last executing test programs: 16.128270599s ago: executing program 0 (id=534): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000002000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000002000100000000000000fb000000ff8005000500000000000afd000000000000fc00000000000000000000000000000000000000000000000100080000000000010014"], 0x80}, 0x1, 0x7}, 0x10) 15.472981362s ago: executing program 0 (id=536): r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7d}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8, 0x8000, 0xa4f, 0x5a, {{0x9, 0x4, 0x3, 0xe, 0x24, 0x66, 0x0, 0x34, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, {[@ssrr={0x89, 0xf, 0x60, [@empty, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0xffff, 0x10001, 0x10, r2, 0xfcd7, '\x00', r3, r4, 0x2, 0x3, 0x0, 0xe, @void, @value, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0500"], 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@gettfilter={0x4c, 0x2e, 0x0, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x5}, {0xf, 0xffe0}, {0xffe0, 0xffe0}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x949}, {0x8, 0xb, 0x6a2}, {0x8, 0xb, 0xf3b}, {0x8, 0xb, 0x401}]}, 0x4c}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in=@broadcast}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000540)=0xe8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 15.305155869s ago: executing program 0 (id=539): socket$nl_xfrm(0x10, 0x3, 0x6) mount$afs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd00) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r1}}, './file0\x00'}) chmod(&(0x7f0000000000)='./file0\x00', 0x20) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x40}}, 0x0, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x6}, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x0, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000840)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x0, 0x3, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x23, 0x72, {0x72, 0xd, "6fe2b3b8a2da88b6e1fdad512e9693d77b31cb9209ba255fb88d8f47ab33019f6837ce518d85367c2400b15a464a6b7b9136f9c29726c8c0be91dee5162296d93dc8a74c107f5aa50fb843ab377afb7119fad9b5378f37d6f8b853d9467cb9b9a3706f8b6bba7f02126d03ae3e5afd64"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x15, 0x72, "2a59d84853a544430bb513efc90ae14f3981546d9276c3220471ffcbc76a66eebb684ca3286f9ede850ca9248de91f373fe6d57c4d6ea67703305ebbab3a95b1129ee014d924ba84af8ebf6e73edc6f51212ba7654209e472ee060865cdbfd08157fc8fd7f710c2c0fd4f8b510dc7ffb7016"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x36}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1d}, &(0x7f00000003c0)={0x20, 0x0, 0x4c, {0x4a, "a052b0289a3d930e5a209c7ff501ddc4a39718f08467094f2ad9907c47d2bce20be21f14d48126634b11e0f74257efe89dd3361cb1eb1e0d21a3f6652b0c973a4ed3aa451cc6ec5c51ea"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x9e}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x53}}) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 13.539550109s ago: executing program 2 (id=545): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x13, 0x61, 0x10, 0x6cd, 0x202, 0xece2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc6, 0x0, 0x2, 0xb6, 0xd1, 0x15, 0x0, [], [{{0x9, 0x5, 0x4, 0xc, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5484}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r4, 0x40384708, 0x20000000) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 12.631211147s ago: executing program 0 (id=551): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x3000) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x5, 0xfffff800, 0x2}) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e3, &(0x7f00000000c0)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '-**'}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [], 0x6b}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000002400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002180)={0x230, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8d3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000000000}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9c9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffc00000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb0}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xacff804a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1dfb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x5f, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2969}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x866}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x90}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x67d5}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) chmod(&(0x7f0000000040)='./file0\x00', 0xa3) 12.428637023s ago: executing program 0 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)}], 0x1, 0x6) r2 = getpid() ioprio_get$pid(0x1, r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000029c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="04080416c900"], 0x7) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b000100000000090400000103010200090503"], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.939781852s ago: executing program 2 (id=560): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000002000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000002000100000000000000fb000000ff8005000500000000000a00070000000000fc00000000000000000000000000000000000000000000000100080000000000010014"], 0x80}, 0x1, 0x7}, 0x10) 9.716730632s ago: executing program 2 (id=561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000b40)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704acabdbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@loopback}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x1f000000}, 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000100)={0x28, 0x0, r5, 0x1, &(0x7f00000000c0)=""/1}) r6 = dup(r2) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') 8.993588355s ago: executing program 4 (id=563): r0 = syz_io_uring_setup(0x6da7, &(0x7f0000000000)={0x0, 0x1859, 0x2c000, 0x3, 0xef}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r2) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000140)=0x4, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xccd96000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="171becb7da4093280dac4b14364bd9f1", 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000001c0)=0xb, 0x4) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x1, 0x6, 0x7, 0xbf, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x763d, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0xa, &(0x7f0000000340)=[r3], &(0x7f0000000380)=[{0x5, 0x2, 0x8, 0xc}, {0x2, 0x1, 0xc}, {0x1, 0x3, 0x5, 0x2}, {0x4, 0x1, 0xa, 0x2}, {0x1, 0x5, 0x10, 0x5}, {0x0, 0x1, 0xb, 0x3}, {0x0, 0x2, 0xd, 0x3}, {0x0, 0x2, 0xb, 0x7}, {0x2, 0x3, 0x4, 0x1}, {0x1, 0x2, 0x7, 0xa}], 0x10, 0x8d7, @void, @value}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000500)={0x2, 0x87, "3e970d38905b0a4eab1906fda4fa5c24bb9996062971adec7c052f0ac87c6d9c79471950539205e82d6f248fed10e9bb0325307683c151ea2eb68b711ecb1b227e92b4fbb5a173d9fdfe391dd07735caf62cbd2b2d81c987171566d455b1b0ba9659e3ab6cc84817ca41a127db2c3a1f7b40e615263acf29b7bbc343fdc8c8927a7a02ba8ce131"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x280480, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000600)={'syz_tun\x00', @link_local}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000640)=0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf1}, "ea0d4f4f24943c2263884026d5ab2b68de2cc1221aef239e8b7c285d33c7e7d915f10b1383508c9d6056e17165d62219a98f14b8d51890fa33a455e4c04c8ae020e701dff6d3ca66b391601d4331ae296fdeb894a7ee5a5eddb2d14fed6a0028e3b0bd50175b9628780419a820bbf5c66cb32da475b96dda1dd37cee44674f9dbea71ffd445df5002a443d2b522a43316550d2e1c9e6c1498dc4632005a3297fa743e55218755ad221ab01e0945c711580878f556f43ac31d3a81bc1f115b37fe774b91d3038521624adaa1d83a4291883ba428d4419c005a8725dde45de4edb12477b5e21c0eea1f050dc585f26aa054e"}, 0xf5) ioctl$FITHAW(r1, 0xc0045878) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000780), &(0x7f00000007c0)={0x0, 0xfb, 0x79, 0x0, 0x4, "3d558480b4494c0e443dad6a6caff2ac", "866683874b46acfc6b92702b5752dc27a6d391a7a3d66dcd0b2f3a091ed182536529e7be1caf2ad212db435214188db397200fbb1abf60ad84a2d4a2c5fa84dfc2620c47c3fbbfce70b74eedc0295f97369f56d533d7547c4002b61816ae0ada2242cacc"}, 0x79, 0x2) r6 = accept4$phonet_pipe(r3, &(0x7f0000000840), &(0x7f0000000880)=0x10, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000008c0)={r6}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x8, 0x3) write$sndseq(r3, &(0x7f0000000980)=[{0x5c, 0x2, 0x3, 0x7, @tick=0xa02a, {0x3, 0x8}, {0xb, 0x8}, @raw8={"1df977e5f346d38355efd0d0"}}, {0x5, 0x1, 0xa, 0xb, @time={0x80000000, 0x8588}, {0xd1, 0xd8}, {0xfb, 0x80}, @result={0x1ff, 0x6}}], 0x38) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f00000009c0)={{0x0, 0x5}, 0x20}, 0x10) sync() read$FUSE(r5, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000004a80)={{0x1, 0x1, 0x18, r4, {r8, r9}}, './file0\x00'}) syz_open_dev$sndmidi(&(0x7f0000004ac0), 0x7fffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000004b00), 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004b80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000004c40)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x38, r12, 0x3, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc880}, 0x80) 8.200715477s ago: executing program 4 (id=564): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r3]) r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) lseek(r5, 0x1003ff, 0x4) 8.075396731s ago: executing program 2 (id=566): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x1c6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_setscheduler(r2, 0xffffffffffffffff, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@private1, @in=@loopback, 0x4e23, 0x8, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x21}, {0x4266, 0xa, 0x95, 0x0, 0x80, 0x8, 0x80000001, 0x1f5}, {0x7424, 0x800, 0x4, 0x401}, 0x2, 0x6e6bb5, 0x1, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d2, 0x32}, 0x2, @in=@multicast1, 0x0, 0x4, 0x2, 0x4, 0x2, 0xfffffff9, 0xa9fa}}, 0xe8) sendto$inet6(0xffffffffffffffff, &(0x7f0000003240), 0x0, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 5.560481336s ago: executing program 4 (id=570): io_uring_setup(0x70d4, 0x0) syz_open_procfs(0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0xffffffffffffff6e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x6}}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000020000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 4.366810354s ago: executing program 1 (id=574): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000180), 0x7, 0x80000) ioctl$HIDIOCGVERSION(r0, 0x80044801, 0x0) r1 = syz_open_dev$sg(0x0, 0x3, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5003, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000400)={0x8, 0x3, 0x4, 0x6, 0x2, 0x20, 0x16, "4200341f940d4d0010fb462ba09230146f1a8101", "905004baf42221bc8c4800edfc3564dc2236c2af"}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x4}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 3.747886429s ago: executing program 0 (id=576): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019240)=""/102400, 0x19000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = dup3(r4, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x18) close(r8) eventfd(0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)=ANY=[@ANYRES8=r5, @ANYRES16=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYRES64=r7]) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) accept4(r10, 0x0, 0x0, 0x0) 3.742638157s ago: executing program 3 (id=577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 3.713933828s ago: executing program 4 (id=578): r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x118}, {&(0x7f00000007c0)=""/154, 0x14}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0xa4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x8, 0xef, 0x8, 0x8, 0x5, 0xc5, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x7fde, 0x40, 0x0, 0x4}, {0x8, 0x2, 0x2, 0x2}, {0xa, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000003858"], 0xec}}, 0x8890) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x1}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x3}]}}]}, 0x44}}, 0x20040054) 3.501013542s ago: executing program 3 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/193, 0xc1}], 0x2}, 0x11000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) ioctl$TIOCNOTTY(r6, 0x5422) sched_getaffinity(r3, 0x8, &(0x7f0000000180)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/155) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000000c0)="4b0003000000", 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x5, 0x2000000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e75, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xf7fffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0xfffffff8]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x20000045) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0xf8, 0x190, 0xfeffffff, 0x238, 0xf8, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x6, 0x4}}, @common=@ttl={{0x28}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @broadcast, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'bond_slave_0\x00'}, 0x0, 0x1a8, 0x208, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xb, 0xea, 0x1}}, @common=@inet=@recent1={{0x108}, {0xd8, 0x8, 0x20, 0x0, 'syz1\x00', 0x4, [0xffffffff, 0xff, 0xff, 0xff]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x0, 0x0, [], 0x0, 0x500}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2.220723077s ago: executing program 3 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000f00000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000e2b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.148527806s ago: executing program 4 (id=582): io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) 2.091471131s ago: executing program 1 (id=583): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000e16000002800128009000100766c616e00000000180002800c0002000c0000000a000000060001000000fe0008000500", @ANYRES32=r3, @ANYBLOB], 0x6d}, 0x1, 0x0, 0x0, 0x4001}, 0x44002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) 1.979184843s ago: executing program 1 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x44, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9cc6}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x44}}, 0x0) 1.962715203s ago: executing program 3 (id=585): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) write(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x400042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000003c0)) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4}, 0x0, 0x0) 1.417819943s ago: executing program 1 (id=586): r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x1, 0x8901) r1 = syz_io_uring_setup(0x234, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0xa0}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x2400c841, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f00003fc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/129, 0x81, 0x0, 0x0}, &(0x7f0000000200)=0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x79}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40801) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x12}}, 0x98}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in, 0x0, 0x6c}, 0x0, @in=@loopback}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x34}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd=r0, 0x0, 0x0, 0x39}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.305790655s ago: executing program 1 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)}], 0x1, 0x6) r2 = getpid() ioprio_get$pid(0x1, r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000029c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="04080416c900"], 0x7) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b000100000000090400000103010200090503"], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 696.962147ms ago: executing program 2 (id=588): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000280)=0x9eb9, 0x4) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000d6603bb6b81094cd000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) 618.535707ms ago: executing program 3 (id=589): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000030525bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000080029002c580400140012800900010076657468000000000400028008002900126d"], 0x5c}, 0xfe}, 0x0) 59.225914ms ago: executing program 3 (id=590): io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r0, 0x1, 0x0, 0x0, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @netrom, @remote, @default, @bcast, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000081) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2, 0x33}, 0x0, @in6=@local, 0x0, 0x3, 0x2, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6910480000000000790048000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4) 4.902098ms ago: executing program 4 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) listen(r1, 0x4) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000032c00128009000100626f6e6400000000"], 0x4c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0xfffffffd, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x18, 0x3, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) 0s ago: executing program 2 (id=592): r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x118}, {&(0x7f00000007c0)=""/154, 0x14}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x300}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 and [ 199.649092][ T5872] usb 3-1: USB disconnect, device number 9 [ 199.667722][ T972] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 199.983291][ T29] audit: type=1400 audit(1738525034.636:469): avc: denied { mount } for pid=7360 comm="syz.3.400" name="/" dev="rpc_pipefs" ino=13198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 201.026303][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.049234][ T972] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.050198][ T25] usb 4-1: USB disconnect, device number 11 [ 201.230682][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.569077][ T972] usb 5-1: config 0 descriptor?? [ 201.836226][ T5827] Bluetooth: hci1: unexpected event for opcode 0x2036 [ 202.025394][ T972] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 202.067865][ T972] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input15 [ 202.291103][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.374655][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.430517][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.474933][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.506687][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.550181][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.577782][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.610002][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.413'. [ 202.630833][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.654408][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 202.902492][ T972] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 203.105292][ T5872] usb 5-1: USB disconnect, device number 9 [ 204.262808][ T29] audit: type=1326 audit(1738525038.611:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 205.999654][ T7433] tmpfs: Bad value for 'mpol' [ 206.021731][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 207.319770][ T5872] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.961394][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.972758][ T5872] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.981796][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.991035][ T5872] usb 1-1: config 0 descriptor?? [ 208.504131][ T7462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.597093][ T5872] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 208.616734][ T5872] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input16 [ 208.746293][ T5872] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 208.832887][ C0] Mem-Info: [ 208.836232][ C0] active_anon:6070 inactive_anon:0 isolated_anon:0 [ 208.836232][ C0] active_file:16408 inactive_file:38603 isolated_file:0 [ 208.836232][ C0] unevictable:768 dirty:379 writeback:0 [ 208.836232][ C0] slab_reclaimable:11074 slab_unreclaimable:101147 [ 208.836232][ C0] mapped:30693 shmem:2133 pagetables:932 [ 208.836232][ C0] sec_pagetables:0 bounce:0 [ 208.836232][ C0] kernel_misc_reclaimable:0 [ 208.836232][ C0] free:1317530 free_pcp:2149 free_cma:0 [ 208.881391][ C0] Node 0 active_anon:24420kB inactive_anon:0kB active_file:65632kB inactive_file:154340kB unevictable:1632kB isolated(anon):0kB isolated(file):0kB mapped:122736kB dirty:1516kB writeback:0kB shmem:7016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11236kB pagetables:3668kB sec_pagetables:0kB all_unreclaimable? no [ 208.913710][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 208.943757][ C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.970782][ C0] lowmem_reserve[]: 0 2487 2487 0 0 [ 208.976025][ C0] Node 0 DMA32 free:1353740kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:24420kB inactive_anon:0kB active_file:65632kB inactive_file:154240kB unevictable:1632kB writepending:1516kB present:3129332kB managed:2547472kB mlocked:96kB bounce:0kB free_pcp:1896kB local_pcp:1156kB free_cma:0kB [ 209.006534][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 209.011247][ C0] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 209.037868][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 209.042593][ C0] Node 1 Normal free:3901028kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6988kB local_pcp:1256kB free_cma:0kB [ 209.071802][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 209.076523][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 209.089235][ C0] Node 0 DMA32: 55*4kB (UE) 1192*8kB (UME) 595*16kB (UME) 292*32kB (UME) 267*64kB (UME) 28*128kB (UME) 15*256kB (UME) 28*512kB (UM) 24*1024kB (UME) 8*2048kB (UME) 304*4096kB (UM) = 1353612kB [ 209.108130][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 209.119629][ C0] Node 1 Normal: 165*4kB (UME) 58*8kB (UME) 42*16kB (UME) 189*32kB (UME) 91*64kB (UME) 32*128kB (UME) 17*256kB (UME) 10*512kB (UM) 5*1024kB (UM) 3*2048kB (UME) 943*4096kB (M) = 3901028kB [ 209.138199][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.147739][ C0] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 209.157015][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.166550][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.175834][ C0] 57149 total pagecache pages [ 209.180496][ C0] 0 pages in swap cache [ 209.184632][ C0] Free swap = 124712kB [ 209.188771][ C0] Total swap = 124996kB [ 209.192911][ C0] 2097051 pages RAM [ 209.196709][ C0] 0 pages HighMem/MovableOnly [ 209.201367][ C0] 428525 pages reserved [ 209.205507][ C0] 0 pages cma reserved [ 209.381877][ T29] audit: type=1400 audit(1738525043.344:471): avc: denied { mount } for pid=7467 comm="syz.2.431" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.430305][ T29] audit: type=1400 audit(1738525043.344:472): avc: denied { connect } for pid=7467 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.981897][ T5873] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 210.118723][ T7485] tipc: Started in network mode [ 210.124597][ T7485] tipc: Node identity 1, cluster identity 2 [ 210.130654][ T7485] tipc: Node number set to 1 [ 210.140132][ T7485] tipc: Cannot configure node identity twice [ 210.206299][ T5873] usb 3-1: Invalid ep0 maxpacket: 16 [ 210.384594][ T5819] usb 1-1: USB disconnect, device number 9 [ 210.414605][ T29] audit: type=1400 audit(1738525044.355:473): avc: denied { ioctl } for pid=7475 comm="syz.4.433" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.451125][ T5873] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 210.490932][ T29] audit: type=1400 audit(1738525044.364:474): avc: denied { connect } for pid=7480 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.634580][ T5873] usb 3-1: Invalid ep0 maxpacket: 16 [ 210.648975][ T5873] usb usb3-port1: attempt power cycle [ 210.879791][ T5917] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.029564][ T5873] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 211.075500][ T5873] usb 3-1: Invalid ep0 maxpacket: 16 [ 211.077017][ T5917] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 211.314039][ T7499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.417886][ T5873] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 211.478316][ T5917] usb 4-1: config 0 has no interface number 0 [ 211.484455][ T5917] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid maxpacket 2048, setting to 64 [ 211.504132][ T5917] usb 4-1: New USB device found, idVendor=0af0, idProduct=9000, bcdDevice=7a.9c [ 211.504827][ T5873] usb 3-1: Invalid ep0 maxpacket: 16 [ 211.530089][ T5873] usb usb3-port1: unable to enumerate USB device [ 211.533675][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.590235][ T5917] usb 4-1: Product: syz [ 211.731939][ T5917] usb 4-1: Manufacturer: syz [ 211.742838][ T5917] usb 4-1: SerialNumber: syz [ 211.755425][ T5917] usb 4-1: config 0 descriptor?? [ 211.860749][ T7503] netlink: 277 bytes leftover after parsing attributes in process `syz.0.440'. [ 212.393837][ T29] audit: type=1400 audit(1738525046.244:475): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.775691][ T5917] hso 4-1:0.186: Not our interface [ 212.993636][ T5917] usb 4-1: USB disconnect, device number 12 [ 214.247241][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 214.531152][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.604263][ T5873] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.619343][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.678066][ T5873] usb 2-1: config 0 descriptor?? [ 214.699489][ T29] audit: type=1400 audit(1738525048.396:476): avc: denied { read } for pid=7521 comm="syz.3.446" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.766778][ T7524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.161818][ T5873] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 215.183901][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input17 [ 215.229718][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 215.381542][ T5873] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 215.726734][ T5819] usb 2-1: USB disconnect, device number 5 [ 215.838030][ T7541] pim6reg: entered allmulticast mode [ 216.791051][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 217.235519][ T5870] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.255919][ T29] audit: type=1400 audit(1738525050.790:477): avc: denied { read } for pid=7554 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 217.499960][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 217.597114][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.623233][ T5870] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 217.648953][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.764180][ T5873] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.788762][ T5870] usb 2-1: Product: syz [ 217.813607][ T5870] usb 2-1: Manufacturer: syz [ 217.936607][ T5870] usb 2-1: SerialNumber: syz [ 217.973617][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.617420][ T5873] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 218.628214][ T5870] usb 2-1: config 0 descriptor?? [ 218.650655][ T5870] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 218.660188][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.700621][ T5873] usb 3-1: config 0 descriptor?? [ 218.931989][ T7571] trusted_key: encrypted_key: insufficient parameters specified [ 218.940879][ T7571] trusted_key: encrypted_key: insufficient parameters specified [ 219.220440][ T5873] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 219.261285][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input19 [ 219.479536][ T5873] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 219.784086][ T972] usb 3-1: USB disconnect, device number 14 [ 220.774867][ T5873] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.980285][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.020643][ T5873] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.365218][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.391475][ T5873] usb 5-1: config 0 descriptor?? [ 221.433847][ T5870] usb 2-1: USB disconnect, device number 6 [ 221.569141][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 222.128316][ T5873] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 222.129304][ T7574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.141361][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000D/input/input20 [ 222.172750][ T7574] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 222.182544][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 222.200103][ T7574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.206556][ T7574] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 222.224180][ T7574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.235927][ T7574] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 222.251776][ T5873] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 222.286953][ T7574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.301407][ T7574] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 222.324772][ T7574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.334969][ T7574] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 222.356076][ T7592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.562371][ T5873] usb 5-1: USB disconnect, device number 10 [ 222.888217][ T29] audit: type=1400 audit(1738525056.056:478): avc: denied { setopt } for pid=7606 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.612279][ T5819] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 223.634154][ T7625] block nbd0: Device being setup by another task [ 223.831634][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 223.854580][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 4 [ 223.881425][ T5819] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 223.900880][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.909189][ T5819] usb 4-1: Product: syz [ 223.979794][ T5873] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 224.010709][ T5819] usb 4-1: Manufacturer: syz [ 224.030954][ T5819] usb 4-1: SerialNumber: syz [ 224.088863][ T5819] usb 4-1: config 0 descriptor?? [ 224.128022][ T5819] usb 4-1: no audio or video endpoints found [ 224.142931][ T7635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.152265][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 224.177562][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 224.215554][ T7614] block nbd0: shutting down sockets [ 224.252733][ T5873] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 224.281076][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.387880][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.420457][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.438215][ T5873] usb 5-1: Product: syz [ 224.512127][ T5819] usb 4-1: USB disconnect, device number 13 [ 224.629089][ T5873] usb 5-1: Manufacturer: syz [ 224.652662][ T7638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 224.660612][ T5873] usb 5-1: SerialNumber: syz [ 224.716677][ T5873] usb 5-1: config 0 descriptor?? [ 224.736441][ T5873] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 225.141040][ T7643] trusted_key: encrypted_key: insufficient parameters specified [ 225.150404][ T7643] trusted_key: encrypted_key: insufficient parameters specified [ 225.376254][ T5873] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 225.536531][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 225.731982][ T5873] usb 1-1: config 0 has an invalid interface number: 198 but max is 0 [ 225.742711][ T5873] usb 1-1: config 0 has no interface number 0 [ 225.751569][ T5873] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=ec.e2 [ 225.760644][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.395580][ T5873] usb 1-1: Product: syz [ 226.399797][ T5873] usb 1-1: Manufacturer: syz [ 226.419171][ T5873] usb 1-1: SerialNumber: syz [ 226.517968][ T5873] usb 1-1: config 0 descriptor?? [ 226.787372][ T5917] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.664598][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 227.744345][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.776439][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.793377][ T5917] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 227.802622][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.842632][ T5917] usb 4-1: config 0 descriptor?? [ 227.862899][ T25] usb 5-1: USB disconnect, device number 11 [ 228.177501][ T5873] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 228.358915][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 228.371040][ T5873] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.384280][ T5873] usb 2-1: config 1 interface 0 has no altsetting 0 [ 228.394109][ T5873] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 228.408725][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.417507][ T5873] usb 2-1: Product: syz [ 228.422188][ T5873] usb 2-1: Manufacturer: syz [ 228.427336][ T5873] usb 2-1: SerialNumber: syz [ 228.465766][ T7670] netlink: 96 bytes leftover after parsing attributes in process `syz.4.489'. [ 228.576448][ T5917] ft260 0003:0403:6030.000E: item fetching failed at offset 0/2 [ 228.593462][ T5917] ft260 0003:0403:6030.000E: failed to parse HID [ 228.615552][ T5917] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -22 [ 228.649598][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 229.146458][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 229.171753][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.182487][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.219387][ T5872] usb 1-1: USB disconnect, device number 10 [ 229.235114][ T25] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 229.235142][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.268362][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.394946][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.397467][ T25] usb 3-1: config 0 descriptor?? [ 229.490945][ T7675] 9pnet_fd: Insufficient options for proto=fd [ 229.506832][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.510769][ T25] pxrc 3-1:0.0: Could not find endpoint [ 229.525677][ T29] audit: type=1400 audit(1738525062.249:479): avc: denied { connect } for pid=7674 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.562420][ T5872] usb 4-1: USB disconnect, device number 14 [ 229.590914][ T5873] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input22 [ 229.691093][ T7677] 9pnet_fd: Insufficient options for proto=fd [ 229.700266][ T5873] usb 2-1: USB disconnect, device number 7 [ 229.785834][ T5873] appletouch 2-1:1.0: input: appletouch disconnected [ 229.835768][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 229.842933][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 229.861713][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 229.877634][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 230.026620][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 230.300923][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 230.303104][ T7668] ceph: No mds server is up or the cluster is laggy [ 230.321244][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 230.413394][ T5873] usb 3-1: USB disconnect, device number 15 [ 230.548404][ T7694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.493'. [ 230.588914][ T7695] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.492'. [ 230.616724][ T7695] openvswitch: netlink: Flow actions attr not present in new flow. [ 230.674423][ T7699] netlink: 'syz.1.494': attribute type 21 has an invalid length. [ 230.683992][ T7699] netlink: 156 bytes leftover after parsing attributes in process `syz.1.494'. [ 230.715757][ T7699] netlink: 'syz.1.494': attribute type 21 has an invalid length. [ 230.796586][ T7699] netlink: 156 bytes leftover after parsing attributes in process `syz.1.494'. [ 230.926855][ T29] audit: type=1400 audit(1738525063.540:480): avc: denied { setattr } for pid=7700 comm="syz.4.495" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 231.113363][ T29] audit: type=1400 audit(1738525063.558:481): avc: denied { getopt } for pid=7700 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.529030][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 231.807035][ T7718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.018167][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 232.613898][ T5873] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 232.738218][ T7721] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 233.030648][ T5873] usb 4-1: device descriptor read/64, error -71 [ 233.086546][ T29] audit: type=1400 audit(1738525065.607:482): avc: denied { create } for pid=7729 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 233.287498][ T5873] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 233.297921][ T5917] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 233.426290][ T5873] usb 4-1: device descriptor read/64, error -71 [ 233.522410][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 233.532007][ T5917] usb 1-1: config 0 has an invalid interface number: 198 but max is 0 [ 233.544260][ T5873] usb usb4-port1: attempt power cycle [ 233.558327][ T5917] usb 1-1: config 0 has no interface number 0 [ 233.569292][ T5917] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=ec.e2 [ 233.629306][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.637417][ T5917] usb 1-1: Product: syz [ 233.652001][ T5917] usb 1-1: Manufacturer: syz [ 233.661264][ T5917] usb 1-1: SerialNumber: syz [ 233.670874][ T7740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 233.677419][ T7740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 233.687851][ T5917] usb 1-1: config 0 descriptor?? [ 233.698253][ T7740] vhci_hcd vhci_hcd.0: Device attached [ 233.751589][ T29] audit: type=1400 audit(1738525066.224:483): avc: denied { ioctl } for pid=7745 comm="syz.1.509" path="socket:[15852]" dev="sockfs" ino=15852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 233.811874][ T29] audit: type=1400 audit(1738525066.224:484): avc: denied { bind } for pid=7745 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 233.885882][ T972] vhci_hcd: vhci_device speed not set [ 233.918032][ T5873] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 233.925799][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 233.950695][ T5873] usb 4-1: device descriptor read/8, error -71 [ 233.950717][ T972] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 234.891133][ T5873] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 235.051824][ T5873] usb 4-1: device descriptor read/8, error -71 [ 235.054179][ T7743] vhci_hcd: connection reset by peer [ 235.079019][ T35] vhci_hcd: stop threads [ 235.774563][ T5873] usb usb4-port1: unable to enumerate USB device [ 235.842638][ T35] vhci_hcd: release socket [ 235.866338][ T35] vhci_hcd: disconnect device [ 235.973005][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.514'. [ 235.993176][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.514'. [ 236.351285][ T5917] usb 1-1: USB disconnect, device number 11 [ 237.490659][ T7779] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 237.953042][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 238.003092][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 238.611644][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 238.638577][ T5917] usb 1-1: config 0 has an invalid interface number: 198 but max is 0 [ 238.669814][ T5917] usb 1-1: config 0 has no interface number 0 [ 238.693786][ T5917] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=ec.e2 [ 238.705678][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.714262][ T5917] usb 1-1: Product: syz [ 238.721413][ T5917] usb 1-1: Manufacturer: syz [ 238.731601][ T5917] usb 1-1: SerialNumber: syz [ 238.748439][ T5917] usb 1-1: config 0 descriptor?? [ 238.883200][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 239.360838][ T29] audit: type=1400 audit(1738525071.462:485): avc: denied { write } for pid=7809 comm="syz.3.527" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 239.520094][ T972] vhci_hcd: vhci_device speed not set [ 239.706127][ T5873] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 239.901629][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 240.250870][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.399966][ T5873] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 240.681566][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.833672][ T5917] usb 1-1: USB disconnect, device number 12 [ 241.197130][ T5873] usb 2-1: Product: syz [ 241.256399][ T5873] usb 2-1: Manufacturer: syz [ 241.273196][ T5873] usb 2-1: SerialNumber: syz [ 241.317005][ T5873] usb 2-1: config 0 descriptor?? [ 241.326107][ T5873] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.355212][ T7823] ceph: No mds server is up or the cluster is laggy [ 241.842170][ T7846] trusted_key: encrypted_key: insufficient parameters specified [ 241.881880][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 241.897943][ T7846] trusted_key: encrypted_key: insufficient parameters specified [ 241.911064][ T7845] netlink: 'syz.2.538': attribute type 10 has an invalid length. [ 241.922657][ T7845] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.930550][ T7845] bond0: (slave team0): Enslaving as an active interface with an up link [ 241.948851][ T7845] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 242.149828][ T5873] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.326879][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.340657][ T5873] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.350009][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.451776][ T5873] usb 1-1: config 0 descriptor?? [ 242.969765][ T5873] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 243.190104][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input24 [ 243.346767][ T5873] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 243.353228][ T29] audit: type=1400 audit(1738525075.195:486): avc: denied { write } for pid=7862 comm="syz.2.544" path="socket:[16123]" dev="sockfs" ino=16123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.577857][ T29] audit: type=1326 audit(1738525075.401:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 243.610985][ T5873] usb 1-1: USB disconnect, device number 13 [ 243.619245][ T29] audit: type=1326 audit(1738525075.401:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 243.646916][ T29] audit: type=1326 audit(1738525075.401:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 243.675620][ T29] audit: type=1326 audit(1738525075.401:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 243.699757][ T29] audit: type=1326 audit(1738525075.401:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 243.723617][ T29] audit: type=1326 audit(1738525075.401:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 243.752844][ T29] audit: type=1326 audit(1738525075.401:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 243.776382][ T29] audit: type=1326 audit(1738525075.401:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 244.067363][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 244.255797][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 244.262151][ T5870] usb 2-1: USB disconnect, device number 8 [ 244.269779][ T25] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 244.298767][ T25] usb 3-1: config 0 has no interface number 0 [ 244.338724][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=ec.e2 [ 244.355225][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.364321][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.3.549'. [ 244.381519][ T25] usb 3-1: Product: syz [ 244.387176][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.3.549'. [ 244.399656][ T25] usb 3-1: Manufacturer: syz [ 244.404278][ T25] usb 3-1: SerialNumber: syz [ 244.421926][ T25] usb 3-1: config 0 descriptor?? [ 244.512386][ T972] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 244.786640][ T972] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.058182][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.100747][ T972] usb 5-1: Product: syz [ 245.105044][ T972] usb 5-1: Manufacturer: syz [ 245.109672][ T972] usb 5-1: SerialNumber: syz [ 245.263790][ T972] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 245.346417][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 245.879776][ T5917] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.037685][ T7892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7892 comm=syz.3.554 [ 246.062532][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 246.088800][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.115117][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 246.498044][ T25] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 246.519640][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.530631][ T25] usb 1-1: Product: syz [ 246.538599][ T25] usb 1-1: Manufacturer: syz [ 246.560749][ T25] usb 1-1: SerialNumber: syz [ 246.573090][ T25] usb 1-1: config 0 descriptor?? [ 246.762509][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 246.814511][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 246.814526][ T29] audit: type=1400 audit(1738525078.441:556): avc: denied { write } for pid=7872 comm="syz.4.548" path="socket:[16199]" dev="sockfs" ino=16199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 246.842763][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 246.872020][ T29] audit: type=1400 audit(1738525078.441:557): avc: denied { nlmsg_write } for pid=7872 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 247.023918][ T5819] usb 3-1: USB disconnect, device number 16 [ 247.133132][ T7906] trusted_key: encrypted_key: insufficient parameters specified [ 247.143484][ T7906] trusted_key: encrypted_key: insufficient parameters specified [ 247.531988][ T5917] usb 5-1: Service connection timeout for: 256 [ 247.538301][ T5917] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 247.796086][ T7913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.972758][ T5870] usb 5-1: USB disconnect, device number 12 [ 248.001437][ T5917] ath9k_htc: Failed to initialize the device [ 248.008416][ T5870] usb 5-1: ath9k_htc: USB layer deinitialized [ 248.085464][ T29] audit: type=1400 audit(1738525079.629:558): avc: denied { map } for pid=7916 comm="syz.4.563" path="socket:[15296]" dev="sockfs" ino=15296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.229284][ T7914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7914 comm=syz.3.562 [ 248.288433][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 248.528163][ T29] audit: type=1400 audit(1738525079.629:559): avc: denied { ioctl } for pid=7916 comm="syz.4.563" path="socket:[15295]" dev="sockfs" ino=15295 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.885536][ T7940] netlink: 72 bytes leftover after parsing attributes in process `syz.3.568'. [ 251.439760][ T29] audit: type=1400 audit(1738525082.762:560): avc: denied { read } for pid=7942 comm="syz.1.569" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 251.464921][ T29] audit: type=1400 audit(1738525082.762:561): avc: denied { open } for pid=7942 comm="syz.1.569" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 251.510008][ T29] audit: type=1400 audit(1738525082.818:562): avc: denied { ioctl } for pid=7942 comm="syz.1.569" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 252.853234][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 252.920176][ T29] audit: type=1400 audit(1738525084.137:563): avc: denied { accept } for pid=7957 comm="syz.1.574" lport=49548 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.018373][ T29] audit: type=1400 audit(1738525084.137:564): avc: denied { read } for pid=7957 comm="syz.1.574" lport=49548 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 253.060131][ T7961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 253.172954][ T29] audit: type=1400 audit(1738525084.184:565): avc: denied { setopt } for pid=7957 comm="syz.1.574" lport=49548 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 253.175292][ T25] usb 1-1: USB disconnect, device number 14 [ 253.419082][ T29] audit: type=1400 audit(1738525084.614:566): avc: denied { getopt } for pid=7964 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.996872][ T7967] block nbd0: shutting down sockets [ 255.186017][ T7988] tipc: Started in network mode [ 255.191131][ T7988] tipc: Node identity 1, cluster identity 2 [ 255.197353][ T7988] tipc: Node number set to 1 [ 255.203969][ T7988] tipc: Cannot configure node identity twice [ 255.418349][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 255.604271][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 255.614491][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.628839][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.639253][ T5904] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 255.689961][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.703049][ T5904] usb 5-1: config 0 descriptor?? [ 256.126498][ T5904] pantherlord 0003:0F30:0111.0010: unknown main item tag 0x0 [ 256.137599][ T5904] pantherlord 0003:0F30:0111.0010: unknown main item tag 0x0 [ 256.164782][ T5904] pantherlord 0003:0F30:0111.0010: unknown main item tag 0x0 [ 256.177061][ T5904] pantherlord 0003:0F30:0111.0010: unknown main item tag 0x0 [ 256.186918][ T5904] pantherlord 0003:0F30:0111.0010: unknown main item tag 0x0 [ 256.205087][ T5904] pantherlord 0003:0F30:0111.0010: hidraw0: USB HID v0.03 Device [HID 0f30:0111] on usb-dummy_hcd.4-1/input0 [ 256.282742][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 256.311437][ T29] audit: type=1326 audit(1738525087.308:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7984 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91058cda9 code=0x7fc00000 [ 256.361060][ T5904] pantherlord 0003:0F30:0111.0010: no output reports found [ 256.429733][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 256.435331][ T5904] usb 5-1: USB disconnect, device number 13 [ 256.475366][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 256.840985][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.868413][ T25] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 256.912883][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.960062][ T25] usb 2-1: Product: syz [ 256.990849][ T25] usb 2-1: Manufacturer: syz [ 256.995495][ T25] usb 2-1: SerialNumber: syz [ 257.019892][ T25] usb 2-1: config 0 descriptor?? [ 257.061317][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 257.155109][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'. [ 257.469400][ T29] audit: type=1400 audit(1738525088.375:568): avc: denied { getopt } for pid=8003 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.527620][ T8016] trusted_key: encrypted_key: insufficient parameters specified [ 257.541927][ T8016] trusted_key: encrypted_key: insufficient parameters specified [ 257.550843][ T8016] ================================================================== [ 257.558909][ T8016] BUG: KASAN: slab-use-after-free in key_put+0x277/0x2a0 [ 257.565931][ T8016] Read of size 8 at addr ffff88803520cb78 by task syz.1.587/8016 [ 257.573666][ T8016] [ 257.575993][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.1.587 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 257.576014][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 257.576024][ T8016] Call Trace: [ 257.576029][ T8016] [ 257.576038][ T8016] dump_stack_lvl+0x116/0x1f0 [ 257.576060][ T8016] print_report+0xc3/0x620 [ 257.576079][ T8016] ? __virt_addr_valid+0x5e/0x590 [ 257.576095][ T8016] ? __phys_addr+0xc6/0x150 [ 257.576112][ T8016] kasan_report+0xd9/0x110 [ 257.576129][ T8016] ? key_put+0x277/0x2a0 [ 257.576150][ T8016] ? key_put+0x277/0x2a0 [ 257.576170][ T8016] key_put+0x277/0x2a0 [ 257.576189][ T8016] __key_create_or_update+0x92b/0xe10 [ 257.576212][ T8016] ? __pfx___key_create_or_update+0x10/0x10 [ 257.576235][ T8016] ? lookup_user_key+0x2ca/0x12f0 [ 257.576260][ T8016] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 257.576282][ T8016] key_create_or_update+0x42/0x60 [ 257.576303][ T8016] __do_sys_add_key+0x29c/0x460 [ 257.576318][ T8016] ? __pfx___do_sys_add_key+0x10/0x10 [ 257.576336][ T8016] do_syscall_64+0xcd/0x250 [ 257.576353][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.576373][ T8016] RIP: 0033:0x7f5fd398cda9 [ 257.576390][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.576407][ T8016] RSP: 002b:00007f5fd4870038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 257.576422][ T8016] RAX: ffffffffffffffda RBX: 00007f5fd3ba6160 RCX: 00007f5fd398cda9 [ 257.576433][ T8016] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 257.576444][ T8016] RBP: 00007f5fd3a0e2a0 R08: fffffffffffffffe R09: 0000000000000000 [ 257.576455][ T8016] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000000 [ 257.576466][ T8016] R13: 0000000000000000 R14: 00007f5fd3ba6160 R15: 00007ffedcd5d358 [ 257.576481][ T8016] [ 257.576487][ T8016] [ 257.763599][ T8016] Allocated by task 8016: [ 257.767906][ T8016] kasan_save_stack+0x33/0x60 [ 257.772572][ T8016] kasan_save_track+0x14/0x30 [ 257.777227][ T8016] __kasan_slab_alloc+0x89/0x90 [ 257.782057][ T8016] kmem_cache_alloc_noprof+0x226/0x3d0 [ 257.787497][ T8016] key_alloc+0x3e3/0x13a0 [ 257.791810][ T8016] __key_create_or_update+0x71f/0xe10 [ 257.797164][ T8016] key_create_or_update+0x42/0x60 [ 257.802171][ T8016] __do_sys_add_key+0x29c/0x460 [ 257.807000][ T8016] do_syscall_64+0xcd/0x250 [ 257.811491][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.817369][ T8016] [ 257.819669][ T8016] Freed by task 5904: [ 257.823624][ T8016] kasan_save_stack+0x33/0x60 [ 257.828278][ T8016] kasan_save_track+0x14/0x30 [ 257.833192][ T8016] kasan_save_free_info+0x3b/0x60 [ 257.838197][ T8016] __kasan_slab_free+0x51/0x70 [ 257.842945][ T8016] kmem_cache_free+0x2e2/0x4d0 [ 257.847691][ T8016] key_gc_unused_keys.constprop.0+0x134/0x480 [ 257.853757][ T8016] key_garbage_collector+0x432/0x990 [ 257.859026][ T8016] process_one_work+0x9c5/0x1ba0 [ 257.863949][ T8016] worker_thread+0x6c8/0xf00 [ 257.868536][ T8016] kthread+0x3af/0x750 [ 257.872585][ T8016] ret_from_fork+0x45/0x80 [ 257.876998][ T8016] ret_from_fork_asm+0x1a/0x30 [ 257.881745][ T8016] [ 257.884046][ T8016] The buggy address belongs to the object at ffff88803520ca80 [ 257.884046][ T8016] which belongs to the cache key_jar of size 336 [ 257.897730][ T8016] The buggy address is located 248 bytes inside of [ 257.897730][ T8016] freed 336-byte region [ffff88803520ca80, ffff88803520cbd0) [ 257.911536][ T8016] [ 257.913840][ T8016] The buggy address belongs to the physical page: [ 257.920235][ T8016] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803520ddc0 pfn:0x3520c [ 257.930276][ T8016] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 257.938751][ T8016] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 257.946279][ T8016] page_type: f5(slab) [ 257.950245][ T8016] raw: 00fff00000000040 ffff88814040a140 dead000000000122 0000000000000000 [ 257.958813][ T8016] raw: ffff88803520ddc0 000000008012000f 00000000f5000000 0000000000000000 [ 257.967398][ T8016] head: 00fff00000000040 ffff88814040a140 dead000000000122 0000000000000000 [ 257.976051][ T8016] head: ffff88803520ddc0 000000008012000f 00000000f5000000 0000000000000000 [ 257.984700][ T8016] head: 00fff00000000001 ffffea0000d48301 ffffffffffffffff 0000000000000000 [ 257.993348][ T8016] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 258.001992][ T8016] page dumped because: kasan: bad access detected [ 258.008387][ T8016] page_owner tracks the page as allocated [ 258.014077][ T8016] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6486, tgid 6485 (syz.0.166), ts 108749462695, free_ts 107627571356 [ 258.035589][ T8016] post_alloc_hook+0x181/0x1b0 [ 258.040345][ T8016] get_page_from_freelist+0xfce/0x2f80 [ 258.045783][ T8016] __alloc_frozen_pages_noprof+0x221/0x2470 [ 258.051659][ T8016] alloc_pages_mpol+0x1fc/0x540 [ 258.056494][ T8016] new_slab+0x23d/0x330 [ 258.060637][ T8016] ___slab_alloc+0xc5d/0x1720 [ 258.065300][ T8016] __slab_alloc.constprop.0+0x56/0xb0 [ 258.070661][ T8016] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 258.076013][ T8016] key_alloc+0x3e3/0x13a0 [ 258.080327][ T8016] request_key_and_link+0x75f/0x1360 [ 258.085595][ T8016] __do_sys_request_key+0x23b/0x3d0 [ 258.090773][ T8016] do_syscall_64+0xcd/0x250 [ 258.095260][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.101138][ T8016] page last free pid 6468 tgid 6453 stack trace: [ 258.107443][ T8016] free_frozen_pages+0x6db/0xfb0 [ 258.112361][ T8016] vfree+0x174/0x950 [ 258.116241][ T8016] snd_dma_free_pages+0x51/0x70 [ 258.121071][ T8016] snd_pcm_lib_free_pages+0x172/0x390 [ 258.126422][ T8016] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 258.132651][ T8016] snd_pcm_release_substream+0x5b/0x70 [ 258.138090][ T8016] snd_pcm_oss_release+0x135/0x310 [ 258.143189][ T8016] __fput+0x3ff/0xb70 [ 258.147155][ T8016] task_work_run+0x14e/0x250 [ 258.151731][ T8016] get_signal+0x1d3/0x26c0 [ 258.156136][ T8016] arch_do_signal_or_restart+0x90/0x7e0 [ 258.161671][ T8016] syscall_exit_to_user_mode+0x150/0x2a0 [ 258.167284][ T8016] do_syscall_64+0xda/0x250 [ 258.171770][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.177659][ T8016] [ 258.179965][ T8016] Memory state around the buggy address: [ 258.185574][ T8016] ffff88803520ca00: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.193624][ T8016] ffff88803520ca80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.201666][ T8016] >ffff88803520cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.209723][ T8016] ^ [ 258.217679][ T8016] ffff88803520cb80: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 258.225723][ T8016] ffff88803520cc00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 258.233776][ T8016] ================================================================== [ 258.367646][ T8016] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.374885][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.1.587 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 258.385099][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 258.395136][ T8016] Call Trace: [ 258.398394][ T8016] [ 258.401304][ T8016] dump_stack_lvl+0x3d/0x1f0 [ 258.405881][ T8016] panic+0x71d/0x800 [ 258.409761][ T8016] ? __pfx_panic+0x10/0x10 [ 258.414155][ T8016] ? irqentry_exit+0x3b/0x90 [ 258.418721][ T8016] ? lockdep_hardirqs_on+0x7c/0x110 [ 258.423915][ T8016] ? preempt_schedule_thunk+0x1a/0x30 [ 258.429295][ T8016] ? preempt_schedule_common+0x44/0xc0 [ 258.434768][ T8016] check_panic_on_warn+0xab/0xb0 [ 258.439692][ T8016] end_report+0x117/0x180 [ 258.444002][ T8016] kasan_report+0xe9/0x110 [ 258.448393][ T8016] ? key_put+0x277/0x2a0 [ 258.452623][ T8016] ? key_put+0x277/0x2a0 [ 258.456846][ T8016] key_put+0x277/0x2a0 [ 258.460896][ T8016] __key_create_or_update+0x92b/0xe10 [ 258.466252][ T8016] ? __pfx___key_create_or_update+0x10/0x10 [ 258.472125][ T8016] ? lookup_user_key+0x2ca/0x12f0 [ 258.477130][ T8016] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 258.483271][ T8016] key_create_or_update+0x42/0x60 [ 258.488279][ T8016] __do_sys_add_key+0x29c/0x460 [ 258.493114][ T8016] ? __pfx___do_sys_add_key+0x10/0x10 [ 258.498465][ T8016] do_syscall_64+0xcd/0x250 [ 258.502954][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.508860][ T8016] RIP: 0033:0x7f5fd398cda9 [ 258.513266][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.532858][ T8016] RSP: 002b:00007f5fd4870038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 258.541249][ T8016] RAX: ffffffffffffffda RBX: 00007f5fd3ba6160 RCX: 00007f5fd398cda9 [ 258.549215][ T8016] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 258.557163][ T8016] RBP: 00007f5fd3a0e2a0 R08: fffffffffffffffe R09: 0000000000000000 [ 258.565107][ T8016] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000000 [ 258.573053][ T8016] R13: 0000000000000000 R14: 00007f5fd3ba6160 R15: 00007ffedcd5d358 [ 258.581005][ T8016] [ 258.584234][ T8016] Kernel Offset: disabled [ 258.588538][ T8016] Rebooting in 86400 seconds..