago: executing program 9 (id=2914): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x21}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r0, &(0x7f0000000780), &(0x7f00000007c0)=""/48}, 0x20) 9m12.002866036s ago: executing program 9 (id=2915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x20, 0x6, 0x0, 0x0, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x10011, 0xfff}]}}, {"941ee2a1b3e26b49"}}}}}, 0x4e) 9m11.860409494s ago: executing program 9 (id=2917): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000d01000004feff"], 0x10}}], 0x2, 0x48044) 9m10.921564867s ago: executing program 9 (id=2924): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073011800000000009500000000000020"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9m10.870831176s ago: executing program 9 (id=2925): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) 9m10.797100089s ago: executing program 9 (id=2926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x3, 0x0, 0xbbbc}]}) 9m10.164609955s ago: executing program 5 (id=2932): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 9m10.094309753s ago: executing program 5 (id=2933): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m10.037391604s ago: executing program 5 (id=2934): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000d01000004feff"], 0x10}}], 0x2, 0x48044) 9m9.992964728s ago: executing program 5 (id=2935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 9m9.949930105s ago: executing program 5 (id=2936): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) 9m9.906688017s ago: executing program 5 (id=2937): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000038500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m6.526401606s ago: executing program 8 (id=2948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "07bb0eb70b271829"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c654b70dbb0509dff1e05133433d3421436d31598843c730"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c3cfb1f48251166eedcab66a878d4d802cbe0ef4959e6b97e2c50839db92ce43"}]}]}, 0x6c}}, 0x4000840) 9m6.436848154s ago: executing program 8 (id=2949): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = fanotify_init(0xf00, 0x0) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file1\x00') 9m5.596888198s ago: executing program 8 (id=2955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100000041c93fa6872c9e235415ef6578e228d8e549e9b74bed9a429e0412b180978bbd427fb15d6f07235e860e2580d1c3fe5e997557c634c43cc758724a3f578d105d48a74642ff9397e04a4a777418171b8ee8f6fe461769615844cb865668aae9616eb4c04d7e13e78ce167ebcf6960dc600c27295e7ee339cb8d48642e1fe70bbad463269a010b485ecd2338463d93242ac97f3de0", @ANYRESOCT=r1, @ANYBLOB="000000000000001500"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'geneve0\x00', 0x8000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_procfs$userns(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000280)={0x87, 0x70, 0x10000, {r4}}, 0x20) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x0, 0x7, 0x1, &(0x7f0000000040)={0x0, "4d3456d4f2f23ddd9d525712c36c293442b665e677d4789ead10dd51d9427580a4"}}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x44}}, 0x1) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) poll(&(0x7f00000003c0)=[{r6, 0x2001}], 0x1, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40012002) socket(0x23, 0x1, 0x0) 9m4.389252221s ago: executing program 8 (id=2956): openat$ppp(0xffffffffffffff9c, 0x0, 0xa8040, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x6f, &(0x7f0000002400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1d, 0x61, 0x66, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8}, {"4a96b07b5857033f6ac4fb56ee6651fd3e1809dfda0f56eb713034afa2bce4957d1d0701e781267d1620980b2adf597cafb6cb7913be02849e"}}}}}}, 0x0) 9m4.356541272s ago: executing program 8 (id=2957): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) 9m4.317815115s ago: executing program 8 (id=2958): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x41c}}}, 0x7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xff) request_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 8m59.210158966s ago: executing program 38 (id=2877): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0x67dd, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4000, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 8m55.704118519s ago: executing program 39 (id=2926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x3, 0x0, 0xbbbc}]}) 8m54.704418823s ago: executing program 40 (id=2937): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000038500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m49.173084394s ago: executing program 41 (id=2958): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x41c}}}, 0x7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xff) request_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4m4.397638724s ago: executing program 4 (id=3817): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x55}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0x800, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0xe}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40084) open(0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4841, 0x0, 0x0) 4m3.395381171s ago: executing program 4 (id=3820): pipe(&(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@multicast, @remote, @val={@void, {0x86dd}}, {@canfd={0xd, {{0xe00}, 0x0, 0x0, 0x0, 0x0, "ec7ab49f42266b558197758939c3a67064eb2413deb6d588b153902f5348321b2aa24fcea6549a091e651e6c1d3053eef4b8f189054244df8c1353433e834d4c"}}}}, 0x0) 4m3.348013237s ago: executing program 4 (id=3821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() socket$alg(0x26, 0x5, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x3, 0x8000000, 0x5b, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x20, 0x0, 0x8}}) r5 = socket(0x10, 0x803, 0x0) socket(0x1, 0x80804, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32, @ANYRES8=r0, @ANYBLOB="123d5815ca47f39e1d6cd673e46d9c26063c7978595e50826d41300015e929bdcbee1e14c5612866c1575229141b3ee33af14e6d656d2ad93fccf550324db4bf", @ANYRESDEC=r5, @ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x1000000, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 4m1.408515732s ago: executing program 4 (id=3825): socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xffff}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) getpid() select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0100000000000000000038000000000001909d79073e6895a379aa03009078120002282500000000000000002f00007f00000100000000240086ddffff0000"], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f00000000c0)={0x1}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(&(0x7f0000001000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x800040, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x23) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) dup(r5) 4m0.254958503s ago: executing program 4 (id=3828): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000340)={0x6, 'dummy0\x00', {0x171}, 0x4}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x10000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000008c0)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x20000000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, 0x1403, 0x1000, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r10 = socket(0x2a, 0x2, 0x0) sendto(r10, 0x0, 0x0, 0x0, &(0x7f0000000540)=@qipcrtr, 0x80) read$qrtrtun(r4, 0x0, 0x0) write$fb(r1, &(0x7f0000000040)="98f7144d454bab77be0b31aec9668b5db50dfcb64cb3bbc85488a568cdfb760728d2918b0f2540202ca04a6262262a8d26162310a89d123e7444d30b5cd2130cdb2087bc7a03ce91f08b60aeb46906c98d2b47d3d58625d0c5b452a9ed3a1cb237a78040f24a114fa9b91c90027c0ca0868526dccab0a6d15dcbfab81b04695426c1f00000d97924b3b9bbdf4fcf37bc4fba01de45a0d4ed59eb7543c6b7db377f88", 0xa2) 3m57.956518765s ago: executing program 4 (id=3834): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x6}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3m42.702400451s ago: executing program 42 (id=3834): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x6}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 18.30463656s ago: executing program 2 (id=4399): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000500)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0xae) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat(r5, &(0x7f0000000340)='.\x00', 0x0, 0x131) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000500)={0x0, 0x18a, 0x0, 0x0, 0xc}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) 14.632452311s ago: executing program 2 (id=4403): socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) socketpair(0x23, 0x5, 0x0, &(0x7f0000000080)) (fail_nth: 3) 13.081451971s ago: executing program 3 (id=4407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000057c0)={{0x12, 0x1, 0x0, 0x0, 0xba, 0x9e, 0x8, 0x2019, 0x4901, 0x5933, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0x19, 0x8e}}]}}]}}, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = dup3(r4, r3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1, 0x0, 0xfe, r8}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000009}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001a80)=ANY=[@ANYBLOB="020a000c0b00000027bd70000000000002000a007f0000cf02000000cbc0000002001000000004"], 0x58}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13.081180942s ago: executing program 2 (id=4408): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0x5, @pix_mp={0x0, 0x1, 0x20323159, 0x1, 0x0, [{0x200, 0xfff}, {0x6}, {0x1}, {0x4, 0x1}, {0x4, 0x2}, {0xfffffffa, 0xa}, {0x3, 0x9}, {0x3347, 0x6}], 0x4, 0x3, 0x1, 0x2, 0x4}}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000a40)) 12.920515253s ago: executing program 2 (id=4409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300), 0x10) r6 = socket(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x85d0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) lremovexattr(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$unix(r8, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000940)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}, {&(0x7f0000000080)={0xc4, 0x19, 0x200, 0x70bd28, 0x25dfdbfe, "", [@generic="633b10874b89866f0c8f0c8073c6e89ec31b6176c6d99a290e4c68f27730c537555efb675e8de917f667fd758f58de9d45c7905c7fce7cc18acd534f039a27835edb72f71f700bd34e5e0146b19f23d7a0a4e808e932ba3231f496fb698d0a51620a923351731967a7272bef1528ec71ad8eb5dde280aa16229187558ed0ebe95bcec07840537cb0a1b6b80fe40b3e1aaf3dae47cb352ad36f7e312e0a83ee33545d498cdaad16aa66614b44055e8deb3d"]}, 0xc4}, {&(0x7f00000004c0)={0xf0, 0x39, 0x400, 0x70bd27, 0x25dfdbfc, "", [@generic="b6758a293fd77079e5515337840ec80b4eaf8beb9c2c85b27c2b9e9b002fa2382e296892ca4437ac26da6aacb308e427c4a7366831884c8b9afd94c7324cf79787", @generic="a3e9e25c17ae1beea08b664d751d3d5bbd7df03ecdd24399b6e071b32421016e0ccac509f495848416d1cf04b238411c6dc8aa431638792b05d4eb58a77f7598f59ade31bb75f897eff3df83c4beb6b356be175f7d9787fc9c68f6347ce38843c12ba3935930f9acd6adb630431568482db65b3eb70dc530649880507cec47cc32e731c3c1229b28c61550a5acc855ada128715220543fde69bd39f7"]}, 0xf0}, {&(0x7f0000002b00)={0x2144, 0x3d, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@generic="31d7a5a78fc6aa15d499fd2a672c907964379e9b2fbb3b5a82b26a67a25035b1d8f8d74e961804bed72533dfa2109ac89cf9964896197c20f88346473b3a6f0d5e200ed388da80d4dc946dd342844acbf41e1370a1f53f9bdbe11cc51bc890d73d27485420af704f2f02cf2f2b12a7194228a0f28fd81b1c7cabb8f693f5c9bd5896", @generic="1571f01767c52de1454ea2ca6a39fbde6215b6626c", @generic="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", @nested={0x1099, 0xc7, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @uid}, @generic="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", @typed={0x4, 0xb0}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x7}, @generic="2e507aa02c0833d6c6074bcdc88fb006ddf3372977b9cf81438c7ac6ff4e29c4ffae6f7d0b7b58b3fa84a73ac90344bb0cd956748f848596c064dc9409eababe9877a1af2fec94e517ba23a920af903ed99a118c1d58a7f6c488d708b7b9009abb00e85be442fcee6c708d1f12e44e2767f864223130d42618c6012d6fe4671f8c"]}]}, 0x2144}], 0x4}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xd, 0x8010, r4, 0xd1886000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 12.426325624s ago: executing program 1 (id=4411): sched_setscheduler(0x0, 0x2, 0x0) chown(0x0, 0xee01, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4001, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x24b00) ioctl$USBDEVFS_SETINTERFACE(r1, 0x41045508, 0x0) setrlimit(0x6, &(0x7f0000000240)={0x3, 0xbfb}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x4}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x541b, 0x0) 11.752686518s ago: executing program 6 (id=4413): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000500)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0xae) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat(r5, &(0x7f0000000340)='.\x00', 0x0, 0x131) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000500)={0x0, 0x18a, 0x0, 0x0, 0xc}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) 10.89931271s ago: executing program 1 (id=4414): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000500)={0x0, 0x469c, 0x200, 0x200000, 0x1b0}, &(0x7f0000000100), &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000003c0)={0x3, 0x100, 0x200, 0x5}, &(0x7f0000000400)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c44ee1e9efc656176653a392d4e07"]) connect$inet(r2, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1b, 0x8032, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 10.838584731s ago: executing program 0 (id=4415): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_complete(0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000340)={0xffffffffffffffff, r4, 0xfff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x18) 9.291805485s ago: executing program 0 (id=4416): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x101001) r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="a2ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601080000000000c19f00006800000c0007800800114000000008050005000a000000050001000700000005000400000000000900023100000000120003006861736800000000000000000000000000000000c5bfe94075057354d07b6f83b033f2c93b7234b43ccfa5a7a6a97c8f9ff41bdf7c7e7a45112c53d4c75a0de94327a05ca30a38"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) 9.288913971s ago: executing program 1 (id=4417): timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8, 0x7, 0x11000, 0x9, 0x7, 0x80000001, 0xa, 0x86}, &(0x7f0000000080)={0x7, 0x7f, 0x6, 0xa3, 0x3c4, 0xfffffffffffffffd, 0x1ff, 0xe2fe}, 0x0, 0x0, 0x0) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x1, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x1c, r2, 0x1, 0xfe, 0x6, @random="162556007dcc"}, 0x14) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x280400, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') ioctl$RTC_UIE_ON(r4, 0x7003) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) syz_usbip_server_init(0x3) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000000000000000001d0100001500040000000080030200003b20c6250e5a67ff02000000150003000100012007010000214beca82963bc4902000000"], 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) 9.249083453s ago: executing program 3 (id=4418): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4001, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000100", @ANYRES16, @ANYBLOB="0101000000000000000001"], 0x2c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) fcntl$setown(r3, 0x8, r1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x0, 0x4000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x100000, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) r6 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f000009df00)={0x8a8, 0xd}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000340)) 8.383772184s ago: executing program 0 (id=4419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001b00)={&(0x7f0000001500)=[{0x0, 0xc11, 0x3, &(0x7f00000000c0)="6c0604"}], 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000240)) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20}, 0x4800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000280)=0x1, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0x8004550f, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 8.16184994s ago: executing program 6 (id=4420): syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000500)='inet_sock_set_state\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000007000000030000000410000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2, 0x0, 0x8}, 0xffffff5c) write$selinux_access(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a61706d5f62696f735f743a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a73302030303030303030303030303030303030303030300016705ceda21e3351a8c0569a7d4eab8ea1d08120be840fc3f84bd328f8f37bda18e1db247745b4917e5b37fc2b3215b35d8c4b5b6a168beb353c5fcf855569a42be02d65fc048eb369d58a52dcf1295bfb7f9cb97e87a63f6a5c0ec0a6f1b5b76dc4260aee53fa45ff3637b0e96e75578264faaf5a94104a5e51874dddd0d456593bfb5ccc1edada", @ANYRESOCT=r6, @ANYBLOB="69582a664d7215e63a1c8f9abc293f0b0cb0ee6f088f603875976c93", @ANYRESOCT], 0x53) pidfd_send_signal(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x3, 0x72}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 8.096738446s ago: executing program 3 (id=4421): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000500)={0x0, 0x469c, 0x200, 0x200000, 0x1b0}, &(0x7f0000000100), &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000003c0)={0x3, 0x100, 0x200, 0x5}, &(0x7f0000000400)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c44ee1e9efc656176653a392d4e07"]) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1b, 0x8032, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 7.113650856s ago: executing program 0 (id=4422): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000500)={0x0, 0x469c, 0x200, 0x200000, 0x1b0}, &(0x7f0000000100), &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000003c0)={0x3, 0x100, 0x200, 0x5}, &(0x7f0000000400)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c44ee1e9efc656176653a392d4e07"]) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1b, 0x8032, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 6.758092614s ago: executing program 6 (id=4423): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000002c0)={{0x3, 0x0, 0x466, {0x4000, 0x100000}}, "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", "34b8c98fd3fc18c4a168597e83150fda21dbc87378b70eb16dd53cbd9f849dca7fdcf16b055124088293c2524ab90e5d0b20b7408c5e1d6389f5fa9f56a42c7a02838185757341223cfd8fbc3ca53162fba6be8f8334bf06563570e79c3c74cfead80b7e5c94d19d5cc2f56ac8bdf7225e94e520b5a095b8704441952ca5fd4e609bd333d858f3f89b4fb1a6fb7c9f4697ae31526a3942cb98c3f1c01dafedc7cf55db920e20f52882003933fefed8b3f22e3e7cd9f6a2de54c4b631675289b97acaf127292172cf6409f83704f6c9339e951f62066bd9b52daaa10c975c28ad3603290753f8212195651b0fc8122b011b84c437813618587d8ef213a1f40ea1d191caa5952b49d04fa82e82b5daa5bef2324b5b65099f99b51695b916410c447a9fb48715aeb100249343bd2e807dc77eb1da0369372bff326f9ae8b4fcf80fb100820c8f5c22ca96b59664f102d6698a41c7419e695b8a5b834e0c11c5ed0de892497a6e8f16a9d7d66df7b81513366ff6cd2758aff433f49a021eeac1765d223794e3dfa2c509cac90a0d4a29ad103f97e4d29f6ff2a056107a5e2ee5b2686b9d7c45e1ee1814920094e145dc38840538b7b6c0726927aaca55711083dd146adadcf1da5c0d64185623164191083e5f397e72af5413272c75cb53e07bf0cf00570ed597c1ed4b3ec8c1d9ef95b39f8851e0a4effdb10ef6a2debf086fd11834b3e6e5947d5ce6a9b1df54d4b2e2bf36124e8229ce0cd456db651aed1a1e9aa6fa831686df71003c61c05d00cd572a9176905f6823ad8d81592b5e20adbaade888e38a038679258f68366186439779316df64a654e1996288a8c8e5abfff0b2254d09a3db72efdf3b401d12221a00fe8b006c1317d40837f13940d7b56df92126062d3787db776c6b7ec4cd7f81e827dd9772042fd054ffec56960b176a3b094c11d5946e1922f9de5cdb7036048ae0f2a2c0079a1f46f4903e7311eb9ac235d10b7144b910fc5e9a0351e2f08a53ba950fb91926f147da95aeb50bb3fe068d9336c56caa34daf77dd1bc6cf80c2887d32a9780fda8d850e3088df89dd5d83f463e4efc4e525330e30d5ddbee122c446722fc0db375cb1aa5fe247a75e6b5c8a283a78a49c9d71dd4e136a11b64dbc30c55c898160949faadd6d58b9297a8d2eba7de3578a4443f39c68f3704cafd632adbf65c11cdff6b4827bd75694e4680bfb138c75af1e693f570c4168007ef23d6db035a4dd51e413886e18132e661aaf9d371b70e27e6517c2d1c28df81d5d43ed64cc0aa47deae661a0a049d008d08300e5077d64c79b0494295b6288e02ef25b02bcc3a16bedb3ebf2df7df16e304058a49b8f8f4acc46b7fa9f4631ef1b1a2a370fc440c4035fecbe1fdfa565c8733d34db345878de47b3673579694f1f00be050cc6bd43a3c0f13c4aac81e92d25fa778b6627ee2085a212cebcc26262bbac1aa4612d0ccffe64a1e6609bf58d9e2264091ce89b7407ce7523d8af9ccb96089aeacdb8c3cae6a9a1f3e601854e133e9bf34b6eabd3686cb75dee6dc902df0f5f6de008993be5d15c71634164e389189254e31d0288a893d64f8a39531a7b597e3d5a82837444a472f95b869a24ecc183371516dd8d45d4e56fe56a59f7913ffca03f1d70ffbe4221f27048a606e62777685383c90d521cc226e3e049393e794a4b5597fbf0269023841a62940283c3f64073f19e5ea2b4bd14001d0057e1461ad618cf13c9e0dac576f625c3027c7dfdb08c7bb78abb4c399618fe28e2a1eb5e76d83aa777a4b11419ac1d19e4e01d174bed59ece0898da93fabf430f85852faf02c5b9738236dd3318768e5bf7272c1663571f3f66f3383d1ee06d79fde9ab4f679306644cff31e3163b81876fe025f658d1a673aa802707074a8890280bdb7aacdd8f4b904f04b403a4bf0bd66c4ff2353053ca76cbbaf1a528505aa56b8d86e8b3fcfade88ada7eaef596dd42b5d123daf8f461c2570f83afa943cbea484b0597aab5886bb32c9f995ff788b20f22532b8461639b2736913e201fd8b3a68d3984327a7d8fcdf319bbc84954355206c0fa73003a4732d28b849855d27033f99a1dc4d6b2e610cdd0436738b0f418628bb996352a8cb19d536e138207f0e04a08550a659deb5cec826621ceabe287f2dbdb9fd6ab0ccd0c77a28d4c0c40e3d9dbed58469fcc7b6c263119247051fced89807628ddf01e0c1962778400e9aa8285a6fa7453e32e53627653ce4adc1375e94ff20fadf83629989bb2d81834040e2622d0bd272ce44c1cf25dd6affdf7481ed2bcf87a5c17bf08029dadac6a8069615160d53a0c0da10fb54813a4cdbac2f55727b4d77b5daeb32e4ac12ce6dd9f9fdb9dc2db0b634bf58435f7570a863c9673427e1ef422111a0c6261d798117d025cc4bf4734f79999d3a203a8f146fa705787bb2211661c7d530ee3c4aeb48f60427ee744dfba2c2e121fbd4193f46a0eb1fb521b86cc80b23a9c5ec9f0f0b9a1a92996f46dada30e9c141a682f67489d8c1e17b7b9ae82d063b05b0c242dd24772d78ffc3c2f5227da3790cfcf36234dcc8cb7e854898f6d43327006b76cd30659934008b8b594033f267a007ee75b0f005d8430a01cc46c619e366f353b8a4d23f66ab35e0c50d6b5b597b9364c50fc7f0fb146b5d524f81022562e01f7e8747a6af41be730484771e85c201f2be69fd24557456d8fdf90158ce7f13f81b13c25bd6c83ca998f116b46c1c02f46422cb943d86bdd7bd4bf9e0e377714c2310a6e68fc830f40624c65fd20c89c9734d008996c2b02e412eb1fd94d5a61cab586af2634a3adebe4cb73e9ec267a80d7695936dfa99cee3ddcd755eaa88adef901b96783bdcfb26c1912322510d81244e4250a8c321ba33fe22ebbeccd0ebca1cdcf069ca684adc83e99ac05915e2aedccba7211d72f0fbbd6c02f090002c8d14111a33e9ef92259d2d47be2641e19f78c9d8ebdcdba56090216c22e6ae1c8efb01966fb708c8c9f2a8d2f4a18f6271765edf9a276816b84f36302c1d79c0f283d55c6ae7dc222fc55113593a72bef8168eba347e43af44aabbef5e945cba1b08d9947983a73c1f255e4e3d7c405b46a012e356b64baf4322ac4435ef6c43e6d64fd776b054f2a97c61c75bd346f5ce003c666e2589bce4865e913a98a4805f98631ded37839a4f3c734337d1a1523bf0cae64fdb0015c9f12163516d303191fb3071c11eb0de7e4c211cfadf52ec6756d44378578dfe0cd787b7409bd225515a0a8e551c12ab43d12843263dd14092cf8548a29ad0ca12b1b4d7c71b345ee8b2f4aa2b7f0915b3dcdf67d709df46dd6833c64bec46b79d4946f3345d255d8bba0b533822b7b5e64a517302a5dd229657ccf301eb41f0f5d02dae93c6e46c96f893c7df6dfa6d3925e2af3d1900ebf5cf5c90cae0307518f3f87823b4a13fef6dbfc2cabff9acef789d239f5672d27b1b1eb1e783856372d53f41a530cff8f028ef798e8ca710bcae7df5cfc9443143aed73aebe20db7422a7e972a4bf2c58d15b6ebb82ca88e315b94d4534c8b62fa5cbcb88234108183508541b25bc9cc760e5ca1ae7c849906e0a58d7f5461a4546d9f7e087ef66e1a783d04947c2b75fd1e3d540ba94b8422c33759b3ca65557261e39141154a53ca05decd28cc4a8ca90dc1f892ed699f16c9f0539a2eb341d57e4662a4c53dfcf371523e126fa7bed6f8feac0218e77d792e7c694441de599bce1aa42669eceba40936004fe391974f634826bd7a362e74df6afe07a9a99339529fc4e5425ee61aa528d33f4d458e0016e9807aba825602464bb6ae75a640a8b9469baf96655a3d10e4b00a4d72f1dd7cb18e68f04c5f562bb833f334a3416f5ef889a0f6935f5fe2eeaa03499a46b5290b3222c8042d7c934dd7c1acfafadc1bcfeb5a0bcbed28fd3ae368b006a67bd3f1364c29702fb6e19ec2be02a7107c88e1a367ea2bd7bbb334db7ceb98487aa445062e6d719fda8c4f88e7eb71e98639849b899556200a715471f2685ab4edd57fd0d8d4bf89803d49069eca1e867d63e411c392f32380482d41b0da60554d15f007815593bc49149e5d0d654c1f05bb3c76f38016e45500d5bd0526673fb3a65c6fc0390530ccdc4c5c4e21343466c4bbfac19e3458e029a722093c0882463e0cbb33fe6802c2ea0d0fdd0e8412f633dd356cc1621faf59398003d3c321faa40c8ece574c4ba48e83e765e77009499a7fb369bae1423f73da4bfad7913a3a0316c7e79b53dc8532821bb31435901601c9d622533d1d21751b618c62dcea588bde9aab53a8ab65c620da49db8271c18a85d8b9d18cf304e63333f38dfb97495bf270300efad87639b8f4a4c11cebf751ef20e82c14b3ca591369c4daa0ff0f3d154cc82223977b9f55b7be8dcb4511aa8df204f96642ea158f0b5268968484ca15828e582c0a1435c5aca6128ec4c2dc83f88687b3be24862922c928db492d430f48203f0439b78c5a99776a7bd991a747ad850a9ccf46ab99751898addd4238bd4ee82b2d5b12d07d4150cc8dee009c90a18071fb6b8425281f6f84cd6b1bf4efef5e543eeb4e1bb28dc1e23d5ef0155832e8bb42f044da9ed3db077ebf7c91c13d2dafd956219a71d1f5947aca9cd9d80c1a36717e71ae15c168f89235a70f824480a4b94f536d2bc9d722b385939f277e2100bdd5cc4a762b27bcdd5ffe7318eed90630e32ebd2a3668a6cf6ae641d5a366d36e5abb54d3bc3e3f17d214f28401f8ec5991570820d516cfd58d0adf287f48841f5c94b682be67c524372902e0da2b85191d3478e83d0e0989030d766d7d7caa2fe7cd490142884e6af96907d2b265f8279e4a640f010e3b125172b1ee88dd865f0eab0c0e5cf1c22f69bf1178108244942d0c9fb2384f372f1b41264a80d1eb5ebd9340223e2bb111caf400a421f7142e347012722574bb93d316586bd36f653883ec13c8b7a43911f0f55c75186bedfc0fdc9126ecf50f3be574389c82cb61f8c98fd8cc7b1e0e26c0f899851bfa823934687ebdf2dfed1b98798434ff05f2c458989ced3fadaa54ae39a01df5c57d5c62645031dc0297c616ea6e268299ba486066f909150e09d0f97e0d19bd3ecaaff39d4d7096c063df2dd3dec8b66526097b067279bd47f3ba2e08d969d3d2e13f7512b590cc99ea36f5c1aeeb9aaba8782e0377acebbb0990d26f0ff6ad8c6782a621763db613a52a525b4838baee7aabe1e75dddd3ebaf3a119e97fea6bb012ddaae00c3ccdacd1731144d138d09e8877e328b9b14a0d5cbb3e566b8c8e90de562e368fcd840aa75e4a788092aa9bad252caa9353b5e4004c12625909c02739ee01036bd40222002b3983d0a0a2308ad32bb76064f7592ec7e1e317774bdf8bd1b9a0d1a1d47abec375d993b158de5edcd59809e2d779d58278d5963834344de02645b1abf11eaf954b381d2f6b1087d913d03240cd3814732b8bb9b5422731069fad8db0eb988d46dd3460933f3b0491191a30ed99f62a9762d6613596b1e756ce8323c50effb794dcd30579ae480c70bcf88e0b889674a2568da8db4a0ec9ba6eb2dae15828a74871444a36d70eac23e0b05327bf52b773f54ef4a21a7381bf2fa1832e4a3b12c34e0b717373ada5db28120bf2b820ef43033f5173f0222f5cbe72ac8991e29e8d92a52d4257318f5a2bbf4ab8516bba3eefc7a3a6f12c1491cc6c9aa437670a1877304be7e12618249fc2e93bf124189c1c5005d8c4eb725b9c26dae4586a4b"}) 5.148110049s ago: executing program 0 (id=4424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2}}, 0x24}}, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x0, 0xf0ffff, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385aa3", 0x4) 5.106426218s ago: executing program 3 (id=4425): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000004) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}, {&(0x7f00000005c0)=""/66, 0x42}], 0x2, 0x3, 0x45b4e1f0) 5.050695095s ago: executing program 1 (id=4426): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_complete(0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000340)={0xffffffffffffffff, r4, 0xfff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x18) 5.035600075s ago: executing program 2 (id=4427): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000004) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}, {&(0x7f00000005c0)=""/66, 0x42}], 0x2, 0x3, 0x45b4e1f0) 4.1443095s ago: executing program 6 (id=4428): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x58) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000480)=0x40) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.955124809s ago: executing program 3 (id=4429): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, 0x0, 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2.919533816s ago: executing program 1 (id=4430): r0 = socket(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qgroup_meta_convert\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sm3\x00'}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf25010000000c3e06000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) listen(r0, 0x0) listen(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rpcgss_need_reencode\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 2.808708545s ago: executing program 0 (id=4431): socket$unix(0x1, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x480100, 0x113, 0x11}, 0x18) socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={0x0}, 0x1) r3 = epoll_create1(0x0) times(0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6000001f}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000009c0)={r0}, 0xc) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/185, 0xb9) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c01", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd21"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) syz_genetlink_get_family_id$nbd(0x0, r4) 2.692138882s ago: executing program 2 (id=4432): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="52decb"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x6) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0xd3) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) splice(r2, &(0x7f0000000100)=0x6, r3, &(0x7f0000000180)=0x9, 0x8, 0xd) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000352110800450000380000000000019078ac1e0001ac1414aa030490781200022825000000000f0000002f00007f00000100000000000088beffff0000877f059a24159ed1"], 0x0) socket$netlink(0x10, 0x3, 0x10) 2.671683162s ago: executing program 6 (id=4433): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000004) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}, {&(0x7f00000005c0)=""/66, 0x42}], 0x2, 0x3, 0x45b4e1f0) 1.418656397s ago: executing program 6 (id=4434): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000240), 0x9, 0x2100) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000280)={0x2, 0x1, 0x9, 0x5, 0x7ff, 0x9}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2e}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0x10, r4, 0x9) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (fail_nth: 1) poll(0x0, 0x0, 0x40000) 716.534269ms ago: executing program 3 (id=4435): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) brk(0x20ffc004) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) close_range(r0, r1, 0x0) 0s ago: executing program 1 (id=4436): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r6, 0x21eae}}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f00000002c0)=0x40) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="28000e00800000000802110000010802110000010802110000000000000000000000000064000000080026006c09000008000c006400000008000d"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1491.438014][T21747] Call Trace: [ 1491.441286][T21747] [ 1491.444208][T21747] dump_stack_lvl+0x16c/0x1f0 [ 1491.448887][T21747] should_fail_ex+0x497/0x5b0 [ 1491.453570][T21747] ? fs_reclaim_acquire+0xae/0x150 [ 1491.458674][T21747] should_failslab+0xc2/0x120 [ 1491.463368][T21747] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1491.469169][T21747] ? copy_process+0x4c1/0x8cc0 [ 1491.473941][T21747] ? _raw_spin_unlock_irq+0x23/0x50 [ 1491.479137][T21747] copy_process+0x4c1/0x8cc0 [ 1491.483730][T21747] ? __pfx_register_lock_class+0x10/0x10 [ 1491.489361][T21747] ? stack_trace_save+0x95/0xd0 [ 1491.494210][T21747] ? __pfx_stack_trace_save+0x10/0x10 [ 1491.499584][T21747] ? __lock_acquire+0xcc5/0x3c40 [ 1491.504535][T21747] ? __pfx_copy_process+0x10/0x10 [ 1491.509578][T21747] ? __pfx___lock_acquire+0x10/0x10 [ 1491.514785][T21747] ? __pfx___lock_acquire+0x10/0x10 [ 1491.519987][T21747] ? rcu_is_watching+0x12/0xc0 [ 1491.524763][T21747] ? __pfx_io_sq_thread+0x10/0x10 [ 1491.529786][T21747] create_io_thread+0xaa/0xf0 [ 1491.534480][T21747] ? __pfx_create_io_thread+0x10/0x10 [ 1491.539864][T21747] ? __pfx_io_sq_thread+0x10/0x10 [ 1491.544899][T21747] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1491.550709][T21747] ? lockdep_hardirqs_on+0x7c/0x110 [ 1491.555906][T21747] io_sq_offload_create+0xcdd/0x11b0 [ 1491.561198][T21747] ? __pfx_io_sq_offload_create+0x10/0x10 [ 1491.566918][T21747] ? io_pages_map+0x1dd/0x510 [ 1491.571598][T21747] io_uring_setup+0x17df/0x3240 [ 1491.576477][T21747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1491.582477][T21747] ? __pfx_io_uring_setup+0x10/0x10 [ 1491.587690][T21747] ? __fget_files+0x206/0x3a0 [ 1491.592373][T21747] ? ksys_write+0x1ba/0x250 [ 1491.596874][T21747] ? __pfx_ksys_write+0x10/0x10 [ 1491.601730][T21747] __x64_sys_io_uring_setup+0x98/0x140 [ 1491.607201][T21747] do_syscall_64+0xcd/0x250 [ 1491.611706][T21747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.617597][T21747] RIP: 0033:0x7f997bf7e819 [ 1491.622007][T21747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1491.641616][T21747] RSP: 002b:00007f997cd1d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1491.650028][T21747] RAX: ffffffffffffffda RBX: 00007f997c135fa0 RCX: 00007f997bf7e819 [ 1491.657989][T21747] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000006503 [ 1491.665974][T21747] RBP: 00007f997cd1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.673940][T21747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1491.681900][T21747] R13: 0000000000000001 R14: 00007f997c135fa0 R15: 00007ffc42d50548 [ 1491.689872][T21747] [ 1491.696658][T21732] vhci_hcd vhci_hcd.0: Device attached [ 1491.719060][T14417] usb 3-1: USB disconnect, device number 78 [ 1491.719065][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1491.726504][T21745] vhci_hcd: connection closed [ 1491.755782][T15033] vhci_hcd: stop threads [ 1491.768443][T21753] FAULT_INJECTION: forcing a failure. [ 1491.768443][T21753] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.782573][ T29] audit: type=1400 audit(1732572781.402:1057): avc: denied { map } for pid=21748 comm="syz.4.3799" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1491.806917][T15033] vhci_hcd: release socket [ 1491.817785][T21754] random: crng reseeded on system resumption [ 1491.827072][T15033] vhci_hcd: disconnect device [ 1491.838070][T21753] CPU: 1 UID: 0 PID: 21753 Comm: syz.4.3799 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1491.848516][T21753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1491.858591][T21753] Call Trace: [ 1491.861859][T21753] [ 1491.862027][T21753] dump_stack_lvl+0x16c/0x1f0 [ 1491.862058][T21753] should_fail_ex+0x497/0x5b0 [ 1491.862085][T21753] ? fs_reclaim_acquire+0xae/0x150 [ 1491.862108][T21753] should_failslab+0xc2/0x120 [ 1491.874612][T21753] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1491.874641][T21753] ? vm_area_alloc+0x1f/0x230 [ 1491.884721][T21753] vm_area_alloc+0x1f/0x230 [ 1491.884750][T21753] __mmap_region+0x101b/0x2670 [ 1491.884779][T21753] ? find_held_lock+0x2d/0x110 [ 1491.884805][T21753] ? __pfx___mmap_region+0x10/0x10 [ 1491.884830][T21753] ? hlock_class+0x4e/0x130 [ 1491.884856][T21753] ? mark_lock+0xb5/0xc60 [ 1491.884935][T21753] ? cap_mmap_addr+0x53/0x320 [ 1491.884959][T21753] mmap_region+0x127/0x320 [ 1491.884985][T21753] do_mmap+0xc00/0xfc0 [ 1491.885018][T21753] vm_mmap_pgoff+0x1ba/0x360 [ 1491.940604][T21753] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1491.945741][T21753] ? __fget_files+0x206/0x3a0 [ 1491.950434][T21753] ksys_mmap_pgoff+0x32c/0x5c0 [ 1491.955205][T21753] ? __pfx_ksys_write+0x10/0x10 [ 1491.960071][T21753] __x64_sys_mmap+0x125/0x190 [ 1491.964763][T21753] do_syscall_64+0xcd/0x250 [ 1491.969282][T21753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.975191][T21753] RIP: 0033:0x7fa9f457e819 [ 1491.979610][T21753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1491.999234][T21753] RSP: 002b:00007fa9f5331038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1492.007664][T21753] RAX: ffffffffffffffda RBX: 00007fa9f4735fa0 RCX: 00007fa9f457e819 [ 1492.015647][T21753] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 1492.023629][T21753] RBP: 00007fa9f5331090 R08: 0000000000000004 R09: 0000000100000000 [ 1492.031613][T21753] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 1492.039593][T21753] R13: 0000000000000000 R14: 00007fa9f4735fa0 R15: 00007ffe62b63878 [ 1492.047586][T21753] [ 1492.889722][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3805'. [ 1493.176901][T21776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1494.111669][ T898] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1494.155729][T21792] syz.0.3810: attempt to access beyond end of device [ 1494.155729][T21792] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1494.156130][T21792] hfs: can't find a HFS filesystem on dev md0 [ 1494.300192][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.302517][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.302641][ T898] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1494.305177][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.697165][ T898] usb 3-1: config 0 descriptor?? [ 1495.983265][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3816'. [ 1496.787038][ T898] usbhid 3-1:0.0: can't add hid device: -71 [ 1496.793285][ T898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1496.967032][ T898] usb 3-1: USB disconnect, device number 79 [ 1497.069891][T21812] Cannot find add_set index 0 as target [ 1497.109648][T21812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1497.929744][T21823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3819'. [ 1498.791529][T21828] xt_l2tp: v2 doesn't support IP mode [ 1500.181720][T21842] syz.4.3825: attempt to access beyond end of device [ 1500.181720][T21842] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1500.195515][T21842] hfs: can't find a HFS filesystem on dev md0 [ 1501.161612][ T29] audit: type=1400 audit(1732572790.772:1058): avc: denied { write } for pid=21846 comm="syz.4.3828" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1501.379512][T21855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1503.071958][T14417] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1503.361528][T14417] usb 3-1: Using ep0 maxpacket: 8 [ 1503.375379][T14417] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.386598][T14417] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1503.418195][T14417] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1504.053372][T14417] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1504.088649][T14417] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1504.128258][T14417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.149770][T14417] usb 3-1: can't set config #1, error -71 [ 1504.184196][T14417] usb 3-1: USB disconnect, device number 80 [ 1505.931732][T14417] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1506.091888][T14417] usb 3-1: Using ep0 maxpacket: 8 [ 1506.113751][T21897] syz.0.3839: attempt to access beyond end of device [ 1506.113751][T21897] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1506.126898][T21897] hfs: can't find a HFS filesystem on dev md0 [ 1506.529924][T14417] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1506.541067][T14417] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1506.553623][T14417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1506.564910][T14417] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1506.817999][T14417] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1506.864660][T14417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.873258][T14417] usb 3-1: Product: syz [ 1506.877447][T14417] usb 3-1: Manufacturer: syz [ 1506.883881][T14417] usb 3-1: SerialNumber: syz [ 1506.916648][T14417] usb 3-1: config 0 descriptor?? [ 1506.973122][T14417] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input61 [ 1508.606377][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1508.618560][ T898] usb 3-1: USB disconnect, device number 81 [ 1509.008762][T21917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1512.633042][T21952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1512.701201][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'. [ 1512.928501][T21956] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1513.037400][T21962] usb usb9: usbfs: process 21962 (syz.6.3856) did not claim interface 0 before use [ 1513.577170][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3854'. [ 1516.780149][T21993] tmpfs: Bad value for 'mpol' [ 1516.792571][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 1516.799242][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 1516.876345][T21994] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1518.773959][T22009] vivid-004: disconnect [ 1519.285704][T15780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1519.298496][T15780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1519.310104][T15780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1519.318019][T15780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1519.327847][T15780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1519.335468][T15780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1519.675624][T22008] vivid-004: reconnect [ 1519.781621][T22013] lo speed is unknown, defaulting to 1000 [ 1520.118727][T15010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.322368][T11506] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1520.370974][T22029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3875'. [ 1520.410534][T15010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.500550][T15010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.523043][T11506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.572805][T11506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.589732][T11506] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1520.610632][T11506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.643294][T11506] usb 4-1: config 0 descriptor?? [ 1520.785886][T15010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.841018][T22013] chnl_net:caif_netlink_parms(): no params data found [ 1520.851658][ T898] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1521.022443][ T898] usb 3-1: Using ep0 maxpacket: 8 [ 1521.057702][ T898] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1521.516665][T15780] Bluetooth: hci4: command tx timeout [ 1521.595730][ T898] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1521.606640][ T898] usb 3-1: config 1 has no interface number 1 [ 1521.735899][ T29] audit: type=1400 audit(1732572811.372:1059): avc: denied { mounton } for pid=22046 comm="syz.6.3880" path="/proc/614/cgroup" dev="proc" ino=75378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1521.784403][ T898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1521.793666][ T898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.802092][ T898] usb 3-1: Product: syz [ 1521.806282][ T898] usb 3-1: Manufacturer: syz [ 1521.810893][ T898] usb 3-1: SerialNumber: syz [ 1521.938508][T22013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.946269][T22013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.955132][T22013] bridge_slave_0: entered allmulticast mode [ 1521.973150][T22013] bridge_slave_0: entered promiscuous mode [ 1522.036910][T22029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.052209][T22029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.065551][T22013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.080730][T22029] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1522.090406][T22013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.102536][T22013] bridge_slave_1: entered allmulticast mode [ 1522.122086][ T898] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1522.133814][ T898] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1522.135111][T22013] bridge_slave_1: entered promiscuous mode [ 1522.147820][ T898] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1522.161557][ T5883] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1522.178159][ T898] usb 3-1: 2:1 : invalid channels 0 [ 1522.206587][ T898] usb 3-1: USB disconnect, device number 82 [ 1522.230123][T15010] bridge_slave_1: left allmulticast mode [ 1522.236873][T15010] bridge_slave_1: left promiscuous mode [ 1522.243050][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.265394][T15010] bridge_slave_0: left allmulticast mode [ 1522.271139][T15010] bridge_slave_0: left promiscuous mode [ 1522.279005][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.331910][ T5883] usb 7-1: device descriptor read/64, error -71 [ 1522.394811][T16183] udevd[16183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.732116][ T5883] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1522.971524][ T5883] usb 7-1: device descriptor read/64, error -71 [ 1523.093693][ T5883] usb usb7-port1: attempt power cycle [ 1523.461992][ T5883] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1523.540327][T15780] Bluetooth: hci4: command tx timeout [ 1523.559720][ T5883] usb 7-1: device descriptor read/8, error -71 [ 1523.812363][ T5883] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1523.862620][ T5883] usb 7-1: device descriptor read/8, error -71 [ 1523.972569][ T5883] usb usb7-port1: unable to enumerate USB device [ 1524.021943][ T5911] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1524.174377][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1524.186856][ T5911] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1524.211697][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.274897][ T5911] usb 3-1: config 0 descriptor?? [ 1524.634028][T22081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.658218][T22081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.941786][T11506] usbhid 4-1:0.0: can't add hid device: -71 [ 1524.952004][T11506] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1525.000507][T11506] usb 4-1: USB disconnect, device number 98 [ 1525.060664][T22088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1525.073624][ T25] hid-generic 0005:15C2:FFF9.0021: item fetching failed at offset 0/1 [ 1525.084364][ T25] hid-generic 0005:15C2:FFF9.0021: probe with driver hid-generic failed with error -22 [ 1525.714486][ T5911] ath6kl: Failed to submit usb control message: -110 [ 1525.721234][ T5911] ath6kl: unable to send the bmi data to the device: -110 [ 1525.728465][ T5911] ath6kl: Unable to send get target info: -110 [ 1525.736949][T15780] Bluetooth: hci4: command tx timeout [ 1525.752645][T15010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.907150][ T5911] ath6kl: Failed to init ath6kl core: -110 [ 1525.924692][ T5911] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1526.492853][T15010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.517688][T15010] bond0 (unregistering): Released all slaves [ 1527.446478][ T5911] usb 3-1: USB disconnect, device number 83 [ 1527.454198][T22013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.467346][T22013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.690477][T22106] syz.2.3891: attempt to access beyond end of device [ 1527.690477][T22106] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1527.703755][T22106] hfs: can't find a HFS filesystem on dev md0 [ 1528.096778][T15780] Bluetooth: hci4: command tx timeout [ 1528.318787][T22013] team0: Port device team_slave_0 added [ 1528.339157][T22013] team0: Port device team_slave_1 added [ 1528.398995][T22013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.487591][T22013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.515097][T22013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.532546][T14417] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 1528.532709][T22013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.547128][T22013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.575588][T22013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.705073][T14417] usb 7-1: string descriptor 0 read error: -22 [ 1528.711904][T14417] usb 7-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1528.720977][T14417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.750041][T22013] hsr_slave_0: entered promiscuous mode [ 1528.765656][T22013] hsr_slave_1: entered promiscuous mode [ 1528.767746][T14417] usb 7-1: config 0 descriptor?? [ 1528.785845][T22013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1528.800106][T14417] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1528.804033][T22013] Cannot create hsr debugfs directory [ 1528.817274][T14417] usb 7-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1528.857278][T11506] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1529.026445][T11506] usb 3-1: string descriptor 0 read error: -22 [ 1529.034046][T11506] usb 3-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1529.061500][T11506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.078219][T14417] usb 7-1: r8712u: Boot from EFUSE: Autoload Failed [ 1529.089745][T11506] usb 3-1: config 0 descriptor?? [ 1529.112378][T14417] usb 7-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1529.120684][T15010] hsr_slave_0: left promiscuous mode [ 1529.132282][T11506] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1529.138919][T11506] usb 3-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1529.149647][T15010] hsr_slave_1: left promiscuous mode [ 1529.151520][T14417] usb 7-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1529.171181][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.191701][T14417] usb 7-1: USB disconnect, device number 41 [ 1529.197088][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.233670][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.258987][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.354330][T15010] veth1_macvtap: left promiscuous mode [ 1529.367319][T15010] veth0_macvtap: left promiscuous mode [ 1529.392178][T15010] veth1_vlan: left promiscuous mode [ 1529.405329][T15010] veth0_vlan: left promiscuous mode [ 1529.682636][T11506] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 1529.704448][T11506] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1529.721997][T11506] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1529.777457][T22132] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1529.791470][T22132] overlayfs: failed to set xattr on upper [ 1529.797232][T22132] overlayfs: ...falling back to redirect_dir=nofollow. [ 1529.861730][T22132] overlayfs: ...falling back to metacopy=off. [ 1529.868039][T22132] overlayfs: ...falling back to index=off. [ 1529.878130][T22132] overlayfs: ...falling back to uuid=null. [ 1530.236226][T22143] tmpfs: Bad value for 'mpol' [ 1530.332166][T22144] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1530.987271][T22151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3899'. [ 1531.910844][T22154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1532.040951][T15010] team0 (unregistering): Port device team_slave_1 removed [ 1532.109397][T15010] team0 (unregistering): Port device team_slave_0 removed [ 1532.819853][ T5842] usb 3-1: USB disconnect, device number 84 [ 1534.247128][T15991] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1534.307093][ T29] audit: type=1400 audit(1732572823.882:1060): avc: denied { bind } for pid=22166 comm="syz.3.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1534.946452][T22013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.140450][T22188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1535.767388][T22013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.242673][T22209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1537.239244][T22212] tmpfs: Bad value for 'mpol' [ 1537.250989][T22212] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1537.762633][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 1537.804432][T22013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.902956][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'. [ 1538.989775][T22202] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1538.999015][T22013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.588127][T22013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1540.698460][T22013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1540.846591][T22013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1540.870242][T22013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1540.952468][T22258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1541.873233][T22013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.906442][T22013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.969591][T22013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1541.992776][T22013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1542.074517][T18485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.081670][T18485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.238850][T22273] ebt_limit: overflow, try lower: 0/0 [ 1542.852444][T18485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.859577][T18485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.102423][T22277] syz.2.3924: attempt to access beyond end of device [ 1543.102423][T22277] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1543.886413][ T29] audit: type=1400 audit(1732572833.212:1061): avc: denied { create } for pid=22270 comm="syz.6.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1543.992139][T22277] hfs: can't find a HFS filesystem on dev md0 [ 1544.032824][ T29] audit: type=1400 audit(1732572833.232:1062): avc: denied { listen } for pid=22270 comm="syz.6.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1544.053303][ T29] audit: type=1400 audit(1732572833.232:1063): avc: denied { ioctl } for pid=22270 comm="syz.6.3926" path="socket:[76704]" dev="sockfs" ino=76704 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1544.323197][T22013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.401503][ T5883] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 1544.606320][T22013] veth0_vlan: entered promiscuous mode [ 1544.702072][T22013] veth1_vlan: entered promiscuous mode [ 1544.749653][ T5883] usb 4-1: string descriptor 0 read error: -22 [ 1544.763709][ T5883] usb 4-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1544.773048][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.903958][ T5883] usb 4-1: config 0 descriptor?? [ 1544.951136][ T5883] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1544.970048][T22013] veth0_macvtap: entered promiscuous mode [ 1544.976093][ T5883] usb 4-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1544.987651][T22013] veth1_macvtap: entered promiscuous mode [ 1545.005054][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.020074][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.030700][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.052902][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.071455][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.094547][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.114819][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.135371][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.178426][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.217332][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.246015][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.282787][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.315631][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.348765][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.383209][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.415585][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.459474][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.492120][ T5883] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 1545.498754][ T5883] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1545.515281][ T5883] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1545.523528][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.551473][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.580263][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.600804][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.621736][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.643431][T22013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.663125][T18309] usb 4-1: USB disconnect, device number 99 [ 1545.737094][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.771764][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.791442][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.812188][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.841592][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.873399][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.891447][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.893072][T22317] fuse: Unknown parameter 'user_id00000000000000000000' [ 1545.903057][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.948567][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.964771][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.992712][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.003175][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.021549][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.032064][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.070520][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.081880][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.150027][T22326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1546.210352][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.220967][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.654434][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.951694][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.981662][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.007942][T22013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.074038][T22013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.105071][T22013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.230540][ T29] audit: type=1400 audit(1732572836.862:1064): avc: denied { connect } for pid=22314 comm="syz.0.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1547.489050][T22013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.514784][T22013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.683998][T22013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.758236][T22013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.881864][T15033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.910143][T15033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.988546][T22358] syz.0.3944: attempt to access beyond end of device [ 1548.988546][T22358] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1549.051019][T22358] hfs: can't find a HFS filesystem on dev md0 [ 1549.173065][T15014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.204866][T15014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.505717][T22369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1549.791899][T14417] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1549.973142][T14417] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.024499][T14417] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1550.101895][T14417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1550.167572][T14417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 1550.204359][T14417] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1550.264138][T14417] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1550.291136][T14417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.340819][T14417] usb 2-1: Product: syz [ 1550.401666][T14417] usb 2-1: Manufacturer: syz [ 1550.422365][T14417] usb 2-1: SerialNumber: syz [ 1551.495271][T14417] usb 2-1: config 0 descriptor?? [ 1551.500910][T22369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1551.622226][T14417] rc_core: IR keymap rc-xbox-dvd not found [ 1551.628196][T14417] Registered IR keymap rc-empty [ 1551.634585][T14417] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1551.662660][T14417] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input62 [ 1551.742628][T22396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3948'. [ 1551.768258][T22369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1551.774910][T22369] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1552.125261][T22369] vhci_hcd vhci_hcd.0: Device attached [ 1552.141561][T12007] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 1552.218998][T22397] vhci_hcd: connection closed [ 1552.219806][T15033] vhci_hcd: stop threads [ 1552.234858][T15033] vhci_hcd: release socket [ 1552.293189][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1552.293448][T15033] vhci_hcd: disconnect device [ 1552.300886][T14417] usb 2-1: USB disconnect, device number 64 [ 1552.313055][ T898] vhci_hcd: vhci_device speed not set [ 1552.359488][T12007] usb 7-1: string descriptor 0 read error: -22 [ 1552.366236][T12007] usb 7-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1552.384204][T12007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.425815][T12007] usb 7-1: config 0 descriptor?? [ 1552.475303][T12007] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1552.521089][T12007] usb 7-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1552.674737][T22386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3947'. [ 1552.739712][T12007] usb 7-1: r8712u: Boot from EFUSE: Autoload Failed [ 1552.746974][T12007] usb 7-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1552.755464][T12007] usb 7-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1553.744761][T12007] usb 7-1: USB disconnect, device number 42 [ 1554.882396][T22438] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1554.896817][T22437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1555.123418][T22437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1557.263669][T22478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1557.312754][ T29] audit: type=1400 audit(1732572846.952:1065): avc: denied { write } for pid=22476 comm="syz.2.3963" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1557.376871][T22484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=22484 comm=syz.6.3965 [ 1557.578648][T18309] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1557.862905][T18309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.875158][T18309] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1557.906288][T18309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1558.297690][T18309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 1558.308585][T18309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.688035][T18309] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1558.708504][T18309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.819551][T18309] usb 4-1: Product: syz [ 1558.839783][T18309] usb 4-1: Manufacturer: syz [ 1558.868876][T18309] usb 4-1: SerialNumber: syz [ 1559.281688][T22484] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1559.299069][T18309] usb 4-1: config 0 descriptor?? [ 1559.321693][T22478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.431848][T18309] rc_core: IR keymap rc-xbox-dvd not found [ 1559.437736][T18309] Registered IR keymap rc-empty [ 1559.459745][T18309] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1559.492658][T18309] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input63 [ 1559.542170][T22478] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1559.549047][T22478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1559.603920][T22478] vhci_hcd vhci_hcd.0: Device attached [ 1559.665801][T12007] usb 4-1: USB disconnect, device number 100 [ 1559.665855][ C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1559.684760][T22514] vhci_hcd: connection closed [ 1559.685499][T15035] vhci_hcd: stop threads [ 1559.705220][T15035] vhci_hcd: release socket [ 1559.732151][T15035] vhci_hcd: disconnect device [ 1559.781578][T16504] vhci_hcd: vhci_device speed not set [ 1559.882560][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3972'. [ 1560.045051][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3972'. [ 1560.098284][T22523] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1560.615994][T22536] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1563.373270][T22566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3979'. [ 1565.371606][ T5883] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1566.082338][ T5883] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1566.093681][ T5883] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1566.103805][ T5883] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1566.113660][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.132145][T22581] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1566.143160][ T5883] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1566.554629][ T5883] usb 3-1: USB disconnect, device number 85 [ 1566.571321][T22581] overlayfs: missing 'workdir' [ 1570.518888][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1570.528217][T22561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1570.541078][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1570.571905][T22561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1570.580942][T22561] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1572.290875][T22628] syz.6.3988: attempt to access beyond end of device [ 1572.290875][T22628] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1572.304275][T22628] hfs: can't find a HFS filesystem on dev md0 [ 1572.679872][T22626] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1574.523162][T22661] fuse: Bad value for 'fd' [ 1577.059166][T22684] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1577.687992][T22691] input: syz0 as /devices/virtual/input/input64 [ 1581.488297][T22745] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1582.171530][T14417] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 1582.264429][T22746] virtio-fs: tag <(null)> not found [ 1582.282733][T22752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4012'. [ 1582.337178][T22752] veth1_vlan: Device is already in use. [ 1582.349651][T14417] usb 4-1: string descriptor 0 read error: -22 [ 1582.357336][T14417] usb 4-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1582.394377][T14417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.447589][T14417] usb 4-1: config 0 descriptor?? [ 1582.607537][T14417] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1582.673582][T14417] usb 4-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1582.855341][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1582.899360][ T29] audit: type=1400 audit(1732572872.532:1066): avc: denied { unmount } for pid=18020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1583.892462][ T29] audit: type=1400 audit(1732572872.892:1067): avc: denied { prog_load } for pid=22766 comm="syz.2.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1583.926507][ T29] audit: type=1400 audit(1732572873.322:1068): avc: denied { map_create } for pid=22765 comm="syz.1.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1583.976824][T14417] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 1583.984052][T14417] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1583.992131][T14417] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1584.189087][T22783] fuse: Unknown parameter '0x0000000000000004' [ 1584.264515][ T5842] usb 4-1: USB disconnect, device number 101 [ 1585.225731][T22798] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1586.269099][T22815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1587.035799][ T29] audit: type=1400 audit(1732572876.672:1069): avc: denied { map } for pid=22814 comm="syz.6.4024" path="socket:[79169]" dev="sockfs" ino=79169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1587.058948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.057164][T22833] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1588.774053][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 1588.872724][T22845] Cannot find del_set index 85 as target [ 1589.432030][T22847] lo speed is unknown, defaulting to 1000 [ 1589.951522][ T5842] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1590.116055][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'. [ 1590.415069][T22864] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1590.711614][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 1590.720228][ T5842] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1590.737613][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.878359][ T5842] usb 2-1: config 0 descriptor?? [ 1591.121509][T18309] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1591.341927][T18309] usb 4-1: Using ep0 maxpacket: 32 [ 1591.348447][T18309] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 1591.391531][T18309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.404082][T18309] usb 4-1: config 0 descriptor?? [ 1591.413784][T18309] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1591.420368][T18309] gspca_mr97310a: reg write [21] error -22 [ 1591.427215][T18309] mr97310a 4-1:0.0: probe with driver mr97310a failed with error -22 [ 1591.461515][T14417] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1591.641736][T14417] usb 7-1: Using ep0 maxpacket: 8 [ 1591.991202][T14417] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1592.083815][T14417] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1592.093934][T14417] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1592.103330][ T5883] usb 4-1: USB disconnect, device number 102 [ 1592.104202][T14417] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1592.119651][T14417] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1592.133089][T14417] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1592.142248][T14417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.373969][T14417] usb 7-1: usb_control_msg returned -32 [ 1592.382708][T22895] fuse: Unknown parameter '0x0000000000000004' [ 1592.391610][T14417] usbtmc 7-1:16.0: can't read capabilities [ 1592.536680][T22878] mmap: syz.2.4037 (22878): VmData 26103808 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1592.584611][ T29] audit: type=1400 audit(1732572882.222:1070): avc: denied { prog_run } for pid=22899 comm="syz.0.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1592.824914][ T5842] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1592.835382][ T5842] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1592.843476][T22912] Bluetooth: MGMT ver 1.23 [ 1592.861327][ T5842] usb 2-1: USB disconnect, device number 65 [ 1592.988063][T14417] usb 7-1: USB disconnect, device number 43 [ 1593.705280][T22927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1594.001805][ T5883] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 1594.045049][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4047'. [ 1594.145510][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4047'. [ 1594.164655][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 1594.170986][ T5883] usb 2-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1594.196245][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.218075][ T5883] usb 2-1: config 0 descriptor?? [ 1594.227582][ T5883] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1594.239342][ T5883] usb 2-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1594.447990][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 1595.309928][ T5883] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 1595.316664][ T5883] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1595.325352][ T5883] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1595.575073][T22947] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 1595.586039][ T29] audit: type=1400 audit(1732572885.202:1071): avc: denied { setopt } for pid=22944 comm="syz.6.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1595.802592][ T5883] usb 2-1: USB disconnect, device number 66 [ 1596.135937][T22949] FAULT_INJECTION: forcing a failure. [ 1596.135937][T22949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.149171][T22949] CPU: 0 UID: 0 PID: 22949 Comm: syz.3.4050 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1596.159601][T22949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1596.169673][T22949] Call Trace: [ 1596.172953][T22949] [ 1596.175889][T22949] dump_stack_lvl+0x16c/0x1f0 [ 1596.180583][T22949] should_fail_ex+0x497/0x5b0 [ 1596.185285][T22949] _copy_to_iter+0x469/0x1560 [ 1596.189975][T22949] ? __pfx__copy_to_iter+0x10/0x10 [ 1596.195089][T22949] ? __virt_addr_valid+0x1a4/0x590 [ 1596.200217][T22949] ? __virt_addr_valid+0x5e/0x590 [ 1596.205256][T22949] ? __phys_addr_symbol+0x30/0x80 [ 1596.210294][T22949] ? __check_object_size+0x488/0x710 [ 1596.215594][T22949] seq_read_iter+0xd00/0x12b0 [ 1596.220301][T22949] seq_read+0x39f/0x4e0 [ 1596.224643][T22949] ? __pfx_seq_read+0x10/0x10 [ 1596.229336][T22949] ? import_ubuf+0x1b6/0x220 [ 1596.233943][T22949] ? avc_policy_seqno+0x9/0x20 [ 1596.238724][T22949] ? __pfx_seq_read+0x10/0x10 [ 1596.243414][T22949] proc_reg_read+0x23d/0x330 [ 1596.248013][T22949] ? __pfx_proc_reg_read+0x10/0x10 [ 1596.253133][T22949] vfs_readv+0x6bf/0x890 [ 1596.257387][T22949] ? __pfx___lock_acquire+0x10/0x10 [ 1596.262607][T22949] ? __pfx_vfs_readv+0x10/0x10 [ 1596.267389][T22949] ? __fget_files+0x1fc/0x3a0 [ 1596.272075][T22949] ? __pfx_lock_release+0x10/0x10 [ 1596.277120][T22949] ? __fget_files+0x206/0x3a0 [ 1596.281811][T22949] ? do_preadv+0x1b1/0x270 [ 1596.286242][T22949] do_preadv+0x1b1/0x270 [ 1596.290509][T22949] ? __pfx_do_preadv+0x10/0x10 [ 1596.295282][T22949] ? __might_fault+0xe3/0x190 [ 1596.299980][T22949] ? rcu_is_watching+0x12/0xc0 [ 1596.304758][T22949] do_syscall_64+0xcd/0x250 [ 1596.309275][T22949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.315179][T22949] RIP: 0033:0x7f997bf7e819 [ 1596.319604][T22949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.339224][T22949] RSP: 002b:00007f997cd1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1596.347648][T22949] RAX: ffffffffffffffda RBX: 00007f997c135fa0 RCX: 00007f997bf7e819 [ 1596.355631][T22949] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1596.363611][T22949] RBP: 00007f997cd1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.371598][T22949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.379616][T22949] R13: 0000000000000000 R14: 00007f997c135fa0 R15: 00007ffc42d50548 [ 1596.387611][T22949] [ 1596.521531][ T898] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1596.560452][T22961] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4053'. [ 1596.719802][ T898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1596.830406][ T898] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1596.976745][ T898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.069224][ T898] usb 7-1: config 0 descriptor?? [ 1598.876117][ T898] viewsonic 0003:2133:0018.0022: hidraw0: USB HID v0.05 Device [HID 2133:0018] on usb-dummy_hcd.6-1/input0 [ 1598.888455][ T5883] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1599.021488][ T5883] usb 4-1: device descriptor read/64, error -71 [ 1599.280353][ T5883] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1599.298787][ T898] usb 7-1: USB disconnect, device number 44 [ 1599.421481][ T5883] usb 4-1: device descriptor read/64, error -71 [ 1599.549226][ T5883] usb usb4-port1: attempt power cycle [ 1600.352490][ T29] audit: type=1400 audit(1732572889.332:1072): avc: denied { egress } for pid=23007 comm="syz.2.4061" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1600.620022][ T5883] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1600.796236][ T5883] usb 4-1: device descriptor read/8, error -71 [ 1600.913167][ T29] audit: type=1400 audit(1732572890.542:1073): avc: denied { write } for pid=23031 comm="syz.0.4065" name="fd" dev="proc" ino=79459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1601.755448][ T29] audit: type=1400 audit(1732572890.892:1074): avc: denied { node_bind } for pid=23035 comm="syz.6.4066" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1601.785887][T16504] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1602.057228][ T29] audit: type=1400 audit(1732572891.412:1075): avc: denied { add_name } for pid=23031 comm="syz.0.4065" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1602.085003][ T29] audit: type=1400 audit(1732572891.412:1076): avc: denied { create } for pid=23031 comm="syz.0.4065" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1602.130034][ T29] audit: type=1400 audit(1732572891.722:1077): avc: denied { associate } for pid=23031 comm="syz.0.4065" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1602.149301][ T5883] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1602.231576][T16504] usb 3-1: Using ep0 maxpacket: 32 [ 1602.240091][T16504] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1602.250684][T16504] usb 3-1: config 0 has an invalid interface number: 82 but max is 2 [ 1602.259367][T16504] usb 3-1: config 0 has an invalid interface number: 159 but max is 2 [ 1602.268052][T16504] usb 3-1: config 0 has an invalid interface number: 156 but max is 2 [ 1602.276507][T16504] usb 3-1: config 0 has no interface number 0 [ 1602.282675][T16504] usb 3-1: config 0 has no interface number 1 [ 1602.337221][T16504] usb 3-1: config 0 has no interface number 2 [ 1602.343524][T16504] usb 3-1: config 0 interface 82 has no altsetting 0 [ 1602.350434][T16504] usb 3-1: config 0 interface 159 has no altsetting 0 [ 1602.357226][T16504] usb 3-1: config 0 interface 156 has no altsetting 0 [ 1602.364537][ T5883] usb 4-1: device not accepting address 106, error -71 [ 1602.372108][ T5883] usb usb4-port1: unable to enumerate USB device [ 1602.441742][T16504] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 1602.450816][T16504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.458848][T16504] usb 3-1: Product: syz [ 1602.463089][T16504] usb 3-1: Manufacturer: syz [ 1602.467698][T16504] usb 3-1: SerialNumber: syz [ 1602.474265][T16504] usb 3-1: config 0 descriptor?? [ 1602.495569][ T29] audit: type=1400 audit(1732572892.102:1078): avc: denied { map_read map_write } for pid=23055 comm="syz.6.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1603.536745][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1604.314192][T23089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1604.393957][T22145] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1604.574474][T22145] usb 2-1: config 4 has an invalid descriptor of length 203, skipping remainder of the config [ 1604.605728][T22145] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1604.689932][T22145] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1605.146161][T22145] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1605.200983][T16504] usb 3-1: USB disconnect, device number 86 [ 1605.421844][T22145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.919394][T22872] udevd[22872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1607.342885][T22145] usb 2-1: string descriptor 0 read error: -71 [ 1607.386835][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.924511][T22145] ath6kl: Failed to submit usb control message: -71 [ 1607.934623][T22145] ath6kl: unable to send the bmi data to the device: -71 [ 1607.943914][T22145] ath6kl: Unable to send get target info: -71 [ 1607.951452][T22145] ath6kl: Failed to init ath6kl core: -71 [ 1607.957468][T22145] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1608.601574][T22145] usb 2-1: USB disconnect, device number 67 [ 1608.756000][T23127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1608.764715][T23096] udevd[23096]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1608.798022][T22631] udevd[22631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1609.645602][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1609.786097][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1610.196366][T23148] FAULT_INJECTION: forcing a failure. [ 1610.196366][T23148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.210519][T23148] CPU: 1 UID: 0 PID: 23148 Comm: syz.1.4090 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1610.220961][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1610.231028][T23148] Call Trace: [ 1610.234304][T23148] [ 1610.237227][T23148] dump_stack_lvl+0x16c/0x1f0 [ 1610.241909][T23148] should_fail_ex+0x497/0x5b0 [ 1610.246589][T23148] _copy_from_user+0x2e/0xd0 [ 1610.251179][T23148] copy_mount_options+0x76/0x190 [ 1610.256122][T23148] __x64_sys_mount+0x1ad/0x320 [ 1610.260882][T23148] ? __pfx___x64_sys_mount+0x10/0x10 [ 1610.266170][T23148] do_syscall_64+0xcd/0x250 [ 1610.270674][T23148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.276579][T23148] RIP: 0033:0x7fee1ef7e819 [ 1610.281008][T23148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1610.300636][T23148] RSP: 002b:00007fee1fcd2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1610.309061][T23148] RAX: ffffffffffffffda RBX: 00007fee1f135fa0 RCX: 00007fee1ef7e819 [ 1610.317030][T23148] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 1610.324996][T23148] RBP: 00007fee1fcd2090 R08: 00000000200003c0 R09: 0000000000000000 [ 1610.332960][T23148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.340923][T23148] R13: 0000000000000000 R14: 00007fee1f135fa0 R15: 00007fffc23c6dd8 [ 1610.348904][T23148] [ 1610.366411][T16504] kernel write not supported for file /vcsa (pid: 16504 comm: kworker/1:1) [ 1610.707992][T23154] fuse: Unknown parameter 'fd0x0000000000000004' [ 1612.121706][T14417] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1612.315665][T14417] usb 2-1: config 4 has an invalid descriptor of length 203, skipping remainder of the config [ 1612.326388][T14417] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1612.337909][T14417] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1612.352720][T14417] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1612.362901][T14417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.892535][T14417] usb 2-1: string descriptor 0 read error: -71 [ 1612.917731][T14417] ath6kl: Failed to submit usb control message: -71 [ 1612.925000][T14417] ath6kl: unable to send the bmi data to the device: -71 [ 1612.932399][T14417] ath6kl: Unable to send get target info: -71 [ 1612.940808][T14417] ath6kl: Failed to init ath6kl core: -71 [ 1612.947028][T14417] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1612.984276][T14417] usb 2-1: USB disconnect, device number 68 [ 1614.212215][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1614.305793][T14417] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1614.323506][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1614.466824][T14417] usb 3-1: config 4 has an invalid interface number: 82 but max is 0 [ 1614.550851][T14417] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.942160][T14417] usb 3-1: config 4 has no interface number 0 [ 1614.989454][T14417] usb 3-1: too many endpoints for config 4 interface 82 altsetting 222: 203, using maximum allowed: 30 [ 1615.049839][T14417] usb 3-1: config 4 interface 82 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 1615.081764][T14417] usb 3-1: config 4 interface 82 has no altsetting 0 [ 1615.091947][T14417] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1615.101050][T14417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.171972][T23199] fuse: Unknown parameter 'fd0x0000000000000004' [ 1615.670602][T14417] ath6kl: Failed to submit usb control message: -71 [ 1615.677444][T14417] ath6kl: unable to send the bmi data to the device: -71 [ 1615.701531][T14417] ath6kl: Unable to send get target info: -71 [ 1615.751920][T14417] ath6kl: Failed to init ath6kl core: -71 [ 1615.757837][T14417] ath6kl_usb 3-1:4.82: probe with driver ath6kl_usb failed with error -71 [ 1615.818694][T14417] usb 3-1: USB disconnect, device number 87 [ 1615.977007][T23209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1616.361572][T16504] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1616.456566][T23218] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1616.674679][T16504] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1616.711997][T16504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.819336][T16504] usb 2-1: Product: syz [ 1616.854458][T16504] usb 2-1: Manufacturer: syz [ 1616.859088][T16504] usb 2-1: SerialNumber: syz [ 1616.951894][T16504] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1616.978097][T16504] r8152-cfgselector 2-1: config 0 descriptor?? [ 1617.021545][T14417] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1617.171683][T14417] usb 4-1: Using ep0 maxpacket: 32 [ 1617.220552][T14417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.251250][T14417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.301682][T14417] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1617.330439][T14417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.656841][ T29] audit: type=1400 audit(1732572907.232:1079): avc: denied { connect } for pid=23220 comm="syz.2.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1617.656891][ T29] audit: type=1400 audit(1732572907.242:1080): avc: denied { create } for pid=23220 comm="syz.2.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1618.366846][T14417] usb 4-1: config 0 descriptor?? [ 1618.374007][T14417] hub 4-1:0.0: USB hub found [ 1618.584594][T14417] hub 4-1:0.0: 1 port detected [ 1618.887907][T16504] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1618.907730][T16504] r8152-cfgselector 2-1: bad CDC descriptors [ 1618.995378][T23245] fuse: Unknown parameter 'fd0x0000000000000004' [ 1619.681560][T16504] r8152-cfgselector 2-1: USB disconnect, device number 69 [ 1620.522164][T23253] syz.6.4118: attempt to access beyond end of device [ 1620.522164][T23253] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1620.535367][T23253] hfs: can't find a HFS filesystem on dev md0 [ 1620.842000][T23256] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4119'. [ 1621.161570][ T5842] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 1622.250354][T11506] usb 4-1: USB disconnect, device number 107 [ 1622.514814][T23277] vivid-004: disconnect [ 1622.519855][T23277] netlink: 'syz.2.4126': attribute type 1 has an invalid length. [ 1622.528022][T23277] netlink: 'syz.2.4126': attribute type 2 has an invalid length. [ 1622.823102][T11506] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1623.152027][T11506] usb 2-1: Using ep0 maxpacket: 16 [ 1623.158869][T11506] usb 2-1: config 5 has an invalid interface number: 242 but max is 0 [ 1623.167993][T11506] usb 2-1: config 5 has no interface number 0 [ 1623.174547][T11506] usb 2-1: config 5 interface 242 altsetting 6 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1623.187481][T11506] usb 2-1: config 5 interface 242 altsetting 6 endpoint 0x84 has an invalid bInterval 166, changing to 11 [ 1623.199738][T11506] usb 2-1: config 5 interface 242 altsetting 6 endpoint 0x84 has invalid maxpacket 8373, setting to 1024 [ 1623.312892][T11506] usb 2-1: config 5 interface 242 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1623.326995][T11506] usb 2-1: config 5 interface 242 has no altsetting 0 [ 1623.371465][ T29] audit: type=1400 audit(1732572913.002:1081): avc: denied { connect } for pid=23274 comm="syz.6.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1623.393328][T11506] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=6b.64 [ 1623.405724][T11506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.414250][T11506] usb 2-1: Product: syz [ 1623.418534][T11506] usb 2-1: Manufacturer: syz [ 1623.422058][T23275] vivid-004: reconnect [ 1623.423822][T11506] usb 2-1: SerialNumber: syz [ 1623.698675][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1623.859375][T23296] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1623.909718][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1624.349747][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4132'. [ 1625.431806][ T5883] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 1625.546446][T11506] keyspan 2-1:5.242: Keyspan 1 port adapter converter detected [ 1625.572295][T11506] keyspan 2-1:5.242: found no endpoint descriptor for endpoint 81 [ 1625.602475][T11506] keyspan 2-1:5.242: found no endpoint descriptor for endpoint 82 [ 1625.827090][ T5883] usb 7-1: string descriptor 0 read error: -22 [ 1625.896325][T11506] keyspan 2-1:5.242: found no endpoint descriptor for endpoint 1 [ 1625.904479][T11506] keyspan 2-1:5.242: found no endpoint descriptor for endpoint 2 [ 1625.912956][T11506] keyspan 2-1:5.242: found no endpoint descriptor for endpoint 83 [ 1625.920877][T11506] keyspan 2-1:5.242: found no endpoint descriptor for endpoint 3 [ 1626.016245][T11506] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1626.119626][T11506] usb 2-1: USB disconnect, device number 70 [ 1626.140991][T11506] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1626.163605][ T5883] usb 7-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1626.172033][T11506] keyspan 2-1:5.242: device disconnected [ 1626.179825][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.202276][ T5883] usb 7-1: config 0 descriptor?? [ 1626.218729][ T5883] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1626.281515][ T5842] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1626.404778][ T5883] usb 7-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1626.444402][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1626.468411][ T5842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1626.766005][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4133'. [ 1626.961913][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1626.971867][ T5842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1626.981658][ T5842] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1626.991245][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.002402][ T5842] usb 3-1: config 0 descriptor?? [ 1627.028928][ T5883] usb 7-1: r8712u: Boot from EFUSE: Autoload Failed [ 1627.060943][ T5883] usb 7-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1627.080964][ T5883] usb 7-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1627.140958][ T5883] usb 7-1: USB disconnect, device number 45 [ 1627.239021][ T5842] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 1627.253780][ T5842] hdpvr 3-1:0.0: device init failed [ 1627.271889][ T5842] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1627.431832][T11506] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1627.633303][T11506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.647770][T11506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.678341][T11506] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1627.717561][T11506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.755486][T11506] usb 2-1: config 0 descriptor?? [ 1628.097376][T23338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.104713][T23338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.461490][ T5883] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1628.664057][ T5842] usb 3-1: USB disconnect, device number 88 [ 1628.676582][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.749032][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.897051][ T5883] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1628.906561][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.004516][T23347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1629.496863][ T5883] usb 7-1: config 0 descriptor?? [ 1630.225719][T23358] syz.0.4146: attempt to access beyond end of device [ 1630.225719][T23358] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1630.238826][T23358] hfs: can't find a HFS filesystem on dev md0 [ 1631.005116][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1631.113413][T23361] bridge0: port 3(erspan0) entered disabled state [ 1631.120054][T23361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.127320][T23361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.136929][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1631.263889][ T29] audit: type=1400 audit(1732572920.872:1082): avc: denied { accept } for pid=23364 comm="syz.3.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1632.815248][T11506] usbhid 2-1:0.0: can't add hid device: -32 [ 1633.427710][T11506] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1633.583881][T23382] lo speed is unknown, defaulting to 1000 [ 1633.681428][T23387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4154'. [ 1634.551217][T23391] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1634.891616][ T25] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1635.063311][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1635.075183][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1635.088056][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1635.098161][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1635.111654][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1635.120937][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.142899][ T5883] usbhid 7-1:0.0: can't add hid device: -32 [ 1635.149008][ T5883] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1635.183427][ T25] usb 4-1: config 0 descriptor?? [ 1635.380430][ T5883] usb 2-1: USB disconnect, device number 71 [ 1635.596527][ T25] plantronics 0003:047F:FFFF.0023: ignoring exceeding usage max [ 1635.614537][ T25] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 1635.629418][ T29] audit: type=1400 audit(1732572925.242:1083): avc: denied { read append } for pid=23400 comm="syz.2.4160" name="file0" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1636.327272][T23391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1636.411726][T23391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1636.489235][T23404] syz.1.4158 (23404): drop_caches: 2 [ 1636.548531][ T5883] usb 7-1: USB disconnect, device number 46 [ 1636.559890][ T25] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1636.762278][ T25] usb 4-1: USB disconnect, device number 108 [ 1637.252069][ T5883] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 1637.748058][T23425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1638.909735][ T5883] usb 7-1: string descriptor 0 read error: -22 [ 1638.916158][ T5883] usb 7-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1638.931552][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.963635][ T5883] usb 7-1: config 0 descriptor?? [ 1638.974229][ T5883] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1638.980999][ T5883] usb 7-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1639.192278][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4162'. [ 1639.762979][ T5883] usb 7-1: r8712u: Boot from EFUSE: Autoload Failed [ 1639.770248][ T5883] usb 7-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1639.904978][ T5883] usb 7-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1639.928109][ T5883] usb 7-1: USB disconnect, device number 47 [ 1639.981498][ T25] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1640.181133][T16504] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1641.303877][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.324424][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.336829][ T25] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1641.346041][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.376152][ T25] usb 3-1: config 0 descriptor?? [ 1641.403700][T23456] syz.0.4173: attempt to access beyond end of device [ 1641.403700][T23456] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1641.416795][T23456] hfs: can't find a HFS filesystem on dev md0 [ 1641.441635][T16504] usb 4-1: Using ep0 maxpacket: 32 [ 1641.452755][ T898] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1641.501439][T16504] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1641.564788][T16504] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1641.774004][ T898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1641.911999][T16504] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1641.924027][ T898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.933937][T16504] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1641.948060][ T898] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1641.957318][ T898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.966761][T16504] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1642.151910][ T898] usb 2-1: config 0 descriptor?? [ 1642.189159][T16504] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1642.199440][T16504] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1642.625704][T16504] usb 4-1: config 0 descriptor?? [ 1642.668550][T16504] usb 4-1: can't set config #0, error -71 [ 1642.683631][T16504] usb 4-1: USB disconnect, device number 109 [ 1643.022305][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 1643.034111][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1643.063064][T23472] netlink: 'syz.6.4177': attribute type 25 has an invalid length. [ 1643.084770][ T25] usb 3-1: USB disconnect, device number 89 [ 1643.096482][T23472] netlink: 'syz.6.4177': attribute type 1 has an invalid length. [ 1643.124227][T23472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.603738][T23485] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1644.150776][ T898] usbhid 2-1:0.0: can't add hid device: -71 [ 1644.158854][ T898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1644.191510][ T898] usb 2-1: USB disconnect, device number 72 [ 1645.467335][T23505] geneve2: entered promiscuous mode [ 1645.473217][T23505] geneve2: entered allmulticast mode [ 1647.081628][ T898] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1647.232752][T14417] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1647.412270][T14417] usb 2-1: Using ep0 maxpacket: 32 [ 1647.713052][ T898] usb 3-1: device descriptor read/64, error -71 [ 1647.797166][T14417] usb 2-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1647.817598][T14417] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1647.837732][T14417] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1647.847206][T14417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.863287][T14417] usb 2-1: config 0 descriptor?? [ 1648.104217][ T898] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1648.241564][ T898] usb 3-1: device descriptor read/64, error -71 [ 1648.308425][T23536] lo speed is unknown, defaulting to 1000 [ 1648.353812][ T898] usb usb3-port1: attempt power cycle [ 1648.596102][T23542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1650.361270][T23551] syz.2.4198 (23551): drop_caches: 2 [ 1650.378838][ T25] usb 2-1: USB disconnect, device number 73 [ 1651.395815][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1652.208671][T23585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 1653.492409][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1653.883655][T23608] fuse: Unknown parameter '0x0000000000000007' [ 1653.936617][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4214'. [ 1653.973582][ T25] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1654.163506][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1654.182527][ T25] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1654.243867][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.329678][ T25] usb 2-1: Product: syz [ 1654.419287][ T25] usb 2-1: Manufacturer: syz [ 1654.484998][ T25] usb 2-1: SerialNumber: syz [ 1654.657182][ T25] usb 2-1: config 0 descriptor?? [ 1654.668835][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1655.333337][T15991] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1655.401128][T23595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.417848][T23595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.509496][T23636] No control pipe specified [ 1655.790039][T15991] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1655.972423][T23654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 1656.168899][T23657] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1656.371674][ T29] audit: type=1326 audit(1732572945.952:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23644 comm="syz.6.4227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b90f7e819 code=0x0 [ 1656.582227][ T25] gspca_sq930x: ucbus_write failed -110 [ 1656.831522][ T25] gspca_sq930x: Sensor ov9630 not yet treated [ 1656.837769][ T25] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 1657.534378][T23666] syz.2.4231 (23666): drop_caches: 2 [ 1657.540414][T23666] syz.2.4231 (23666): drop_caches: 2 [ 1659.224251][T14417] usb 2-1: USB disconnect, device number 74 [ 1659.431528][ T5842] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1659.581913][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 1659.588408][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.601574][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1659.633379][ T5842] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1659.651964][T14417] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1659.670572][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.701699][ T5842] usb 3-1: Product: syz [ 1659.705904][ T5842] usb 3-1: Manufacturer: syz [ 1659.710510][ T5842] usb 3-1: SerialNumber: syz [ 1659.822279][T14417] usb 2-1: Using ep0 maxpacket: 16 [ 1659.834608][T14417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 1659.876404][T14417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 1660.068965][T14417] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1660.078537][T14417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.086652][T14417] usb 2-1: Product: syz [ 1660.090829][T14417] usb 2-1: Manufacturer: syz [ 1660.095601][T14417] usb 2-1: SerialNumber: syz [ 1660.115017][T14417] usb 2-1: config 0 descriptor?? [ 1660.120127][ T5842] usb 3-1: 0:2 : does not exist [ 1660.125746][ T5842] usb 3-1: unit 242 not found! [ 1660.618974][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4242'. [ 1660.734651][ T5842] usb 3-1: USB disconnect, device number 93 [ 1660.812190][T15991] Bluetooth: hci4: command 0x0406 tx timeout [ 1661.777246][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4246'. [ 1662.056574][T23720] tmpfs: Bad value for 'mpol' [ 1662.144434][T23722] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1663.008861][T23719] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1663.031476][T23719] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1663.094426][T23719] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1663.117218][T23719] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1663.233478][T23719] geneve2: entered promiscuous mode [ 1663.239360][T23719] geneve2: entered allmulticast mode [ 1663.258163][ T5842] usb 2-1: USB disconnect, device number 75 [ 1663.380748][T23735] autofs: Unknown parameter './file1' [ 1664.195184][T23742] FAULT_INJECTION: forcing a failure. [ 1664.195184][T23742] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.235670][T23742] CPU: 0 UID: 0 PID: 23742 Comm: syz.2.4252 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1664.246133][T23742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1664.256205][T23742] Call Trace: [ 1664.259480][T23742] [ 1664.262406][T23742] dump_stack_lvl+0x16c/0x1f0 [ 1664.267089][T23742] should_fail_ex+0x497/0x5b0 [ 1664.271776][T23742] should_failslab+0xc2/0x120 [ 1664.276463][T23742] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1664.281838][T23742] ? skb_clone+0x190/0x3f0 [ 1664.286258][T23742] skb_clone+0x190/0x3f0 [ 1664.290505][T23742] netlink_deliver_tap+0xabd/0xd30 [ 1664.295630][T23742] netlink_unicast+0x6b4/0x7f0 [ 1664.300404][T23742] ? __pfx_netlink_unicast+0x10/0x10 [ 1664.305693][T23742] netlink_ack+0x6a8/0xb90 [ 1664.310115][T23742] netlink_rcv_skb+0x348/0x440 [ 1664.314882][T23742] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1664.320344][T23742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1664.325641][T23742] ? bpf_lsm_capable+0x9/0x10 [ 1664.330320][T23742] ? security_capable+0x7e/0x260 [ 1664.335253][T23742] ? ns_capable+0xd7/0x110 [ 1664.339675][T23742] nfnetlink_rcv+0x1b4/0x430 [ 1664.344276][T23742] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1664.349393][T23742] ? netlink_deliver_tap+0x1ae/0xd30 [ 1664.354683][T23742] netlink_unicast+0x53c/0x7f0 [ 1664.359450][T23742] ? __pfx_netlink_unicast+0x10/0x10 [ 1664.364763][T23742] netlink_sendmsg+0x8b8/0xd70 [ 1664.369530][T23742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1664.374823][T23742] ____sys_sendmsg+0xaaf/0xc90 [ 1664.379588][T23742] ? copy_msghdr_from_user+0x10b/0x160 [ 1664.385051][T23742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1664.390346][T23742] ___sys_sendmsg+0x135/0x1e0 [ 1664.395030][T23742] ? __pfx____sys_sendmsg+0x10/0x10 [ 1664.400240][T23742] ? __pfx_lock_release+0x10/0x10 [ 1664.405265][T23742] ? trace_lock_acquire+0x146/0x1e0 [ 1664.410475][T23742] ? __fget_files+0x206/0x3a0 [ 1664.415160][T23742] __sys_sendmsg+0x16e/0x220 [ 1664.419750][T23742] ? __pfx___sys_sendmsg+0x10/0x10 [ 1664.424875][T23742] do_syscall_64+0xcd/0x250 [ 1664.429388][T23742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.435283][T23742] RIP: 0033:0x7fe26277e819 [ 1664.439692][T23742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1664.459312][T23742] RSP: 002b:00007fe263554038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1664.467726][T23742] RAX: ffffffffffffffda RBX: 00007fe262935fa0 RCX: 00007fe26277e819 [ 1664.475713][T23742] RDX: 0000000020000080 RSI: 0000000020000280 RDI: 0000000000000003 [ 1664.483712][T23742] RBP: 00007fe263554090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.491681][T23742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.499649][T23742] R13: 0000000000000000 R14: 00007fe262935fa0 R15: 00007ffca2a97c98 [ 1664.507632][T23742] [ 1665.084844][T23754] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1667.618917][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4258'. [ 1667.871519][ T29] audit: type=1400 audit(1732572957.492:1085): avc: denied { read } for pid=23770 comm="syz.3.4260" laddr=127.0.0.1 lport=40408 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1668.199658][T23799] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1668.336164][T23788] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1668.345592][ T29] audit: type=1400 audit(1732572957.972:1086): avc: denied { accept } for pid=23786 comm="syz.2.4262" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1668.370016][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1668.817170][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.971692][T23837] syz.0.4268 (23837): drop_caches: 2 [ 1669.997011][T23837] syz.0.4268 (23837): drop_caches: 2 [ 1670.465802][T23835] misc userio: No port type given on /dev/userio [ 1670.473857][T23835] misc userio: No port type given on /dev/userio [ 1670.524530][T23831] sp0: Synchronizing with TNC [ 1670.886363][ T29] audit: type=1400 audit(1732572960.502:1087): avc: denied { create } for pid=23843 comm="syz.2.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1672.457996][T23857] syz.3.4272: attempt to access beyond end of device [ 1672.457996][T23857] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1672.471174][T23857] hfs: can't find a HFS filesystem on dev md0 [ 1672.946139][T23863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4273'. [ 1674.257887][T23873] tmpfs: Bad value for 'mpol' [ 1674.282689][T23873] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1675.590376][T23882] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1675.765620][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1675.799011][T23888] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4280'. [ 1675.952125][ T29] audit: type=1400 audit(1732572965.572:1088): avc: denied { read } for pid=23884 comm="syz.6.4280" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1676.301648][ T29] audit: type=1400 audit(1732572965.592:1089): avc: denied { open } for pid=23884 comm="syz.6.4280" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1676.509347][T23900] syz.3.4282: attempt to access beyond end of device [ 1676.509347][T23900] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1676.522456][T23900] hfs: can't find a HFS filesystem on dev md0 [ 1677.273399][T23902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4283'. [ 1677.860510][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1678.548895][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1678.801561][T16504] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1678.931556][T16504] usb 3-1: device descriptor read/64, error -71 [ 1678.945666][ T29] audit: type=1400 audit(1732572968.582:1090): avc: denied { write } for pid=23930 comm="syz.0.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1678.965044][ C1] vkms_vblank_simulate: vblank timer overrun [ 1678.991797][ T5842] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1679.141745][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 1679.154161][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1679.171517][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1679.191840][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1679.215266][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1679.247642][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1679.267350][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.286872][T16504] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1680.095358][ T5842] usb 4-1: GET_CAPABILITIES returned 0 [ 1680.101157][ T5842] usbtmc 4-1:16.0: can't read capabilities [ 1680.243995][T16504] usb 3-1: device descriptor read/64, error -71 [ 1680.362385][T16504] usb usb3-port1: attempt power cycle [ 1680.652459][ T29] audit: type=1400 audit(1732572970.002:1091): avc: denied { watch watch_reads } for pid=23925 comm="syz.3.4291" path="/proc/sys/fs/binfmt_misc/register" dev="binfmt_misc" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=file permissive=1 [ 1680.739100][ T5842] usb 4-1: USB disconnect, device number 110 [ 1680.824957][T23946] 9pnet_fd: Insufficient options for proto=fd [ 1682.017035][T23967] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 1682.392133][T23971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4301'. [ 1683.400689][T23980] FAULT_INJECTION: forcing a failure. [ 1683.400689][T23980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.449712][T23980] CPU: 1 UID: 0 PID: 23980 Comm: syz.2.4305 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1683.460184][T23980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1683.470258][T23980] Call Trace: [ 1683.473550][T23980] [ 1683.476497][T23980] dump_stack_lvl+0x16c/0x1f0 [ 1683.481205][T23980] should_fail_ex+0x497/0x5b0 [ 1683.485184][T23983] netlink: 'syz.0.4304': attribute type 4 has an invalid length. [ 1683.485901][T23980] _copy_from_user+0x2e/0xd0 [ 1683.498202][T23980] kstrtouint_from_user+0xd7/0x1c0 [ 1683.503348][T23980] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1683.509087][T23980] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1683.514717][T23980] proc_fail_nth_write+0x84/0x250 [ 1683.519752][T23980] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1683.525410][T23980] ? ksys_write+0x12b/0x250 [ 1683.529947][T23980] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1683.535607][T23980] vfs_write+0x24c/0x1150 [ 1683.539956][T23980] ? __fget_files+0x1fc/0x3a0 [ 1683.544648][T23980] ? __pfx___mutex_lock+0x10/0x10 [ 1683.549689][T23980] ? __pfx_vfs_write+0x10/0x10 [ 1683.554476][T23980] ? __fget_files+0x206/0x3a0 [ 1683.559173][T23980] ksys_write+0x12b/0x250 [ 1683.563514][T23980] ? __pfx_ksys_write+0x10/0x10 [ 1683.568388][T23980] do_syscall_64+0xcd/0x250 [ 1683.572910][T23980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.578824][T23980] RIP: 0033:0x7fe26277d2ff [ 1683.583247][T23980] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1683.602871][T23980] RSP: 002b:00007fe263533030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1683.611314][T23980] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe26277d2ff [ 1683.619305][T23980] RDX: 0000000000000001 RSI: 00007fe2635330a0 RDI: 0000000000000003 [ 1683.627376][T23980] RBP: 00007fe263533090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.635357][T23980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1683.643339][T23980] R13: 0000000000000001 R14: 00007fe262936080 R15: 00007ffca2a97c98 [ 1683.651333][T23980] [ 1684.042575][T23986] netlink: 'syz.0.4304': attribute type 4 has an invalid length. [ 1684.250223][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4308'. [ 1684.675889][T24001] tmpfs: Bad value for 'mpol' [ 1684.699742][T24001] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1685.946266][T24018] FAULT_INJECTION: forcing a failure. [ 1685.946266][T24018] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.963830][T24018] CPU: 0 UID: 0 PID: 24018 Comm: syz.6.4312 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1685.974275][T24018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1685.984327][T24018] Call Trace: [ 1685.987597][T24018] [ 1685.990518][T24018] dump_stack_lvl+0x16c/0x1f0 [ 1685.995201][T24018] should_fail_ex+0x497/0x5b0 [ 1685.999878][T24018] ? fs_reclaim_acquire+0xae/0x150 [ 1686.004991][T24018] should_failslab+0xc2/0x120 [ 1686.009665][T24018] __kmalloc_node_noprof+0xd1/0x430 [ 1686.014858][T24018] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1686.020317][T24018] __kvmalloc_node_noprof+0xad/0x1a0 [ 1686.025600][T24018] seq_read_iter+0x82a/0x12b0 [ 1686.030288][T24018] seq_read+0x39f/0x4e0 [ 1686.034443][T24018] ? __pfx_seq_read+0x10/0x10 [ 1686.039131][T24018] ? avc_policy_seqno+0x9/0x20 [ 1686.043905][T24018] ? __pfx_seq_read+0x10/0x10 [ 1686.048586][T24018] proc_reg_read+0x23d/0x330 [ 1686.053182][T24018] ? __pfx_proc_reg_read+0x10/0x10 [ 1686.058291][T24018] vfs_read+0x1df/0xbe0 [ 1686.062442][T24018] ? __fget_files+0x1fc/0x3a0 [ 1686.067112][T24018] ? __pfx___mutex_lock+0x10/0x10 [ 1686.072134][T24018] ? __pfx_vfs_read+0x10/0x10 [ 1686.076817][T24018] ? __fget_files+0x206/0x3a0 [ 1686.081501][T24018] ksys_read+0x12b/0x250 [ 1686.085746][T24018] ? __pfx_ksys_read+0x10/0x10 [ 1686.090507][T24018] do_syscall_64+0xcd/0x250 [ 1686.095010][T24018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.100905][T24018] RIP: 0033:0x7f0b90f7e819 [ 1686.105313][T24018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1686.124922][T24018] RSP: 002b:00007f0b90dd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1686.133334][T24018] RAX: ffffffffffffffda RBX: 00007f0b91136080 RCX: 00007f0b90f7e819 [ 1686.141297][T24018] RDX: 0000000000002020 RSI: 0000000020000640 RDI: 0000000000000006 [ 1686.149260][T24018] RBP: 00007f0b90dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.157225][T24018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.165188][T24018] R13: 0000000000000000 R14: 00007f0b91136080 R15: 00007ffec3e726c8 [ 1686.173168][T24018] [ 1686.176287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.588042][T24019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1686.757228][T24024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4315'. [ 1690.646620][T24047] FAULT_INJECTION: forcing a failure. [ 1690.646620][T24047] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.659988][T24047] CPU: 1 UID: 0 PID: 24047 Comm: syz.0.4321 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1690.670427][T24047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1690.680513][T24047] Call Trace: [ 1690.683810][T24047] [ 1690.686749][T24047] dump_stack_lvl+0x16c/0x1f0 [ 1690.691443][T24047] should_fail_ex+0x497/0x5b0 [ 1690.696149][T24047] should_failslab+0xc2/0x120 [ 1690.700848][T24047] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1690.706249][T24047] ? skb_clone+0x190/0x3f0 [ 1690.710678][T24047] skb_clone+0x190/0x3f0 [ 1690.714940][T24047] netlink_deliver_tap+0xabd/0xd30 [ 1690.720109][T24047] netlink_dump+0x639/0xd00 [ 1690.724639][T24047] ? __pfx_netlink_dump+0x10/0x10 [ 1690.729701][T24047] ? cap_capable+0x1cf/0x240 [ 1690.734324][T24047] ? __inet_diag_dump_start+0x42c/0x7f0 [ 1690.739895][T24047] __netlink_dump_start+0x6ca/0x970 [ 1690.745117][T24047] inet_diag_handler_cmd+0x284/0x2e0 [ 1690.750404][T24047] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 1690.756210][T24047] ? __pfx_lock_release+0x10/0x10 [ 1690.761232][T24047] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 1690.766945][T24047] ? __pfx_inet_diag_dump+0x10/0x10 [ 1690.772139][T24047] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1690.777784][T24047] sock_diag_rcv_msg+0x437/0x790 [ 1690.782721][T24047] netlink_rcv_skb+0x16b/0x440 [ 1690.787487][T24047] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1690.792946][T24047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1690.798245][T24047] ? netlink_deliver_tap+0x1ae/0xd30 [ 1690.803531][T24047] netlink_unicast+0x53c/0x7f0 [ 1690.808299][T24047] ? __pfx_netlink_unicast+0x10/0x10 [ 1690.813590][T24047] netlink_sendmsg+0x8b8/0xd70 [ 1690.818530][T24047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1690.823812][T24047] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1690.829198][T24047] sock_write_iter+0x4fe/0x5b0 [ 1690.833959][T24047] ? __pfx_sock_write_iter+0x10/0x10 [ 1690.839258][T24047] ? __pfx_file_has_perm+0x10/0x10 [ 1690.844405][T24047] do_iter_readv_writev+0x532/0x7f0 [ 1690.849615][T24047] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1690.855339][T24047] ? bpf_lsm_file_permission+0x9/0x10 [ 1690.860796][T24047] ? security_file_permission+0x71/0x210 [ 1690.866438][T24047] vfs_writev+0x363/0xdd0 [ 1690.870765][T24047] ? find_held_lock+0x2d/0x110 [ 1690.875535][T24047] ? __pfx_vfs_writev+0x10/0x10 [ 1690.880382][T24047] ? find_held_lock+0x2d/0x110 [ 1690.885149][T24047] ? __pfx_lock_release+0x10/0x10 [ 1690.890180][T24047] ? trace_lock_acquire+0x146/0x1e0 [ 1690.895402][T24047] ? __fget_files+0x206/0x3a0 [ 1690.900085][T24047] ? do_writev+0x297/0x340 [ 1690.904494][T24047] do_writev+0x297/0x340 [ 1690.908821][T24047] ? __pfx_do_writev+0x10/0x10 [ 1690.913584][T24047] do_syscall_64+0xcd/0x250 [ 1690.918090][T24047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.923984][T24047] RIP: 0033:0x7f558737e819 [ 1690.928392][T24047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.947994][T24047] RSP: 002b:00007f55880c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1690.956405][T24047] RAX: ffffffffffffffda RBX: 00007f5587535fa0 RCX: 00007f558737e819 [ 1690.964372][T24047] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000008 [ 1690.972335][T24047] RBP: 00007f55880c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.980298][T24047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.988264][T24047] R13: 0000000000000000 R14: 00007f5587535fa0 R15: 00007ffff6175788 [ 1690.996241][T24047] [ 1691.077053][T24059] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 1691.790038][ T29] audit: type=1400 audit(1732572981.422:1092): avc: denied { ioctl } for pid=24056 comm="syz.6.4326" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1692.767032][T24079] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1692.922069][ T5842] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1693.879485][ T5842] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.910965][ T5842] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1693.930740][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1693.963916][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 1693.980463][ T5842] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1694.422886][ T5842] usb 7-1: string descriptor 0 read error: -71 [ 1694.429183][ T5842] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1694.439205][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.483773][ T5842] usb 7-1: config 0 descriptor?? [ 1694.497904][ T5842] usb 7-1: can't set config #0, error -71 [ 1694.522843][ T5842] usb 7-1: USB disconnect, device number 48 [ 1694.746521][ T29] audit: type=1326 audit(1732572984.382:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.3.4334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f997bf7e819 code=0x0 [ 1695.441547][ T898] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1695.604364][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.627778][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.651616][ T898] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1695.693002][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.752428][ T898] usb 3-1: config 0 descriptor?? [ 1696.857220][T11506] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1696.861055][ T898] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 1696.880437][ T898] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 1696.942172][ T898] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0024/input/input66 [ 1697.023492][T11506] usb 7-1: config 0 has an invalid interface number: 74 but max is 0 [ 1697.354288][T11506] usb 7-1: config 0 has no interface number 0 [ 1697.360415][T11506] usb 7-1: config 0 interface 74 has no altsetting 0 [ 1697.371583][ T29] audit: type=1400 audit(1732572986.902:1094): avc: denied { ioctl } for pid=24082 comm="syz.2.4331" path="socket:[84668]" dev="sockfs" ino=84668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1697.428480][ T898] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1697.444583][T11506] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=f6.7d [ 1697.463703][T11506] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.473699][ T898] usb 3-1: USB disconnect, device number 97 [ 1697.504666][T11506] usb 7-1: Product: syz [ 1697.531583][T11506] usb 7-1: Manufacturer: syz [ 1697.548528][T11506] usb 7-1: SerialNumber: syz [ 1697.676217][T11506] usb 7-1: config 0 descriptor?? [ 1697.683328][T11506] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1697.704180][T11506] usb 7-1: setting power ON [ 1697.722619][T11506] dvb-usb: bulk message failed: -22 (2/0) [ 1698.953154][T11506] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1698.981287][T11506] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1699.000244][T11506] dvb_usb_cxusb 7-1:0.74: probe with driver dvb_usb_cxusb failed with error -22 [ 1699.173827][T11506] usb 7-1: USB disconnect, device number 49 [ 1699.262303][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4343'. [ 1701.381912][T18309] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 1701.588434][T18309] usb 7-1: string descriptor 0 read error: -22 [ 1701.596100][T18309] usb 7-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1701.729514][T18309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.893657][T18309] usb 7-1: config 0 descriptor?? [ 1701.908968][T18309] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1702.000688][T18309] usb 7-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1702.120007][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4346'. [ 1702.132838][T18309] usb 7-1: r8712u: Boot from EFUSE: Autoload Failed [ 1702.139430][T18309] usb 7-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1702.147295][T18309] usb 7-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1702.174379][T24151] Cannot find add_set index 0 as target [ 1702.182143][T18309] usb 7-1: USB disconnect, device number 50 [ 1702.554439][T14417] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1702.752118][T14417] usb 3-1: Using ep0 maxpacket: 8 [ 1702.767867][T14417] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1702.816340][T14417] usb 3-1: config 0 has no interface number 0 [ 1702.860295][T14417] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1703.441682][ T25] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1703.443514][T14417] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1703.463081][T14417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.473815][T14417] usb 3-1: config 0 descriptor?? [ 1703.483968][T14417] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1704.411146][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.437639][ T25] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1704.446859][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.457223][ T25] usb 7-1: config 0 descriptor?? [ 1704.469407][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 1704.631994][T15034] bond0: (slave bond_slave_0): interface is now down [ 1704.642608][T15034] bond0: (slave bond_slave_1): interface is now down [ 1704.656192][T24177] netlink: 'syz.3.4357': attribute type 10 has an invalid length. [ 1704.678281][T15034] bond0: now running without any active interface! [ 1704.707637][T24177] syz_tun: entered promiscuous mode [ 1704.719219][T24177] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1704.734362][T15032] bond0: (slave syz_tun): interface is now down [ 1704.745892][T15032] bond0: now running without any active interface! [ 1704.881629][ T5883] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1704.896989][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1704.904685][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 1704.912506][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1704.920625][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 1704.928457][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 1704.937504][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 1704.946129][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 1704.956220][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 1705.051669][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 1705.059523][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.073410][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.083948][ T5883] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1705.093988][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.109854][ T5883] usb 2-1: config 0 descriptor?? [ 1705.168304][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 1705.176477][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 1705.187359][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 1705.396665][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 1705.414126][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 1705.420905][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 1705.430704][ T25] pwc: Registered as video103. [ 1705.437333][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input67 [ 1705.460939][ T25] usb 7-1: USB disconnect, device number 51 [ 1705.532048][ T5883] hid-picolcd 0003:04D8:F002.0025: unknown main item tag 0x0 [ 1705.539620][ T5883] hid-picolcd 0003:04D8:F002.0025: unknown main item tag 0x0 [ 1705.559934][ T5883] hid-picolcd 0003:04D8:F002.0025: unknown main item tag 0x0 [ 1705.569642][ T5883] hid-picolcd 0003:04D8:F002.0025: unknown main item tag 0x0 [ 1705.589052][ T5883] hid-picolcd 0003:04D8:F002.0025: unknown main item tag 0x0 [ 1705.659002][ T5883] hid-picolcd 0003:04D8:F002.0025: No report with id 0xf4 found [ 1705.678988][ T5883] hid-picolcd 0003:04D8:F002.0025: No report with id 0xf3 found [ 1705.738079][ T5883] usb 2-1: USB disconnect, device number 76 [ 1705.764221][ T29] audit: type=1400 audit(1732572995.402:1095): avc: denied { read } for pid=24185 comm="syz.3.4360" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1705.788221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1706.262007][T18309] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1706.411946][T18309] usb 4-1: Using ep0 maxpacket: 8 [ 1706.423995][T18309] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1706.434060][T18309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.444850][T18309] usb 4-1: Product: syz [ 1706.449155][T18309] usb 4-1: Manufacturer: syz [ 1706.454636][T18309] usb 4-1: SerialNumber: syz [ 1706.470401][T18309] usb 4-1: config 0 descriptor?? [ 1707.009303][T24200] tmpfs: Bad value for 'mpol' [ 1707.021688][T24200] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1707.655357][T18309] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1707.714130][ T29] audit: type=1326 audit(1732572997.352:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.1.4362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee1ef7e819 code=0x0 [ 1707.892922][T18309] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1709.715158][T24213] syz.6.4365 (24213): drop_caches: 2 [ 1709.743550][T24213] syz.6.4365 (24213): drop_caches: 2 [ 1710.209093][ T5883] usb 3-1: USB disconnect, device number 98 [ 1710.229849][ T5883] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 1710.237207][T14417] usb 4-1: USB disconnect, device number 111 [ 1710.376290][T24219] syz.2.4368[24219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1710.376383][T24219] syz.2.4368[24219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1710.391323][T24219] syz.2.4368[24219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1710.640494][T24219] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1710.670347][T24220] Cannot find add_set index 0 as target [ 1711.078579][T24228] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1712.705703][T24219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.974079][ T29] audit: type=1400 audit(1732573004.612:1097): avc: denied { accept } for pid=24240 comm="syz.6.4373" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1715.049675][ T29] audit: type=1400 audit(1732573004.632:1098): avc: denied { write } for pid=24240 comm="syz.6.4373" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1715.105473][T24219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.120207][ T29] audit: type=1400 audit(1732573004.652:1099): avc: denied { setopt } for pid=24240 comm="syz.6.4373" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1715.178366][T24266] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1715.250476][T24219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.371688][ T898] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1715.379447][ T5883] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1715.413524][T24219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.435753][ T29] audit: type=1326 audit(1732573005.072:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24263 comm="syz.0.4377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558737e819 code=0x0 [ 1715.458696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1715.510959][T24219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.551612][ T898] usb 2-1: Using ep0 maxpacket: 32 [ 1715.559154][ T898] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 1715.568963][ T5883] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 3.aa [ 1715.583360][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.593215][T24219] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.601818][ T898] usb 2-1: config 0 has an invalid interface number: 98 but max is 1 [ 1715.610495][ T5883] usb 7-1: Product: syz [ 1715.615041][ T898] usb 2-1: config 0 has no interface number 0 [ 1715.624024][ T5883] usb 7-1: Manufacturer: syz [ 1715.632450][ T898] usb 2-1: config 0 has no interface number 1 [ 1715.638591][ T5883] usb 7-1: SerialNumber: syz [ 1715.648007][ T898] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1715.657401][ T898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.686544][ T5883] usb 7-1: config 0 descriptor?? [ 1715.694339][ T898] usb 2-1: Product: syz [ 1715.699854][ T898] usb 2-1: Manufacturer: syz [ 1715.708707][ T898] usb 2-1: SerialNumber: syz [ 1715.734829][ T898] usb 2-1: config 0 descriptor?? [ 1715.737056][T24219] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.779961][T24219] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.872332][ T898] viperboard 2-1:0.61: version 0.00 found at bus 002 address 077 [ 1715.943777][ T898] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1715.966238][ T25] usb 7-1: USB disconnect, device number 52 [ 1715.995478][ T898] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1717.723923][ T898] viperboard 2-1:0.98: version 0.00 found at bus 002 address 077 [ 1717.747408][ T898] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 1717.765271][ T898] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1717.862875][ T898] usb 2-1: USB disconnect, device number 77 [ 1720.307097][T24309] lo speed is unknown, defaulting to 1000 [ 1721.351569][T18309] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1722.436503][T18309] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.447328][T18309] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1722.456563][T18309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.466927][T18309] usb 2-1: config 0 descriptor?? [ 1722.494386][T18309] pwc: Askey VC010 type 2 USB webcam detected. [ 1722.651238][T24338] syz.6.4397 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1722.896157][T18309] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1723.100071][T18309] pwc: recv_control_msg error -32 req 02 val 2700 [ 1723.110426][T18309] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1723.127907][T18309] pwc: recv_control_msg error -32 req 04 val 1000 [ 1723.144737][T18309] pwc: recv_control_msg error -32 req 04 val 1300 [ 1723.195339][T18309] pwc: recv_control_msg error -32 req 04 val 1400 [ 1723.205300][T18309] pwc: recv_control_msg error -32 req 02 val 2000 [ 1724.260508][T18309] pwc: recv_control_msg error -71 req 04 val 1500 [ 1724.279581][T18309] pwc: recv_control_msg error -71 req 02 val 2500 [ 1724.290262][T18309] pwc: recv_control_msg error -71 req 02 val 2400 [ 1724.297251][T18309] pwc: recv_control_msg error -71 req 02 val 2600 [ 1724.304294][T18309] pwc: recv_control_msg error -71 req 02 val 2900 [ 1724.311214][T18309] pwc: recv_control_msg error -71 req 02 val 2800 [ 1724.318791][T18309] pwc: recv_control_msg error -71 req 04 val 1100 [ 1724.343564][T18309] pwc: recv_control_msg error -71 req 04 val 1200 [ 1724.367164][T18309] pwc: Registered as video103. [ 1724.465620][T18309] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 1725.338816][T18309] usb 2-1: USB disconnect, device number 78 [ 1726.367928][T24359] syz.6.4402 (24359): drop_caches: 2 [ 1726.376951][T24359] syz.6.4402 (24359): drop_caches: 2 [ 1726.626534][T24364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4401'. [ 1727.055829][T24374] FAULT_INJECTION: forcing a failure. [ 1727.055829][T24374] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.068817][T24374] CPU: 1 UID: 0 PID: 24374 Comm: syz.2.4403 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1727.079251][T24374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1727.089311][T24374] Call Trace: [ 1727.092592][T24374] [ 1727.095523][T24374] dump_stack_lvl+0x16c/0x1f0 [ 1727.100210][T24374] should_fail_ex+0x497/0x5b0 [ 1727.104906][T24374] ? fs_reclaim_acquire+0xae/0x150 [ 1727.110024][T24374] should_failslab+0xc2/0x120 [ 1727.114721][T24374] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1727.120102][T24374] ? sk_prot_alloc+0x60/0x2a0 [ 1727.124785][T24374] ? trace_lock_acquire+0x146/0x1e0 [ 1727.129995][T24374] sk_prot_alloc+0x60/0x2a0 [ 1727.134505][T24374] sk_alloc+0x36/0xb90 [ 1727.138590][T24374] pn_socket_create+0x22d/0x560 [ 1727.143456][T24374] __sock_create+0x335/0x8d0 [ 1727.148058][T24374] __sys_socketpair+0x1d9/0x5a0 [ 1727.152919][T24374] ? __pfx___sys_socketpair+0x10/0x10 [ 1727.158301][T24374] ? fput+0x67/0x440 [ 1727.162206][T24374] ? __pfx_ksys_write+0x10/0x10 [ 1727.167063][T24374] __x64_sys_socketpair+0x96/0x100 [ 1727.172183][T24374] ? lockdep_hardirqs_on+0x7c/0x110 [ 1727.177387][T24374] do_syscall_64+0xcd/0x250 [ 1727.181902][T24374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.187802][T24374] RIP: 0033:0x7fe26277e819 [ 1727.192219][T24374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1727.211832][T24374] RSP: 002b:00007fe263512038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1727.220254][T24374] RAX: ffffffffffffffda RBX: 00007fe262936160 RCX: 00007fe26277e819 [ 1727.228226][T24374] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000023 [ 1727.236198][T24374] RBP: 00007fe263512090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.244178][T24374] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 1727.252165][T24374] R13: 0000000000000000 R14: 00007fe262936160 R15: 00007ffca2a97c98 [ 1727.260154][T24374] [ 1727.700442][T14417] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1728.114884][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1728.246168][T14417] usb 7-1: Using ep0 maxpacket: 16 [ 1728.254365][T14417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.265914][T14417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.285991][T14417] usb 7-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 1728.307906][T14417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.585793][T11506] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 1728.667674][T14417] usb 7-1: config 0 descriptor?? [ 1728.919356][T11506] usb 4-1: string descriptor 0 read error: -22 [ 1728.925925][T11506] usb 4-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 1728.937094][T11506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.214409][T14417] usbhid 7-1:0.0: can't add hid device: -32 [ 1729.224376][T14417] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1729.224959][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4412'. [ 1729.236964][T11506] usb 4-1: config 0 descriptor?? [ 1729.343844][T11506] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1729.350479][T11506] usb 4-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1729.383965][T24398] tmpfs: Unknown parameter 'usrquota@' [ 1729.385368][T14417] usb 7-1: USB disconnect, device number 53 [ 1729.500966][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4407'. [ 1730.224782][T11506] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 1730.244410][T11506] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1730.264950][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.282200][T11506] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1730.353711][T11506] usb 4-1: USB disconnect, device number 112 [ 1731.284580][T24413] tmpfs: Bad value for 'mpol' [ 1731.290748][T24413] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1732.992361][T24430] overlayfs: failed to resolve './file1': -2 [ 1735.461734][T24454] tmpfs: Bad value for 'mpol' [ 1735.626357][T24457] tmpfs: Bad value for 'mpol' [ 1735.651968][T16504] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1736.736603][T24465] syz.3.4425 (24465): drop_caches: 2 [ 1736.942117][T24465] syz.3.4425 (24465): drop_caches: 2 [ 1738.103205][T24476] syz.2.4427 (24476): drop_caches: 2 [ 1738.109207][T24476] syz.2.4427 (24476): drop_caches: 2 [ 1738.715739][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4429'. [ 1738.917681][T24496] syz.6.4433 (24496): drop_caches: 2 [ 1738.925802][T24496] syz.6.4433 (24496): drop_caches: 2 [ 1739.802472][T24507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1740.541662][ T5883] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1741.244312][ T29] audit: type=1400 audit(1732573030.882:1101): avc: denied { ioctl } for pid=24513 comm="syz.1.4436" path="socket:[86693]" dev="sockfs" ino=86693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1741.461600][ C0] ================================================================== [ 1741.469697][ C0] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 1741.477538][ C0] Read of size 8 at addr ffff8880576885f8 by task kworker/u8:0/18485 [ 1741.485607][ C0] [ 1741.487929][ C0] CPU: 0 UID: 0 PID: 18485 Comm: kworker/u8:0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1741.498522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1741.508579][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 1741.514240][ C0] Call Trace: [ 1741.517524][ C0] [ 1741.520370][ C0] dump_stack_lvl+0x116/0x1f0 [ 1741.525067][ C0] print_report+0xc3/0x620 [ 1741.529504][ C0] ? __virt_addr_valid+0x5e/0x590 [ 1741.534545][ C0] ? __phys_addr+0xc6/0x150 [ 1741.539064][ C0] kasan_report+0xd9/0x110 [ 1741.543495][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 1741.548621][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 1741.553778][ C0] selinux_ip_output+0x1e0/0x1f0 [ 1741.558744][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 1741.564220][ C0] nf_hook_slow+0xbb/0x200 [ 1741.568651][ C0] nf_hook+0x386/0x6d0 [ 1741.572737][ C0] ? __pfx_dst_output+0x10/0x10 [ 1741.577602][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1741.582203][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1741.588040][ C0] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 1741.593603][ C0] ? __pfx_dst_output+0x10/0x10 [ 1741.598469][ C0] ? __ip_make_skb+0x1150/0x1d00 [ 1741.603419][ C0] ? do_csum+0x26f/0x2d0 [ 1741.607672][ C0] __ip_local_out+0x339/0x640 [ 1741.612364][ C0] ? __pfx_dst_output+0x10/0x10 [ 1741.617232][ C0] ip_push_pending_frames+0xa0/0x5b0 [ 1741.622538][ C0] ip_send_unicast_reply+0xd0e/0x1650 [ 1741.627930][ C0] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 1741.633763][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 1741.638984][ C0] ? tcp_v4_send_ack+0x627/0x13f0 [ 1741.644027][ C0] tcp_v4_send_ack+0x976/0x13f0 [ 1741.648900][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1741.654134][ C0] ? __pfx_tcp_v4_send_ack+0x10/0x10 [ 1741.659444][ C0] ? find_held_lock+0x2d/0x110 [ 1741.664232][ C0] ? tcp_v4_rcv+0x38ae/0x4390 [ 1741.668940][ C0] ? mark_held_locks+0x9f/0xe0 [ 1741.673730][ C0] ? tcp_v4_rcv+0x2f96/0x4390 [ 1741.678434][ C0] tcp_v4_rcv+0x2f96/0x4390 [ 1741.682986][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1741.687860][ C0] ? rcu_is_watching+0x12/0xc0 [ 1741.692640][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1741.697490][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 1741.702860][ C0] ip_local_deliver_finish+0x316/0x570 [ 1741.708327][ C0] ip_local_deliver+0x18e/0x1f0 [ 1741.713168][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1741.718547][ C0] ip_rcv+0x2c3/0x5d0 [ 1741.722532][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1741.727048][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 1741.732951][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1741.739375][ C0] ? rcu_is_watching+0x12/0xc0 [ 1741.744146][ C0] ? process_backlog+0x3f1/0x15f0 [ 1741.749178][ C0] ? process_backlog+0x3f1/0x15f0 [ 1741.754212][ C0] __netif_receive_skb+0x1d/0x160 [ 1741.759256][ C0] process_backlog+0x443/0x15f0 [ 1741.764119][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1741.769505][ C0] net_rx_action+0xa94/0x1010 [ 1741.774188][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1741.779389][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1741.784152][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 1741.789363][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1741.794567][ C0] ? sched_clock+0x38/0x60 [ 1741.799010][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1741.803868][ C0] ? mark_held_locks+0x9f/0xe0 [ 1741.808639][ C0] handle_softirqs+0x213/0x8f0 [ 1741.813411][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1741.818701][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 1741.824004][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1741.829121][ C0] do_softirq+0xb2/0xf0 [ 1741.833285][ C0] [ 1741.836215][ C0] [ 1741.839136][ C0] __local_bh_enable_ip+0x100/0x120 [ 1741.844340][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1741.849461][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 1741.854406][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 1741.859432][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1741.864813][ C0] ? hlock_class+0x4e/0x130 [ 1741.869330][ C0] ? mark_lock+0xb5/0xc60 [ 1741.873672][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1741.878456][ C0] ? find_held_lock+0x2d/0x110 [ 1741.883262][ C0] ? __ip_finish_output+0x49e/0x950 [ 1741.888510][ C0] ? __pfx_lock_release+0x10/0x10 [ 1741.893541][ C0] ? mark_held_locks+0x9f/0xe0 [ 1741.898311][ C0] ip_finish_output2+0xc6c/0x2150 [ 1741.903344][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1741.908807][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 1741.913657][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 1741.918881][ C0] __ip_finish_output+0x49e/0x950 [ 1741.923930][ C0] ip_finish_output+0x35/0x380 [ 1741.928709][ C0] ip_output+0x13b/0x2a0 [ 1741.932957][ C0] ? __pfx_ip_output+0x10/0x10 [ 1741.937730][ C0] ip_local_out+0x33e/0x4a0 [ 1741.942243][ C0] __ip_queue_xmit+0x777/0x1970 [ 1741.947101][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1741.952216][ C0] __tcp_transmit_skb+0x2b39/0x3df0 [ 1741.957433][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1741.963010][ C0] ? tcp_small_queue_check.isra.0+0x2f2/0x3e0 [ 1741.969094][ C0] tcp_write_xmit+0x12b1/0x8560 [ 1741.973943][ C0] ? tcp_current_mss+0x27e/0x500 [ 1741.978901][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 1741.984443][ C0] tcp_send_fin+0x154/0xc70 [ 1741.988944][ C0] ? __pfx_tcp_send_fin+0x10/0x10 [ 1741.993966][ C0] ? __pfx_sock_rfree+0x10/0x10 [ 1741.998816][ C0] __tcp_close+0x96b/0xff0 [ 1742.003248][ C0] tcp_close+0x28/0x120 [ 1742.007409][ C0] inet_release+0x13c/0x280 [ 1742.011918][ C0] inet6_release+0x4f/0x70 [ 1742.016344][ C0] sock_release+0x8e/0x1d0 [ 1742.020762][ C0] rds_tcp_accept_one+0x357/0xd00 [ 1742.025795][ C0] ? irqentry_exit+0x3b/0x90 [ 1742.030389][ C0] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1742.035945][ C0] rds_tcp_accept_worker+0x59/0x80 [ 1742.041069][ C0] process_one_work+0x9c5/0x1ba0 [ 1742.046012][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1742.052174][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1742.057541][ C0] ? rcu_is_watching+0x12/0xc0 [ 1742.062313][ C0] ? assign_work+0x1a0/0x250 [ 1742.066907][ C0] worker_thread+0x6c8/0xf00 [ 1742.071505][ C0] ? __kthread_parkme+0x148/0x220 [ 1742.076559][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1742.081675][ C0] kthread+0x2c1/0x3a0 [ 1742.085750][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1742.090954][ C0] ? __pfx_kthread+0x10/0x10 [ 1742.095550][ C0] ret_from_fork+0x45/0x80 [ 1742.099970][ C0] ? __pfx_kthread+0x10/0x10 [ 1742.104565][ C0] ret_from_fork_asm+0x1a/0x30 [ 1742.109393][ C0] [ 1742.112407][ C0] [ 1742.114722][ C0] The buggy address belongs to the object at ffff888057688580 [ 1742.114722][ C0] which belongs to the cache tw_sock_TCP of size 288 [ 1742.128767][ C0] The buggy address is located 120 bytes inside of [ 1742.128767][ C0] allocated 288-byte region [ffff888057688580, ffff8880576886a0) [ 1742.142906][ C0] [ 1742.145219][ C0] The buggy address belongs to the physical page: [ 1742.151623][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888057688000 pfn:0x57688 [ 1742.161677][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1742.170164][ C0] memcg:ffff888029801d01 [ 1742.174390][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1742.181923][ C0] page_type: f5(slab) [ 1742.185895][ C0] raw: 00fff00000000040 ffff8881412f73c0 dead000000000122 0000000000000000 [ 1742.194474][ C0] raw: ffff888057688000 0000000080170016 00000001f5000000 ffff888029801d01 [ 1742.203054][ C0] head: 00fff00000000040 ffff8881412f73c0 dead000000000122 0000000000000000 [ 1742.211718][ C0] head: ffff888057688000 0000000080170016 00000001f5000000 ffff888029801d01 [ 1742.220382][ C0] head: 00fff00000000001 ffffea00015da201 ffffffffffffffff 0000000000000000 [ 1742.229050][ C0] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 1742.237723][ C0] page dumped because: kasan: bad access detected [ 1742.244130][ C0] page_owner tracks the page as allocated [ 1742.249829][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5991, tgid 5991 (syz.1.21), ts 70175366704, free_ts 12951971463 [ 1742.268762][ C0] post_alloc_hook+0x2d1/0x350 [ 1742.273537][ C0] get_page_from_freelist+0xfce/0x2f80 [ 1742.278994][ C0] __alloc_pages_noprof+0x223/0x25a0 [ 1742.284279][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1742.289750][ C0] new_slab+0x2c9/0x410 [ 1742.293907][ C0] ___slab_alloc+0xdac/0x1880 [ 1742.298580][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 1742.303952][ C0] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 1742.309409][ C0] inet_twsk_alloc+0x120/0x970 [ 1742.314174][ C0] tcp_time_wait+0x5f/0xe10 [ 1742.319119][ C0] tcp_rcv_state_process+0x1fda/0x4c40 [ 1742.324581][ C0] tcp_v4_do_rcv+0x1ad/0xa90 [ 1742.329176][ C0] __release_sock+0x31b/0x400 [ 1742.333851][ C0] release_sock+0x5a/0x220 [ 1742.338262][ C0] mptcp_check_send_data_fin+0x24a/0x450 [ 1742.343896][ C0] __mptcp_close+0x8cb/0xb90 [ 1742.348477][ C0] page last free pid 1 tgid 1 stack trace: [ 1742.354271][ C0] free_unref_page+0x661/0x1080 [ 1742.359124][ C0] free_contig_range+0x133/0x3f0 [ 1742.364058][ C0] destroy_args+0xa87/0xe60 [ 1742.368570][ C0] debug_vm_pgtable+0x168e/0x31a0 [ 1742.373608][ C0] do_one_initcall+0x128/0x700 [ 1742.378380][ C0] kernel_init_freeable+0x5c7/0x900 [ 1742.383581][ C0] kernel_init+0x1c/0x2b0 [ 1742.387913][ C0] ret_from_fork+0x45/0x80 [ 1742.392322][ C0] ret_from_fork_asm+0x1a/0x30 [ 1742.397091][ C0] [ 1742.399401][ C0] Memory state around the buggy address: [ 1742.405019][ C0] ffff888057688480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1742.413073][ C0] ffff888057688500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1742.421128][ C0] >ffff888057688580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1742.429205][ C0] ^ [ 1742.437173][ C0] ffff888057688600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1742.445225][ C0] ffff888057688680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1742.453278][ C0] ================================================================== [ 1742.461433][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1742.468631][ C0] CPU: 0 UID: 0 PID: 18485 Comm: kworker/u8:0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1742.479238][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1742.489306][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 1742.494976][ C0] Call Trace: [ 1742.498261][ C0] [ 1742.501113][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1742.505735][ C0] panic+0x71d/0x800 [ 1742.509662][ C0] ? mark_held_locks+0x9f/0xe0 [ 1742.514450][ C0] ? __pfx_panic+0x10/0x10 [ 1742.518897][ C0] ? irqentry_exit+0x3b/0x90 [ 1742.523503][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1742.528724][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1742.533845][ C0] check_panic_on_warn+0xab/0xb0 [ 1742.538797][ C0] end_report+0x117/0x180 [ 1742.543157][ C0] kasan_report+0xe9/0x110 [ 1742.547591][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 1742.552709][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 1742.557825][ C0] selinux_ip_output+0x1e0/0x1f0 [ 1742.562768][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 1742.568239][ C0] nf_hook_slow+0xbb/0x200 [ 1742.572654][ C0] nf_hook+0x386/0x6d0 [ 1742.576723][ C0] ? __pfx_dst_output+0x10/0x10 [ 1742.581577][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1742.586179][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1742.591991][ C0] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 1742.597537][ C0] ? __pfx_dst_output+0x10/0x10 [ 1742.602387][ C0] ? __ip_make_skb+0x1150/0x1d00 [ 1742.607326][ C0] ? do_csum+0x26f/0x2d0 [ 1742.611572][ C0] __ip_local_out+0x339/0x640 [ 1742.616265][ C0] ? __pfx_dst_output+0x10/0x10 [ 1742.621127][ C0] ip_push_pending_frames+0xa0/0x5b0 [ 1742.626421][ C0] ip_send_unicast_reply+0xd0e/0x1650 [ 1742.631802][ C0] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 1742.637624][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 1742.642828][ C0] ? tcp_v4_send_ack+0x627/0x13f0 [ 1742.647863][ C0] tcp_v4_send_ack+0x976/0x13f0 [ 1742.652719][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1742.657916][ C0] ? __pfx_tcp_v4_send_ack+0x10/0x10 [ 1742.663202][ C0] ? find_held_lock+0x2d/0x110 [ 1742.667971][ C0] ? tcp_v4_rcv+0x38ae/0x4390 [ 1742.672652][ C0] ? mark_held_locks+0x9f/0xe0 [ 1742.677418][ C0] ? tcp_v4_rcv+0x2f96/0x4390 [ 1742.682099][ C0] tcp_v4_rcv+0x2f96/0x4390 [ 1742.686620][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1742.691479][ C0] ? rcu_is_watching+0x12/0xc0 [ 1742.696245][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1742.701099][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 1742.706471][ C0] ip_local_deliver_finish+0x316/0x570 [ 1742.711927][ C0] ip_local_deliver+0x18e/0x1f0 [ 1742.716772][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1742.722146][ C0] ip_rcv+0x2c3/0x5d0 [ 1742.726119][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1742.730614][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 1742.736508][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1742.742941][ C0] ? rcu_is_watching+0x12/0xc0 [ 1742.747725][ C0] ? process_backlog+0x3f1/0x15f0 [ 1742.752767][ C0] ? process_backlog+0x3f1/0x15f0 [ 1742.757799][ C0] __netif_receive_skb+0x1d/0x160 [ 1742.762829][ C0] process_backlog+0x443/0x15f0 [ 1742.767696][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1742.773087][ C0] net_rx_action+0xa94/0x1010 [ 1742.777778][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1742.782899][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1742.787669][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 1742.792876][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1742.798072][ C0] ? sched_clock+0x38/0x60 [ 1742.802495][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1742.807348][ C0] ? mark_held_locks+0x9f/0xe0 [ 1742.812111][ C0] handle_softirqs+0x213/0x8f0 [ 1742.816879][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1742.822166][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 1742.827451][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1742.832563][ C0] do_softirq+0xb2/0xf0 [ 1742.836717][ C0] [ 1742.839637][ C0] [ 1742.842560][ C0] __local_bh_enable_ip+0x100/0x120 [ 1742.847760][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1742.852871][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 1742.857809][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 1742.862833][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1742.868212][ C0] ? hlock_class+0x4e/0x130 [ 1742.872731][ C0] ? mark_lock+0xb5/0xc60 [ 1742.877064][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1742.881829][ C0] ? find_held_lock+0x2d/0x110 [ 1742.886602][ C0] ? __ip_finish_output+0x49e/0x950 [ 1742.891800][ C0] ? __pfx_lock_release+0x10/0x10 [ 1742.896823][ C0] ? mark_held_locks+0x9f/0xe0 [ 1742.901585][ C0] ip_finish_output2+0xc6c/0x2150 [ 1742.906611][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1742.912070][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 1742.916920][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 1742.922118][ C0] __ip_finish_output+0x49e/0x950 [ 1742.927145][ C0] ip_finish_output+0x35/0x380 [ 1742.931910][ C0] ip_output+0x13b/0x2a0 [ 1742.936150][ C0] ? __pfx_ip_output+0x10/0x10 [ 1742.940912][ C0] ip_local_out+0x33e/0x4a0 [ 1742.945414][ C0] __ip_queue_xmit+0x777/0x1970 [ 1742.950296][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1742.955408][ C0] __tcp_transmit_skb+0x2b39/0x3df0 [ 1742.960616][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1742.966177][ C0] ? tcp_small_queue_check.isra.0+0x2f2/0x3e0 [ 1742.972256][ C0] tcp_write_xmit+0x12b1/0x8560 [ 1742.977099][ C0] ? tcp_current_mss+0x27e/0x500 [ 1742.982051][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 1742.987593][ C0] tcp_send_fin+0x154/0xc70 [ 1742.992091][ C0] ? __pfx_tcp_send_fin+0x10/0x10 [ 1742.997111][ C0] ? __pfx_sock_rfree+0x10/0x10 [ 1743.001960][ C0] __tcp_close+0x96b/0xff0 [ 1743.006390][ C0] tcp_close+0x28/0x120 [ 1743.010554][ C0] inet_release+0x13c/0x280 [ 1743.015066][ C0] inet6_release+0x4f/0x70 [ 1743.019492][ C0] sock_release+0x8e/0x1d0 [ 1743.023908][ C0] rds_tcp_accept_one+0x357/0xd00 [ 1743.028941][ C0] ? irqentry_exit+0x3b/0x90 [ 1743.033533][ C0] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1743.039090][ C0] rds_tcp_accept_worker+0x59/0x80 [ 1743.044203][ C0] process_one_work+0x9c5/0x1ba0 [ 1743.049148][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1743.055306][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1743.060760][ C0] ? rcu_is_watching+0x12/0xc0 [ 1743.065530][ C0] ? assign_work+0x1a0/0x250 [ 1743.070116][ C0] worker_thread+0x6c8/0xf00 [ 1743.074706][ C0] ? __kthread_parkme+0x148/0x220 [ 1743.079733][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1743.084840][ C0] kthread+0x2c1/0x3a0 [ 1743.088911][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1743.094104][ C0] ? __pfx_kthread+0x10/0x10 [ 1743.098697][ C0] ret_from_fork+0x45/0x80 [ 1743.103107][ C0] ? __pfx_kthread+0x10/0x10 [ 1743.107696][ C0] ret_from_fork_asm+0x1a/0x30 [ 1743.112472][ C0] [ 1743.115703][ C0] Kernel Offset: disabled [ 1743.120014][ C0] Rebooting in 86400 seconds..