last executing test programs: 8m35.884944541s ago: executing program 32 (id=118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="85000000080000007600000000000000270000000000000095000000000000008796f32e8f85d735d047a9414961e3b176c2e0f3fe61d16cbe73a05329f1aec7d7ff37e190c481c9727f532ff99f59a42d192eb233084e7ac96b3fc37457916943cd580e8b156888b7d73f0647eee7bb3fdeb805286004f2f7"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10400, 0x0) vmsplice(r5, &(0x7f00000013c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_emit_ethernet(0xa2, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000714b3d559cf09500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) nanosleep(&(0x7f0000000080)={0xfffffffffffffff7}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r9 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r8, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r9, &(0x7f00000006c0)={0x18, 0x0, r10, {0x9}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r11 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x22812, r11, 0x0) r12 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r12, &(0x7f0000000140)='asymmetric\x00', 0x0) r13 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x36, &(0x7f0000001d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x328, 0x208, 0x328, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'macvtap0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'nicvf0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05000000c731bd3bdd401fce", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f00000013c0)=r0}, 0x20) 8m28.268469372s ago: executing program 1 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001b0000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRES16=r7, @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x7fffffff}, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="c448d3fce812efab6f7ef5fdbe948ae77b599c7c4aba97bb96", 0x19) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = dup(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000580)='./file1\x00') ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b00"]) 8m26.88110342s ago: executing program 1 (id=146): fsopen(&(0x7f0000000240)='affs\x00', 0x1) 8m26.781839566s ago: executing program 1 (id=147): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x9, 0xf3, &(0x7f0000000140)=""/243, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/1, 0x10}, 0x40002100) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000000000c0500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000e80000000c0000000c00000009000000000000000000000c00"/45], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000380)=0x80000001) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x14e) syslog(0x3, &(0x7f0000001f00)=""/4096, 0x1000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0xff, @mcast1, 0x10000}}, 0x0, 0x0, 0xa, 0x0, "2bc89862b16172bcf9989b48571e8d672c18a41c7ca7b1758a79871d3a93846d80e003f1b4b87461b53862e0673d88a69061a983269aec938449b36aaf50408c4231ec1c10e7575978285f227da089d1"}, 0xd8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m25.825086214s ago: executing program 0 (id=150): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[], 0xfd85) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x0, 0x0, 0x0, 0x2}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000280)={'batadv_slave_0\x00', 0x1000}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x5, 0x4) r9 = creat(&(0x7f0000000080)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x18, 0x0, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='f2fs_truncate_partial_nodes\x00', r10}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='f2fs_truncate_partial_nodes\x00', &(0x7f00000003c0)='./file0\x00', r7) 8m25.660941351s ago: executing program 1 (id=151): socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x90000) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@host}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) socket$kcm(0x10, 0x2, 0x0) 8m25.413315859s ago: executing program 33 (id=153): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @private=0xa010100}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100200008"], 0x0) 8m24.783392804s ago: executing program 0 (id=156): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x3ff, 0x0) read$msr(r0, &(0x7f0000000040)=""/108, 0x6c) r1 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x28, 0x0, 0xfffffffffffffffe, 0x20000000) 8m24.584319967s ago: executing program 0 (id=157): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffeffffffff, 0x2, &(0x7f0000000100)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$alg(r0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80400) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r4, 0x3) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000dbe87d3b550056d100fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaffffffff86dd609796460014060000000000000000000000000000000000823c00000000000000009c9b000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\x00\x00\x00'], 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000003c0)={0x2, @sliced={0x3ff, [0x1, 0x5, 0x8, 0x4, 0xc47, 0x7, 0xd, 0x9, 0x3, 0x5, 0x8, 0x75, 0x7fff, 0xe, 0xf, 0x8, 0x1, 0x1, 0x8, 0x7, 0x3a16, 0x3, 0x245, 0x6, 0x9, 0x9, 0x5, 0x40, 0xffff, 0x44, 0x5, 0x4, 0x8, 0xc7, 0x342b, 0x4, 0x1d, 0x5, 0x7, 0x9, 0x800, 0x8, 0x8000, 0x96, 0x10, 0x1, 0xa, 0xd], 0x9}}) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7", 0x18}, {0x0}], 0x2, 0x0, 0x0, 0xc044}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x8080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000206010800000000000000000f0000020900020073797a310000002005000400030000000c0007800500157ee4000000050005000a000000050001000600000014000300686173683a69702c706f72742c69b727b4f2b1b052394bd0a67000"], 0x58}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYRES16=r6], 0xffdd) 8m23.633113929s ago: executing program 0 (id=158): socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x90000) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@host}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) socket$kcm(0x10, 0x2, 0x0) 8m22.764398043s ago: executing program 0 (id=160): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200200, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f00000000c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto$unix(r4, &(0x7f0000000100)="f7e210", 0x3, 0x4001, 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x2022, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="163c8f3f8a5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r9 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14) 8m22.320971015s ago: executing program 0 (id=161): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000071300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 8m21.888994015s ago: executing program 34 (id=161): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000071300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 8m21.598755659s ago: executing program 1 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000"], 0xcdc}}, 0x0) (fail_nth: 8) 8m21.289188711s ago: executing program 1 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x3000000, 0x0, 0x0, 0x0) 8m21.168026624s ago: executing program 35 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x3000000, 0x0, 0x0, 0x0) 7m51.231482679s ago: executing program 7 (id=229): socket$kcm(0x29, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x800000, 0x33565348, 0x0, [], [0x0, 0x4]}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='cachefiles_read\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000002c0)={0x2, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x20008000, &(0x7f0000000000)={0x11, 0x1c, r5, 0x1, 0x8, 0x6, @random="6d6eb1f60783"}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_getaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000030601080000000000000000050000050500010007"], 0x30}}, 0x40000) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x81, 0x4) 7m49.494464767s ago: executing program 7 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0x0, 0xee01) r1 = syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r1, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 7m49.39768411s ago: executing program 5 (id=235): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010010000000000000a4800000d060a09ca7888040000000000000000020000000900020073797a3200ffffffffffffffff797a30000000001c00048018000180080001006e6174000c0002800800014000000001140000001100010000000000000000001f6e975b05e344e223cf19d164222d6802bc7a1e4cf72b8bc4495b884f59cb7517e25f3aa7630371b4fe591212678b36c16bcbd7c90d23a180ac6fac3656303c0d54a5d3633349901cc2a45a28fd13ea86debe85561bfd4a216b6caff072c68d5cdb9dabf1cf976463549363835e8d56db4e8a1657b66302cbcbdd477c0a027cf86a1b908b5f00"/254], 0x70}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20011500000011"], 0x0}) 7m48.816231594s ago: executing program 7 (id=236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="408445d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x2, {0xa26, 0x1, "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", 0x6, 0x1, 0x9, 0x0, 0x0, 0xf3, 0x8, 0x1}, r3}}, 0x128) 7m48.617049705s ago: executing program 7 (id=238): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x90000) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@host}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) socket$kcm(0x10, 0x2, 0x0) 7m45.790052138s ago: executing program 7 (id=242): ioperm(0x105, 0x7, 0x100000001) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffe, 0x34324152, 0x0, 0xb, [{}, {}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048840) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @empty, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000300)) 7m45.696434347s ago: executing program 5 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x200}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100"/15, @ANYRES32=r2, @ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ca2bf172d02fc11a58e32f2b25dec1d032fc1aa889df5f151eab5b1b779fdbd71f408e94b88e0f9a5f9980b8339c18ae30d8e0a555341860c34dc1c28f5f60befd304c303f5653e916696e8038b6198b54a6dcbc5a967a371be8dd01bfa42982e902e3f239e804948619af5ad5abbb7f9ef958d1c1", @ANYRES8=r5, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$nl_route(0x10, 0x3, 0x0) 7m45.221582576s ago: executing program 7 (id=244): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x88}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x60, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 7m44.795940536s ago: executing program 36 (id=244): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x88}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x60, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 7m44.782302095s ago: executing program 5 (id=247): ioperm(0x105, 0x7, 0x100000001) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffe, 0x34324152, 0x0, 0xb, [{}, {}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048840) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @empty, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000300)) (fail_nth: 2) 7m43.87640332s ago: executing program 5 (id=250): socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x90000) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@host}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) socket$kcm(0x10, 0x2, 0x0) 7m42.906822456s ago: executing program 5 (id=251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001900000326bd7000fbdbdf250a001402fc00ff040000000000000600782a000000000400", @ANYRES32=r4, @ANYBLOB="00001000ff7f0000000016800000010000000000000004622e31771a3a21b3000000ff0faa5b5f59"], 0x3c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000480)={0x28, 0x2, r6, r6, 0x8, 0x9, 0x5}) pselect6(0x40, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x20000000, 0x3, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x101602) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m42.163759143s ago: executing program 5 (id=254): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xd, 0xffffffffffffffff, 0x1}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xd, 0xffffffffffffffff, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, [0x8, 0x800, 0x2, 0x3, 0x4, 0x2, 0x6, 0x427c, 0x4, 0x1, 0x1, 0x6, 0x8, 0x401, 0x200]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x6}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x1000010) (async) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x1000010) syz_open_dev$char_usb(0xc, 0xb4, 0x3) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x3) socket$inet6(0xa, 0xa, 0x6) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c081}, 0x40040) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c081}, 0x40040) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000003c0)={0x7, 0x2, 0x2, {0x14a, 0x3, 0x5, 0x5}}) r4 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000600)={'trans=virtio,', {[{@cache_fscache}, {@access_uid={'access', 0x3d, r4}}], [{@dont_measure}, {@uid_lt={'uid<', r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\\\-(,/\xb4\x94[!@[\'/{'}}, {@euid_gt={'euid>', 0xee01}}]}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0x30, 0x63, {0x63, 0x24, "33a0ad4c38353220d2dc3965faf94d9f90672f8008268b45d8d2fcec2a2ac73cc21308b1149fa941cfa270c2367cd55f347d6c274f86eb5b06026071c2133f4ee0f8b619c3f198e8736da042afa0cd961d27be00742d25cad29ca33db292384ba3"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x0, 0xd, 0xdd, "92022d6cece2540cd0857d7ec9ca7d1399df6c8edde080dcc1f4c6bb052739cafe3ca96eb539fdf656b5f40cf1c6357581cafc2053585ce97395759558c6e3f173e0e6b83454bec31a1b205e8e904fc8e61795c5f31791b337941279c4d21e8a8983adf55be1b57d9b088376afc6f46ceb2852cf2513978cb37ee78c471bd01bc2265025e579a28ab9215da3ca3c44d549b5809776cc09e6ab1ca68fe1a8bb7ed22cdb1d055a8da78a96e7e3ce8c0b1e156841b04b2b997a4314219f684ad7a034db3e5f280ba99c01c498e4c3877a06edcbb6eff2daf4d7c6ad0fadb6"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x25}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x4, 0x48dc, 0x211, 0x8, 0xfffb, 0x5, 0x8, 0x6, 0x9, 0x7}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x50b}, &(0x7f0000000b00)={0x20, 0x83, 0x2}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0x30, 0x63, {0x63, 0x24, "33a0ad4c38353220d2dc3965faf94d9f90672f8008268b45d8d2fcec2a2ac73cc21308b1149fa941cfa270c2367cd55f347d6c274f86eb5b06026071c2133f4ee0f8b619c3f198e8736da042afa0cd961d27be00742d25cad29ca33db292384ba3"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x0, 0xd, 0xdd, "92022d6cece2540cd0857d7ec9ca7d1399df6c8edde080dcc1f4c6bb052739cafe3ca96eb539fdf656b5f40cf1c6357581cafc2053585ce97395759558c6e3f173e0e6b83454bec31a1b205e8e904fc8e61795c5f31791b337941279c4d21e8a8983adf55be1b57d9b088376afc6f46ceb2852cf2513978cb37ee78c471bd01bc2265025e579a28ab9215da3ca3c44d549b5809776cc09e6ab1ca68fe1a8bb7ed22cdb1d055a8da78a96e7e3ce8c0b1e156841b04b2b997a4314219f684ad7a034db3e5f280ba99c01c498e4c3877a06edcbb6eff2daf4d7c6ad0fadb6"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x25}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x4, 0x48dc, 0x211, 0x8, 0xfffb, 0x5, 0x8, 0x6, 0x9, 0x7}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x50b}, &(0x7f0000000b00)={0x20, 0x83, 0x2}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000c40)={'hsr0\x00', @remote}) write$eventfd(r0, &(0x7f0000000c80)=0x4f61, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) write$binfmt_script(r0, &(0x7f0000000cc0)={'#! ', './file1', [{0x20, 'syz\x00'}, {0x20, 'syz2\x00'}, {}, {0x20, '\'\x00'}], 0xa, "f65e2ae9b4684c513f1ae1d3e19098ce9d0d26ecc11a9b98886207eed27dd8f2c80daf4cf95a541498afbecdfdc45cbdd272d0f347a26fd5ca943d6fa804b0ccf0a89f53e14606e6b9ecb3251a2667d4c21f5b4f34c0a7d146693ad2e3f3aaf83d4f03bc4ad0ed5021ab99d3b56447f5456f2bb8610588bc0f46f0abff3169a34ca1de4ca6600054e071748596895edec175b2bb303642f3527ae904652b6793ecc0eb22526797470f1a172eb6cb73992aac9dcaf6b66b69e97d55ed8dc260691b67f87c32955d153e"}, 0xe3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000e40)={0x0, &(0x7f0000000e00)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000e40)={0x0, &(0x7f0000000e00)}, 0x10) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000e80)={[0x0, 0x8000, 0x401, 0x2, 0x8, 0x4, 0x8, 0x7fff, 0x1, 0xfc0c, 0x8, 0x4, 0x9, 0x5, 0x7, 0x100000001], 0x2, 0x80100}) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000e80)={[0x0, 0x8000, 0x401, 0x2, 0x8, 0x4, 0x8, 0x7fff, 0x1, 0xfc0c, 0x8, 0x4, 0x9, 0x5, 0x7, 0x100000001], 0x2, 0x80100}) execve(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001000)={[&(0x7f0000000f80)='\x00', &(0x7f0000000fc0)='+\x7f(Q\'\x00']}, &(0x7f00000010c0)={[&(0x7f0000001040)='*!,[:%}\x00', &(0x7f0000001080)='\'\x00']}) mount$afs(&(0x7f0000001100)=@cell={0x25, 'syz0:', 'syz1', '.readonly'}, &(0x7f0000001140)='./file2\x00', &(0x7f0000001180), 0x0, &(0x7f00000011c0)={[{@flock_openafs}, {@flock_write}, {@flock_openafs}, {}, {@flock_strict}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '\\*{@('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@hash}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '++'}}]}) (async) mount$afs(&(0x7f0000001100)=@cell={0x25, 'syz0:', 'syz1', '.readonly'}, &(0x7f0000001140)='./file2\x00', &(0x7f0000001180), 0x0, &(0x7f00000011c0)={[{@flock_openafs}, {@flock_write}, {@flock_openafs}, {}, {@flock_strict}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '\\*{@('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@hash}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '++'}}]}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000001280)='kvm_fpu\x00', r0, 0x0, 0xd1}, 0x18) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_ext={0x1c, 0x41, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0xa3cbf622a205cb8c, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xe9b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x79}, @alu={0x4, 0x1, 0x9, 0x9, 0xa, 0xfffffffffffffffe, 0xfffffffffffffffc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x649a39a9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001540)='GPL\x00', 0x4, 0x98, &(0x7f0000001580)=""/152, 0x41000, 0x1, '\x00', r5, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bd4, r3, 0x6, &(0x7f0000001640)=[0x1], &(0x7f0000001680)=[{0x4, 0x5, 0x6}, {0x0, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x6, 0xc}, {0x2, 0x2, 0x10, 0x4}, {0x1, 0x5, 0x6, 0xc}, {0x4, 0x1, 0xa, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000017c0)={0x0, r9}, 0x10) 7m41.521615999s ago: executing program 37 (id=254): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xd, 0xffffffffffffffff, 0x1}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xd, 0xffffffffffffffff, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, [0x8, 0x800, 0x2, 0x3, 0x4, 0x2, 0x6, 0x427c, 0x4, 0x1, 0x1, 0x6, 0x8, 0x401, 0x200]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x6}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x1000010) (async) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x1000010) syz_open_dev$char_usb(0xc, 0xb4, 0x3) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x3) socket$inet6(0xa, 0xa, 0x6) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c081}, 0x40040) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c081}, 0x40040) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000003c0)={0x7, 0x2, 0x2, {0x14a, 0x3, 0x5, 0x5}}) r4 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000600)={'trans=virtio,', {[{@cache_fscache}, {@access_uid={'access', 0x3d, r4}}], [{@dont_measure}, {@uid_lt={'uid<', r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\\\-(,/\xb4\x94[!@[\'/{'}}, {@euid_gt={'euid>', 0xee01}}]}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0x30, 0x63, {0x63, 0x24, "33a0ad4c38353220d2dc3965faf94d9f90672f8008268b45d8d2fcec2a2ac73cc21308b1149fa941cfa270c2367cd55f347d6c274f86eb5b06026071c2133f4ee0f8b619c3f198e8736da042afa0cd961d27be00742d25cad29ca33db292384ba3"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x0, 0xd, 0xdd, "92022d6cece2540cd0857d7ec9ca7d1399df6c8edde080dcc1f4c6bb052739cafe3ca96eb539fdf656b5f40cf1c6357581cafc2053585ce97395759558c6e3f173e0e6b83454bec31a1b205e8e904fc8e61795c5f31791b337941279c4d21e8a8983adf55be1b57d9b088376afc6f46ceb2852cf2513978cb37ee78c471bd01bc2265025e579a28ab9215da3ca3c44d549b5809776cc09e6ab1ca68fe1a8bb7ed22cdb1d055a8da78a96e7e3ce8c0b1e156841b04b2b997a4314219f684ad7a034db3e5f280ba99c01c498e4c3877a06edcbb6eff2daf4d7c6ad0fadb6"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x25}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x4, 0x48dc, 0x211, 0x8, 0xfffb, 0x5, 0x8, 0x6, 0x9, 0x7}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x50b}, &(0x7f0000000b00)={0x20, 0x83, 0x2}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0x30, 0x63, {0x63, 0x24, "33a0ad4c38353220d2dc3965faf94d9f90672f8008268b45d8d2fcec2a2ac73cc21308b1149fa941cfa270c2367cd55f347d6c274f86eb5b06026071c2133f4ee0f8b619c3f198e8736da042afa0cd961d27be00742d25cad29ca33db292384ba3"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x0, 0xd, 0xdd, "92022d6cece2540cd0857d7ec9ca7d1399df6c8edde080dcc1f4c6bb052739cafe3ca96eb539fdf656b5f40cf1c6357581cafc2053585ce97395759558c6e3f173e0e6b83454bec31a1b205e8e904fc8e61795c5f31791b337941279c4d21e8a8983adf55be1b57d9b088376afc6f46ceb2852cf2513978cb37ee78c471bd01bc2265025e579a28ab9215da3ca3c44d549b5809776cc09e6ab1ca68fe1a8bb7ed22cdb1d055a8da78a96e7e3ce8c0b1e156841b04b2b997a4314219f684ad7a034db3e5f280ba99c01c498e4c3877a06edcbb6eff2daf4d7c6ad0fadb6"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x25}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x4, 0x48dc, 0x211, 0x8, 0xfffb, 0x5, 0x8, 0x6, 0x9, 0x7}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x50b}, &(0x7f0000000b00)={0x20, 0x83, 0x2}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000c40)={'hsr0\x00', @remote}) write$eventfd(r0, &(0x7f0000000c80)=0x4f61, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) write$binfmt_script(r0, &(0x7f0000000cc0)={'#! ', './file1', [{0x20, 'syz\x00'}, {0x20, 'syz2\x00'}, {}, {0x20, '\'\x00'}], 0xa, "f65e2ae9b4684c513f1ae1d3e19098ce9d0d26ecc11a9b98886207eed27dd8f2c80daf4cf95a541498afbecdfdc45cbdd272d0f347a26fd5ca943d6fa804b0ccf0a89f53e14606e6b9ecb3251a2667d4c21f5b4f34c0a7d146693ad2e3f3aaf83d4f03bc4ad0ed5021ab99d3b56447f5456f2bb8610588bc0f46f0abff3169a34ca1de4ca6600054e071748596895edec175b2bb303642f3527ae904652b6793ecc0eb22526797470f1a172eb6cb73992aac9dcaf6b66b69e97d55ed8dc260691b67f87c32955d153e"}, 0xe3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000e40)={0x0, &(0x7f0000000e00)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000e40)={0x0, &(0x7f0000000e00)}, 0x10) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000e80)={[0x0, 0x8000, 0x401, 0x2, 0x8, 0x4, 0x8, 0x7fff, 0x1, 0xfc0c, 0x8, 0x4, 0x9, 0x5, 0x7, 0x100000001], 0x2, 0x80100}) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000e80)={[0x0, 0x8000, 0x401, 0x2, 0x8, 0x4, 0x8, 0x7fff, 0x1, 0xfc0c, 0x8, 0x4, 0x9, 0x5, 0x7, 0x100000001], 0x2, 0x80100}) execve(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001000)={[&(0x7f0000000f80)='\x00', &(0x7f0000000fc0)='+\x7f(Q\'\x00']}, &(0x7f00000010c0)={[&(0x7f0000001040)='*!,[:%}\x00', &(0x7f0000001080)='\'\x00']}) mount$afs(&(0x7f0000001100)=@cell={0x25, 'syz0:', 'syz1', '.readonly'}, &(0x7f0000001140)='./file2\x00', &(0x7f0000001180), 0x0, &(0x7f00000011c0)={[{@flock_openafs}, {@flock_write}, {@flock_openafs}, {}, {@flock_strict}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '\\*{@('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@hash}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '++'}}]}) (async) mount$afs(&(0x7f0000001100)=@cell={0x25, 'syz0:', 'syz1', '.readonly'}, &(0x7f0000001140)='./file2\x00', &(0x7f0000001180), 0x0, &(0x7f00000011c0)={[{@flock_openafs}, {@flock_write}, {@flock_openafs}, {}, {@flock_strict}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '\\*{@('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@hash}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '++'}}]}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000001280)='kvm_fpu\x00', r0, 0x0, 0xd1}, 0x18) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_ext={0x1c, 0x41, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0xa3cbf622a205cb8c, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xe9b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x79}, @alu={0x4, 0x1, 0x9, 0x9, 0xa, 0xfffffffffffffffe, 0xfffffffffffffffc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x649a39a9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001540)='GPL\x00', 0x4, 0x98, &(0x7f0000001580)=""/152, 0x41000, 0x1, '\x00', r5, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bd4, r3, 0x6, &(0x7f0000001640)=[0x1], &(0x7f0000001680)=[{0x4, 0x5, 0x6}, {0x0, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x6, 0xc}, {0x2, 0x2, 0x10, 0x4}, {0x1, 0x5, 0x6, 0xc}, {0x4, 0x1, 0xa, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000017c0)={0x0, r9}, 0x10) 2m1.305488401s ago: executing program 6 (id=1151): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000003e740)=ANY=[@ANYBLOB="14000000520001000100b3b9f6330000000000"], 0x14}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xf7\xff\xff\xff\xff\xff\xff\xff\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xd4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1dWI\x87[\xff\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000280)={0x18, r3}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r4, r3, 0x1c, 0x3, 0x2}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x56) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x207b490, &(0x7f0000000140)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) 1m57.375872543s ago: executing program 6 (id=1159): sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0xc8811, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="d4570847b1937948b7111dd96d83d8a455529f100357457d4f0f5c91105a3c58131bf10de83dc9ee9d239e5e89e59edb35abbf64c1a92109f8eb01bf689b90055bd51506423f4e456274a778c228aeb5d65e191f1bbb21f0f6dd25edc276f1264580344fed0ee32709a73a160c7578465757b87291dcefc84e58ae39e56fb10d42fd5a34aa4fca42ff53e3c9467d8dc1278a34d406df142092ed6661092ce85816f8e6a119860c3314d0e13f5d50a266f738b71fd531396d768c35bc45c042ee7d69b0b7b90da2aab111667ef006593c99c27c67bc3812dbc9f1994b4830ed54ed1f0bdf4966c1d20bddeb83972b15a86ed5fdef279ce58447059a2ba491d21120dc7e0a1d8cc5eff2deedec41057e178eb95ff00fed1e7095decea9cfd52c0a7438dbfc135c796bfa2bb290ab03f35ea2f2d72b8b0503f4972d6d7c60bf5a80981c4f9826007fdcaad959e1c90cace1664480e98069a86f1c059d112e9da27fa71716f530c2a5bf2296d09e5fcc726a8e5287499f563089bdcb6bf3779298dc9b6f739190f434983651f5f29857cbf62faac8c20bc7ac69334fe99e70c29a1294d0ee89dd6c9cd57845e64b289f84220b6e1fe9e81381cf688fa945a68eed3ebc0e8c1efa403b5a4cde68a24a863c17c9f8ad6d24a09e60d83fcf2beb51e6faac173ac98bb2269d7523f8654417ffe70ab87b477045715ad6aa3db39d3f32760fe25bdc0f3e083232ea6a55da3986cbdbd654ed71a4780f7dc3edb628e14287963c3b5f7f177a35071d7f1169351863516fc96f8cce8781439de06c9f76d6e303518493676b3b135900b89eeac40d994936e3a5a6bbc2f2cf6a2a8ed0ad2f81386f8c327cf9b15f8039df0a950641f7d14728194d7640f4cf7e28e1f89b2485857f5f70866844cead5b29f5d9166dce885bd4343bb1fd2c8437105e8e295c27cb44b10a01590c0fdddbc8abc71f777171adef0a45fe5c92b39e32a9c119c6c9a340be0df8cb3b8b77a2a6b5ba1ed4449674811dfae90889b3fb174e11fb947e15232d57bdeee29db4bc0816a878120e84e0ec40a99fd2b88bdb8502922d7015dff05a94ce7c79852bb7ea9a043fa629afc702300d49ac7fbe67a7b0161d2703348b8d0efb144f2920e341debd821ddc4a12a3f89891f24427a169c741568a06825d4f12d64da0935f2f217798b41f44b90140ac2f4cf08219f42b5d30bdd52e76c74100326babb4d1bc576c944fc5bd3a985f9b209a6a473e4fe3afe0c110b630ac443b75c6e13b20810fd3e5ecf9c6785dabeb758a5ddcfb1ad889b5349606ead8f3fa34ba8ea706de19da6b3a0bc36c4c2e3173a9c929157aedf649699f1f8887a31fccebbd7f28843c91753483541b2b895e642855f856e3951e4853fb70b4090512112e813edaa8edb0a5ddf2c329dde5381e6a5716ec9d5a79d9438ba6de736ac9ad45754bfe7227ada116507c84ffd942a84f4ce115d4fd9029f17e62383ce5fc7048a3f85d2709f2375334f1fce2f8b1af99742869f00f2d2fa37ccaf385dc2eaabe2f67671f06addf403d94bffda4bf5747a8773e9ce3beb7ca2b2e2714dd50eb387e226d834a0696b689b004cbb5b3a5aa7a2878be737f4dd7d65bf976f8deb39ad07265be604ce4f9246225f91cd10afd4725d800eeae4abcd0fd17fdf11257b19db7dcb4b9c34dc3cee03dce7d9ab6f7ac5e12316ce9879abb4432f87faa2b25094963f48582fc8a617067b1a0f0960ddf8cfd5065352d9aba09d37b9b10c7a8f702547fd86f34b62183cc883e41c40f5b0676eb077bda0204bd08dae7e7922b7934f2b449229950b4fc54cd7dafc709d828e9301be8c767e0f3bc420cd10ee3dac383bb8ab8aefe3515d6b959dfe578d256f375751beecbd24a152939b59f913728e47207b8a642b100aadfc685cd7d77ba43ec2298db4f551d851991723cd1cdd42f2837e7fd5df3dbf52945ea9a97b73d8915336023beb9bd3c91d9b1c7f5d49b0cba9c30016bb3216e9d6e9070a5dff813ce85a2a36fffa6bf750cf21eaa91a754f9788663690189fe58a9205e4733b6ac0711e98123f145a87eceb00561ac7d1a699d00384c57f6dc92939f45956d489946a365440d40911dabed15b67748000e0d244b21276032667f66119a2485f31d2c098da4cbbd0c5bbf8373fb53b662e48fc572b6e6c5700a360c5b905b548eaee0aa928b38703c84f7ed4a9a858801ad26c2911d4bbbfc1f46a070fa64db31a619dad30ba96eea1edccc6b0e67b7acffe1261af8e08ffb27fb625820f7a823c63febe0fb32e8907415a973cb42c8752d6a9ac3af2bcbd91d5e5c3ac288b2e2a92cb860d97cbf2b17da25b5333d90156493076ab457afb59f3443894a3c1d3d8b1ce7cbd47d36a7a64bcb194ea00d46181a7b65e3e104bea46434643ac722d04437b72f518e98289edba99559dd6aa03af60da7a00ad4f6105d31745b808a243c8ee9ebd70fa8516cd471473a1608d206fa93885e696f668a397cf713fe9c2001fdbb6e07f124782f5891bdc238db61a7d7f0575072abfadad9593a6ba8b1c89351784d0c722af86989e137809aa5b7833462a71ceca8d7ee24e883577a128652125bef2bd7558f77bb566719f2672fb07f890f892d2d3a725d1d907a696d2d97065c001cfd9e97d60fe2f584992b9bd80f618531af2f3d5df2c5717da36bb2a64853612b8f1f881c2a306b1e9c4c369e33e5675e0f9195e570ba0b2e0594838ad9aef53686a2c4dfd9eae21a826501af92d48e0d857ee0876cd09996c65b50333ab256b439fe89d836d77135079c51f87b1fb58c446a8d52e3c6432c111af4b66d57306659c81088ea0ef96a2f1b97dfd8beeb578b3016eedb65e2ec190e1ba08c9c37f85e102fdc972c9ba2a4a6f11a79831ed8087a22d1d978f005f6ee8869b8c1717a42b75378a98a5f9b1725cc323151b1996468068afd2827ccede23ffe279aa7b45d7dc683db3a9efb9f7b2093765d7c178c09bc0edeccf18c9ee5845cba0c2dda463989faf6d018e330cb52bc5d7913e6e26ea8cde26b7251d828da7b83a1ecbda1ecb3344b3c60f606a419d868da70ade78c3ecebd9b2bcff9cef2507907f011cdf9b072b1dcc872e5b29365b0f4a7d6c581c9bf42320ad9c3a52b419b73d0c0f616f2f630df9bdb5f3b88bbcdfe618180131be8357099f9e8ea457eb1dcf9324c7081687899fa81bc267e87bdd80b88150f6745cb735936876ca6b3c7a492698d32d762baf5b482fa5f26351cf18018fc1cb49411fb6663c474ea29d2a9d4ad703119fe7a6ed2ce6f97287e7660617c4e38c7b1aa1ee5df253c625a1b1d29c042b6d5dbfb44633dd4c0e93992aff81024c408ff00d24d9c98c07c1d4fe5656e3b053914a09b8f2968008c5c4c115d9f8640136254303cc095f95fa335aa858510dad731af19eb0df690ab0edd2bbed96679dad71ccf94da088cf62b34580548027703f92525b41d36297e71d988901e3e086c0d8f425732e0134a9ac2b111a5745c57d9a138b6a4055e7e3ba220a47fef3474e5bba15d3f4711e1d00f2e29f1a1082f4518a08e36451e887963193b08c3e255f22383c7001540b05836b30e912adaef4130ae8edb9c891c398855b218e76eb94332538b7add4b9261e873a6b91785f5ea6c82306dff166d654987361917fe83fcc5be9be3e8644d96d5a7c7bb445fc1b2c0a48814fabc1b3a190674b5f159a5b041dd317c4cf06076d6c9a7572054a09f2b9b74f14289daf5a16dbe6de85ed6128c91a18518f069451dbe8b9f57dab9bcecb4cc53e6612b90f5e644eaed1765d45ad6e6d9f0358fd3a885df1c572cfdb511bbca345628206d89b16f9251be85e1c617b15302bb86397e0763d757c70362dea82688fe32d0a714d598f3131c2a3a4414898fccdfd901dc8fde466ca269bf211b9863e360ea4aab7fdc107ddfd7ede043708804386e0180542a0802745407ceecf6adb2a9a5614cde89d413f49a32733b875281c8cab7ac5815a92fda65ea23ce2feab66606605f49f526cc336d2a5a067c185845941e4142ba82899966fc95bf40570967ec0a6fe130dccbaca48d251adb0f81a170e3dfac6f02e7c8bb5fa6f5602bdc73267c6756e1a374d5e8b19a92ff39662db3ac9f761b2e9e015c51815e5f111d416ee0a67f3adad81f8c64dad193f19048bb46ad1fa786a0c3f36119bd14bb9ad96f2182a19504e15f2cfd885e5862f4d2467053ee1faa978bd2267d56401a548f17d34adba7e9186a2a58931a69bb815dd50552995aa8ceeb4eda5330227f2078eeb72c9b6845c04679868eb5f6a0f0da8c1ea2b0c7de8781d9fc129561a7b283aa488a117269116f81e44a261ed6c0fc4467125d83fd306bce3c6a29df8db000036cd851d805dda3bf218c800d77fc9837158f883b962efc7886cbe93cc137e0bff8387c4b7d64df8b89805dbf5698babf22be7d735bb7baedd43bb3f577989ddaf83892c55771a10beeb2326f3e766fd40eef0d0ff82969bf5534cbffff4fd493fc34d58f322d22fe21101c4248756ad844876d3a7f3999d14c0962e68eaeac83d44d22d498e04673343f4a3a60abfa4f45ea2af9b65982ff5899fd509beccfc8e7dd125c08096e9e5fb71edc590abdd53592d67afec4d227170c5f6e4f1daceecaec968448c033c0a9b0390a12b5af4b973c0cb7c072bdfc8b4158ea4cc9114816cf1242199d0d62a013c4e9646338bd284fede8c93114d2608c71ae1d0891a3583daa51971a5ba51251f3b9ac6d8a02e0fcb69744a74762e13c24e3f1d8e6e3e2956b99b97506e959ca3c7141faa5e2404c62854ef2b9e75a75760a71003e1b0c004752864f51ed600fc306773f635587504e3cf432d68c2fbce21c26a47dcf3358e434dc2b97941a5bb0e35744e4f3d53fee5719cc931f93e150744baf61754726b84a052bde27f666e472672f1f8f6381bd25bc619ba51a", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 1m52.95152293s ago: executing program 6 (id=1165): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000003e740)=ANY=[@ANYBLOB="14000000520001000100b3b9f6330000000000"], 0x14}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xf7\xff\xff\xff\xff\xff\xff\xff\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xd4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1dWI\x87[\xff\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1m36.393257486s ago: executing program 38 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xfffffffffffffee3, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c07e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67d6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0x121}], 0x1}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg1\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 16.964600016s ago: executing program 8 (id=1362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000002440)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (fail_nth: 8) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) timer_create(0x3, 0x0, &(0x7f0000006bc0)) 15.772073537s ago: executing program 8 (id=1364): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000"]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/udplite\x00') read$FUSE(r3, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000400)={0xbc, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='devlink_trap_report\x00', r3, 0x0, 0xe}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000180)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4000000000000}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd320\x00'}, 0x0, 0x60}}]}, 0x184}}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket(0x28, 0x5, 0x0) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000004c0)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setrlimit(0xf, &(0x7f0000000140)={0x6, 0x81}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syslog(0x2, &(0x7f0000000c00)=""/60, 0x3c) 12.770034599s ago: executing program 8 (id=1374): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) r1 = syz_io_uring_setup(0x5632, &(0x7f0000000080)={0x0, 0x270d, 0x200, 0x2, 0x388}, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000140), 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfe09, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x3a, 0xb, 0xfffffffc, 0x0, {0x4}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64}]}]}, 0xd6}}, 0x0) r3 = socket$inet(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x130, 0x1c8, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x8000, 0x6, 0x2}, 0xfffffffffffffceb, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_enter(r1, 0x3419, 0x4ca1, 0x4, &(0x7f0000000180)={[0x8]}, 0x8) setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f0000001300)=0x1, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00004c4000/0x4000)=nil, 0x4000, &(0x7f0000000200)='0') ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1}, 0xc) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0xfdef}], 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000300)="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"}, 0x20) 12.718052133s ago: executing program 4 (id=1375): sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0xc8811, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 10.135715426s ago: executing program 8 (id=1377): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x22, 0xc8, {0xc8, 0x21, "1190c0b38eb8ac9dc5b03300af16b6570a55a8fc21d5893c56c7f66fa695250774fd334bced5056dce50b3ead9e4de5910e962ed5b7c9a5d50fbbfdbd45faa6c6fc4821736b33a03801cf28aad6010cc16ae65984c92b212af173dd6bfb3305bfdeb78e56abf12c92d79520cfcde864b5e0827ec2d2d69986fca3ed9a6c0a5c3be89b1bc344c7903bb101a8def0605d2d3af1acefa2910056724525dd18b92f6a870b36322c0ffc9966e2facc31985e470ffffa263ffe2adade4b9f35f9630590dd4bde38282"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x14, 0x98, "942d1e2207025b2a50742b98dba497db7716bd73e3148cff154c00e544fb3665450220f388b2c5845b69ae4ad581e9639a8e9942e9581eb27be9597ad26d6e84464174dfa6e861d5372479c5530944b7cc3cc3055c6f0bfaf27585a7c70b724850432d6735ab2cdf4e1166095d2599d3397774bd8dbf23df067256a5b860421056b945c7dbdb26cd4d3bfffd01719e21f9767ac1d810cd16"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x12}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x40, 0x8, 0x8, 0x400, 0x6, 0x18a05035, 0x2, 0xf, 0xfe8d, 0x7}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x39}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$printer(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000bc0)={0x40, 0xe, 0xba, {0xba, 0x23, "ee591039dcfac842e10c2e4d5136ac3128ab4cf9277e6993afffea145e0d4ae428a0241a2fc198f975612f4ed2210de422195a281b457c3d01e30d4cc995af4d43b30e2d4e0596ae717f1d59363919d08937bbd41f189365d59e5a6422b2a499352c44830b273b87ef0f5f5c3050ebfc62de83d9d1e1b11bf17cece68c1757c37c07e9c9a5339eae7d917c5b6381b9dce577df18170d4e32c67c9743bcb4566bbf9a84f383fe30674bd0fc4597893d29c139c31c13ee218e"}}, &(0x7f0000000c80)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "0c8c864bcce27370caaaf23dc2d4661f220e37eb775a351d5cea275d2dada4fab4efa3eb2b82342addeea7f18b5c5d1ce0981ec9d0bdd95e08ac7c9f29c74be7b5a5c1f6b36463004cb862b9d01f47b529c42391ba1733dbca31d60a129d205bc4f128822cb5f0601c7f7cc89f6d317094bb0d352e63fac222cca0f203a2f01791a57fc42fc923f821d261ea8953f59d4f10350e7ff0dfd68be2bea1b0880421c481fbd74fbb4cea3d13267fe535f41257e493d0516298ca6b5fabaa5aa1d441111ee9b18c8ac274f6ab6672a662d71d65d7958f07f6c58ca0386a4e9010994314cf378c172b6ede3db5c8e08a3f6fd26d3465"}}}, &(0x7f0000001040)={0x34, &(0x7f0000000dc0)={0x40, 0x1e, 0xd9, "919aea03dd561c80b0ce3c5a4c3ecc6837d5500dfef00e5a6fa51095ba5fdf896d2bf35f885ccabf2b9bb13d62e6e8d9e74050754635aeee969a02064e436322c7dbaae4aecb736dcdde691fd1a2d2c6e7a163cdc89dec02f8b511c755dba12ebc00f7874ca99c22284b8fea2a78ce7c49417b5e1da786e0fad074ced3f072439dca613bbd44c8baa5b5d8b14ee716ff8f1eb8cdd99fcdc4cad0feda3acdf6aaa62349e3ca53d0c22569f994015d3c0c33f46c92596365d50cd9a973f64ef541030bb5a507f033ac4a7ff32c6cccb21b489d3545cb224eaae9"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000f40)={0x20, 0x0, 0x3b, {0x39, "3aef612177066992141a4bb07191487caeca8fb0562b248933547fb568c91bf133f964baa8dbfbce7b638f377b059a112c299fdc051ab1e017"}}, &(0x7f0000000fc0)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000001000)={0x20, 0x0, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, &(0x7f0000000740)={0x40, 0xc, 0x68, {0x8e, 0x4, "ed6ff84173d34ffda0291f0505e43b0f484ee5a3e0c94532a3ee5375b36dcf03c6739caff6b2edfdf86e52993df10ce440ad2703541ba4fe6f06e119372eb697e2aa7874837643a35f29d3b36db37e47b71c301e3cb90ba26b89cd3f2d24aca081da15e9b51d"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003a633a8be82034946"], &(0x7f0000001080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "1f5dcf18"}, @local=@item_012={0x0, 0x2, 0x8, "b268"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x0, 0x1, {0x22, 0x87a}}}}, &(0x7f0000000b40)={0x2c, &(0x7f00000008c0)={0x20, 0x16, 0xa2, "dc365eff789b70a7395fb9f8faa59337b5b7daa02200c8cd892a9d4fdc8f79495f26160d6a418623844a4175962574a654653b5d8bfafa8aba230eeeeeb75f0b925e72e8b0db2c629e168f0f81cd110d88973b146d6d7689c2e81615455dced91e1712e9dc7d65cb6cd9cacbbd22a1ed370dc83091f10d72bb7c500309a467f5001235f06d475c36aec35006c3d6a7f30a07f98d40c1c8bf8472e00dafc9d0068de5"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000009c0)={0x0, 0x8, 0xfe8e, 0x8}, &(0x7f0000000a00)={0x20, 0x1, 0xd7, "dc27f33e09e7c78d48e207c68490161dfb921a10979aae3531ee361c36534660386f226a9174e5e1cdfeb52aab3e9a24c9b457b5e6eb36d9c03dcb8aefdcc2fb04cc9f127f1de8b14d7db031b38ec526a779aec4c2d78fb07f0e64d7a50442865a3ce6228f632598386c85b97411999a3b52b890f5665575723a0b4e1d2169e652d6be907986e51eaa5a00e9d9b2c8d3b2704747e2e715652a99c93fc8dc5331edd084a926e104ca0741c87780b76cd6a64219fad93f025cad7d06e4f6804bcb26b46a2598ff89eda902c40fa9b695c222d022aaff2a35"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$printer(r0, &(0x7f0000001540)={0x14, &(0x7f00000010c0)={0x0, 0x4, 0xae, {0xae, 0x23, "9e2cf679d65c13a9ff49d09962939b6a28bc6a713a97ee2eb4250357d9aecac0059cceb971cc2fadc6da521e359e75907b7d02c09a397c0cd0ade0f05a726f0a0c5557bba82994d5879997226f9c2f01b9050ad6bbf4ade5b7101c3ba31d820ca0ce40ddb113f5c87560cf3bc2540b16c9923d6a03c541ef2f6fe5532a22c66cb3ab3ca6c80b85cba5d015035f1577bb397e779b36637b5481b6251184ef874b78884abf24c07f13128edc0b"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, &(0x7f00000014c0)={0x34, &(0x7f0000001580)={0x0, 0xa, 0xbb, "91c60e4811938e4fd571380d35f0403b146b5bceedb84d9dbd7d2ffa7c295fc20b91b39c7fd79d7d611015b8bac00cc9699ee69b7944a0e6dc2dfae37461f4e4cf2fadd9f24a1c731a32830c6e8de72f46353f5bb279cde35f529c6cf8e4f17dc5e2f639b4b2b6f60cd53b06fe284d7c9db077df6b84d208edf28f94f8d30e4fc378927c91df530655ab9e71abc0594caad80300fedff10c5f29585cbd8c6930305ef6123ecb278706481ce529154c90785a960f43e966b9fdb9a9"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x43}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001340)={0x20, 0x0, 0xbf, {0xbd, "9ac99803abefb3550c3d485b7c3e4f77993240e709b051ae2bc512ffa2bf4f7f37a1a4acd3f3783f357cdba9cd3f3c0f308e978c70d6ab69e5a87765eb9aa70bd897e1c0282881f56b23950ee43dd90d852537faf1dfd6c5fb7641458aa40aa989aba15caf293501e1c9d5468a8d55b0dc4468958a2393ba9436ebaa1315a67d26af096c1735219d9dcdf7ce3d15e7f3ac8cb5ccb5f1aeef489aa32b1a7d8e9c49897a8d86bcce915cd6f96110c043a9001663e0d56db2348f6399111f"}}, &(0x7f0000001440)={0x20, 0x1, 0x1, 0x1c}, &(0x7f0000001480)={0x20, 0x0, 0x1, 0xc}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x40, 0x14, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0}) 9.936307914s ago: executing program 2 (id=1378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="da47fbfe1b0c7c33f7d528000000060601020800000000000000050000050900020073796c537ccb23b70df982eca37a320003d0cb4d4bf900099383b416a670cd7ede10db105ae18ab13f316e3651eeea1d15f0afd8ae428914"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000000000000000100000405000400000000000900020073797a31000000000c0007800800064000003cf10500050002000000040001000600000012000300686173683a6e65742c706b7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x1}, 0x54) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000019080)={@empty, 0x5f, r7}) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f00000190c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f00000320c0)=""/102376, 0x18fe8, 0xd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0074000010000000140012800a00010069706f696200000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40408d4) 9.752660519s ago: executing program 3 (id=1379): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) (fail_nth: 1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002340)=[{&(0x7f00000041c0)=""/178, 0xb2}], 0x1, 0x3, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000240)={0x3, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e22, @empty}}}, 0x108) 9.595221057s ago: executing program 4 (id=1380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0xca, &(0x7f0000000480)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x2f, 0xbc, 0x68, 0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010101, @remote, {[@end, @rr={0x7, 0x2, 0x4b}]}}, @dest_unreach={0x3, 0xa, 0x0, 0x0, 0x8, 0x1, {0x27, 0x4, 0x2, 0x26, 0x5, 0x65, 0x9, 0x5, 0xc, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0x13, 0xa4, [@broadcast, @local, @remote, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xb3, 0x3, 0xe, [{@broadcast}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x10001}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x3d, 0x1, 0xd, [{@loopback, 0x3}]}, @cipso={0x86, 0x4b, 0x1, [{0x5, 0xf, "f24c4e5037af85e2b82d3a706d"}, {0x7, 0x11, "db1ca9aed6dda82f5a45a662dc9aaa"}, {0x7, 0xd, "30d5f642b32b93587be44d"}, {0x2, 0xb, "2f908c8c80ddcb11ff"}, {0x1, 0x2}, {0x5, 0x3, 'G'}, {0x6, 0x8, "fbb681cdd422"}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000000080)=0xffffffffffffff8e) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$sysctl(r6, 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0xec902, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 9.577968518s ago: executing program 9 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000280)={0x18, r2}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r2, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r3, r2, 0x1c, 0x3, 0x2}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x56) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x207b490, &(0x7f0000000140)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) 8.63434331s ago: executing program 9 (id=1382): add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x2008, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x0, 0x1000, 0x500, 0x2}}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 8.380574206s ago: executing program 2 (id=1383): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "f9b00bc2216fa675", "1370de897002ac86cc1376bac1f300d214e7c5e00986c8178ad953ddbdc8a9b4", "222d4a10", "38fba50e3d7e9ad1"}, 0x38) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="c6", 0xfffffd01, 0x8000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$FS_IOC_GETFSMAP(r4, 0x40305839, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000000c0)=0x5, 0x4) 8.341972836s ago: executing program 3 (id=1384): add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @info_reply={0xd}}}}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x2008, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x0, 0x1000, 0x500, 0x2}}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 7.956110861s ago: executing program 4 (id=1385): getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) io_uring_setup(0x1de0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000015c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x6e, 0x1, 0x20000, 0x0, 0x10, 0x0, 0xfffffffd}) 7.158615854s ago: executing program 9 (id=1386): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_io_uring_setup(0xd2, &(0x7f00000005c0)={0x0, 0xfffffffd, 0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000440)=0x0) syz_emit_ethernet(0x86, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x12}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x80000}) r7 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x2, &(0x7f0000000100)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r9, 0xffffffffffffffff, r11) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000000010101000000000000000000000001800001802c0001801400030000000000000000000000ffffe00000000000000000000000010c0002800500010084000000140001800800010000e1ffff070002000a010100140001800800010000000000080002007f000001060003400004000006000340000300000c000280050001002f00000024001700000000080000000000000e3dcb00000000000f2d00000008000000070000000300"/184], 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0xc800) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r12, 0x560a, &(0x7f0000000000)={0x0, 0xfffffffd, 0x14, 0x0, 0x0, 0x0}) sendmmsg$inet6(r8, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x109600, 0x0) 7.133864662s ago: executing program 3 (id=1387): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x20000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xff, 0x7, 0xe, 0x6, 0xa, 0x9, 0x1, 0x3, 0x9, 0x6, 0x5, 0x8, 0x4, 0xc, 0x4, 0x4], 0x1, [0x5, 0x80, 0xe97, 0x3f, 0x2, 0x4, 0x9, 0x1, 0x8, 0x4, 0x1, 0x56e, 0x3e7, 0x1a, 0x0, 0x6], [0x3800, 0x5, 0x48, 0x4, 0xda62, 0x4001, 0x20b0, 0x9, 0x4, 0xe, 0x8, 0x4040, 0x401, 0x7ff, 0xac, 0xe9]}}}}]}, 0x88}}, 0x4048024) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x3, 0x0, 0x4, 0xf8, 0x7, 0x3, 0x5, 0x1, 0x8, 0x8, 0x3, 0x7, 0x8}, 0xe) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 6.823641065s ago: executing program 9 (id=1388): r0 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) close(0x3) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x48, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"]}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x11e, 0x1a, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000015c0)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='team0\x00'}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x43) syz_emit_vhci(&(0x7f00000007c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x9, 0xa}}}}, 0x11) syz_open_dev$evdev(&(0x7f0000000a80), 0x9, 0x400000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 6.368647567s ago: executing program 4 (id=1389): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005ba0000020000000010"], 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 5.826746557s ago: executing program 4 (id=1390): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000024000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) (fail_nth: 8) 5.818874801s ago: executing program 3 (id=1391): sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0xc8811, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 5.397485236s ago: executing program 8 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x110) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r8, &(0x7f0000000200)}, 0x20) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1f) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) 4.608621232s ago: executing program 4 (id=1393): socket$kcm(0x29, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x800000, 0x33565348, 0x0, [], [0x0, 0x4]}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='cachefiles_read\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000002c0)={0x2, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x20008000, &(0x7f0000000000)={0x11, 0x1c, r5, 0x1, 0x8, 0x6, @random="6d6eb1f60783"}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_getaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000500040000000000050001000600000005000500000000000900020073797a32000000000d0003006c6973743a7365740000"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000030601080000000000000000050000050500010007"], 0x30}}, 0x40000) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x81, 0x4) 4.586137963s ago: executing program 9 (id=1394): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x32e9, &(0x7f0000000b80)={0x0, 0x873f, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x3f00, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x0) close(0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0x8, 0x4, 0x0, 0x1e53, 0x4, 0xa, 0x2, 0x3, 0x7a, 0x80, 0xd, 0x0, 0x60742fb4, 0x8, 0x2, 0x23, 0x8, 0xd, '\x00', 0x7f, 0x100000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xea, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) 4.58467015s ago: executing program 2 (id=1395): mkdir(&(0x7f0000000240)='./file0\x00', 0x183) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_cancel(0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x0) 4.421646745s ago: executing program 2 (id=1396): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x121b, 0x2, 0xc, 0x108c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = getpid() syz_pidfd_open(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r6) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000200)={0x3, @bcast={0xa2, 0xa6, 0xa8, 0x2}}) 2.720634177s ago: executing program 2 (id=1397): mkdir(&(0x7f0000000240)='./file0\x00', 0x183) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 4) 2.584241179s ago: executing program 3 (id=1398): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x2, 0xc, 0x108c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = getpid() syz_pidfd_open(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3fd}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x8000000000004, 0xc392}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0xe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000080)=0xffff, 0x4) sendmsg$nl_xfrm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="fc0000000000000000000067c5f363000000000032000000000000000000001a000000ffffffffffff000000000000000000000000000000000000145a50bdf001ca761ff9b5d49b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000d100000028001a0064010102000000000000000000000000640101000000000000000000"], 0x120}}, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r9, 0x800c5012, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x18, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x4}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20044010) 2.414540624s ago: executing program 8 (id=1399): syz_clone3(&(0x7f0000000500)={0x5af7d053956f2913, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r3, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b150000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="891000000000000095", @ANYBLOB="a66b46caaefaae53c518eb112a20f0d953387670f84ac7569a9f2b80d5d1358147785b5f545db4db70f9539391c95c77dacc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0xd511}}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ecffffffffffffff000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000000080002400000000208000640000000020900010073797a30000000000900020073797a32"], 0x94}}, 0x20004801) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfc51}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124000010400050015000300000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 2.288607511s ago: executing program 9 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffee3, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c07e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67d6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0x121}], 0x1}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg1\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 2.288234867s ago: executing program 2 (id=1401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000300)={0x9, 0x2, 0x98, 0xe6, &(0x7f0000000000)=[{}, {}]}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/207}, {&(0x7f0000000380)=""/22}], 0x57) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, &(0x7f00000000c0)=0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0x3b) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x90000) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="782116fcf0eab2ba5b460335a380e13f153a396efd3d7ee1ac4f4a34849f01f9", 0xfffffffffffffca2, r5) keyctl$unlink(0x9, r6, r5) clock_getres(0x5, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0xc) r8 = dup3(r0, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4401) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r9], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x20) 0s ago: executing program 3 (id=1402): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x3}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x800454cf, 0x800000000000000) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fanotify_init(0x54, 0x40000) r4 = eventfd2(0x2, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r4, 0x2, 0x2, r4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000000480), 0x0) syz_emit_ethernet(0x2be, 0x0, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1326 audit(1733725538.520:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7537fed9 code=0x7fc00000 [ 479.015521][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 479.194028][ T7557] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 479.563188][ T29] audit: type=1400 audit(1733725540.110:530): avc: denied { bind } for pid=11589 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 480.152594][ T25] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 480.183741][ T7557] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 480.219426][ T971] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 480.220121][ T7557] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.262593][ T7557] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.270784][ T7557] usb 7-1: Product: syz [ 480.279960][ T7557] usb 7-1: Manufacturer: syz [ 480.285559][ T7557] usb 7-1: SerialNumber: syz [ 480.396002][ T25] usb 9-1: no configurations [ 480.401234][ T25] usb 9-1: can't read configurations, error -22 [ 480.442384][ T971] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 480.454084][T11616] netlink: 'syz.9.1089': attribute type 21 has an invalid length. [ 480.463558][T11616] netlink: 'syz.9.1089': attribute type 1 has an invalid length. [ 480.464020][ T971] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 480.486557][ T971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 480.501603][ T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 480.519739][ T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 480.684250][ T971] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 480.733236][ T25] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 480.771043][ T5864] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 480.846929][ T971] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 480.855190][ T971] usb 5-1: Product: syz [ 480.859501][ T971] usb 5-1: Manufacturer: syz [ 480.887161][ T971] cdc_wdm 5-1:1.0: skipping garbage [ 480.892579][ T971] cdc_wdm 5-1:1.0: skipping garbage [ 481.028747][ T971] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 481.034879][ T971] cdc_wdm 5-1:1.0: Unknown control protocol [ 481.090884][T11604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.100631][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 481.102183][T11604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.114779][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 481.117608][ C1] wdm_int_callback: 1574 callbacks suppressed [ 481.117632][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 481.128029][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.128491][ C1] wdm_int_callback: 1574 callbacks suppressed [ 481.128509][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 481.129501][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 481.139830][ T5864] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.145165][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 481.146909][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 481.189672][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 481.196432][ T971] usb 5-1: USB disconnect, device number 29 [ 481.202510][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 481.202528][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 481.202540][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 481.233605][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.246017][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.252567][ T25] usb 9-1: no configurations [ 481.255594][ T5864] usb 4-1: Product: syz [ 481.259446][ T25] usb 9-1: can't read configurations, error -22 [ 481.270085][ T25] usb usb9-port1: attempt power cycle [ 481.274152][ T5864] usb 4-1: Manufacturer: syz [ 481.280323][ T5864] usb 4-1: SerialNumber: syz [ 481.468551][ T7557] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 481.475343][ T7557] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 481.483175][ T7557] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 481.499649][ T5864] cdc_ether 4-1:1.0: skipping garbage [ 481.505173][ T5864] usb 4-1: bad CDC descriptors [ 481.521035][ T5864] usb 4-1: USB disconnect, device number 15 [ 481.611885][ T25] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 481.665481][ T25] usb 9-1: no configurations [ 481.676970][ T29] audit: type=1400 audit(1733725542.520:531): avc: denied { ioctl } for pid=11584 comm="syz.6.1081" path="socket:[31959]" dev="sockfs" ino=31959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 481.679715][T11585] netlink: 'syz.6.1081': attribute type 5 has an invalid length. [ 481.701927][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.716293][ T25] usb 9-1: can't read configurations, error -22 [ 481.754854][ T7557] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 481.784368][ T7557] cdc_ncm 7-1:1.0 eth17: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 481.807008][ T7557] usb 7-1: USB disconnect, device number 19 [ 481.816088][ T7557] cdc_ncm 7-1:1.0 eth17: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 481.840832][T11620] netlink: 'syz.9.1090': attribute type 2 has an invalid length. [ 481.879929][ T25] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 481.936034][ T25] usb 9-1: no configurations [ 481.941348][ T25] usb 9-1: can't read configurations, error -22 [ 482.017712][ T25] usb usb9-port1: unable to enumerate USB device [ 483.292749][T11629] overlayfs: failed to resolve './file0': -2 [ 483.304339][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1094'. [ 483.316031][T11632] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 483.383343][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.392327][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.054460][T11651] FAULT_INJECTION: forcing a failure. [ 485.054460][T11651] name failslab, interval 1, probability 0, space 0, times 0 [ 485.311175][T11651] CPU: 0 UID: 0 PID: 11651 Comm: syz.9.1102 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 485.322089][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 485.332177][T11651] Call Trace: [ 485.335460][T11651] [ 485.338740][T11651] dump_stack_lvl+0x16c/0x1f0 [ 485.343430][T11651] should_fail_ex+0x497/0x5b0 [ 485.348104][T11651] ? fs_reclaim_acquire+0xae/0x150 [ 485.353228][T11651] should_failslab+0xc2/0x120 [ 485.357919][T11651] __kmalloc_cache_noprof+0x68/0x410 [ 485.363201][T11651] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 485.369006][T11651] ? lockdep_hardirqs_on+0x7c/0x110 [ 485.374209][T11651] __request_module+0x2c6/0x6c0 [ 485.379081][T11651] ? blk_request_module+0x15f/0x1e0 [ 485.384314][T11651] ? __pfx___request_module+0x10/0x10 [ 485.389703][T11651] ? __mutex_unlock_slowpath+0x164/0x690 [ 485.395356][T11651] ? __pfx_ilookup+0x10/0x10 [ 485.399974][T11651] blk_request_module+0x15f/0x1e0 [ 485.405010][T11651] blkdev_get_no_open+0x7a/0xe0 [ 485.409901][T11651] bdev_file_open_by_dev+0x6b/0x210 [ 485.415113][T11651] swsusp_check+0x74/0x420 [ 485.419533][T11651] software_resume+0x6d/0x400 [ 485.424213][T11651] resume_store+0x249/0x460 [ 485.428720][T11651] ? __pfx_resume_store+0x10/0x10 [ 485.433761][T11651] ? __pfx_resume_store+0x10/0x10 [ 485.438783][T11651] kobj_attr_store+0x55/0x80 [ 485.443380][T11651] ? __pfx_kobj_attr_store+0x10/0x10 [ 485.448666][T11651] sysfs_kf_write+0x117/0x170 [ 485.453350][T11651] kernfs_fop_write_iter+0x33d/0x500 [ 485.458638][T11651] ? __pfx_sysfs_kf_write+0x10/0x10 [ 485.463837][T11651] vfs_write+0x5ae/0x1150 [ 485.468167][T11651] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 485.473973][T11651] ? __pfx___mutex_lock+0x10/0x10 [ 485.478996][T11651] ? __pfx_vfs_write+0x10/0x10 [ 485.483773][T11651] ksys_write+0x12b/0x250 [ 485.488100][T11651] ? __pfx_ksys_write+0x10/0x10 [ 485.492955][T11651] do_syscall_64+0xcd/0x250 [ 485.497461][T11651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.503357][T11651] RIP: 0033:0x7fe04a37fed9 [ 485.507847][T11651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.527900][T11651] RSP: 002b:00007fe04b20d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.536315][T11651] RAX: ffffffffffffffda RBX: 00007fe04a545fa0 RCX: 00007fe04a37fed9 [ 485.544280][T11651] RDX: 0000000000000012 RSI: 0000000020000280 RDI: 0000000000000003 [ 485.552245][T11651] RBP: 00007fe04b20d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 485.560215][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.568179][T11651] R13: 0000000000000000 R14: 00007fe04a545fa0 R15: 00007ffdc0ce0c28 [ 485.576182][T11651] [ 485.579222][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.552618][T11667] netlink: 'syz.8.1101': attribute type 21 has an invalid length. [ 487.983544][T11648] ceph: No mds server is up or the cluster is laggy [ 487.993521][ T971] libceph: connect (1)[c::]:6789 error -101 [ 487.999614][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 488.037640][T11667] netlink: 'syz.8.1101': attribute type 1 has an invalid length. [ 489.248830][ T25] libceph: connect (1)[c::]:6789 error -101 [ 489.255005][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 489.270335][T11675] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 489.405219][T11683] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1107'. [ 489.480368][T11685] SELinux: Context system_u:object_r:audisp_var_run_t:s0 is not valid (left unmapped). [ 489.496368][T11685] tipc: Started in network mode [ 489.501505][T11685] tipc: Node identity 56829a4e63ea, cluster identity 4711 [ 489.509508][T11685] tipc: Enabled bearer , priority 0 [ 489.548945][ T29] audit: type=1400 audit(1733725550.320:532): avc: denied { relabelfrom } for pid=11684 comm="syz.4.1108" name="TCP" dev="sockfs" ino=32066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 489.638490][T11685] tipc: Resetting bearer [ 489.678652][ T29] audit: type=1400 audit(1733725550.340:533): avc: denied { relabelto } for pid=11684 comm="syz.4.1108" name="TCP" dev="sockfs" ino=32066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:audisp_var_run_t:s0" [ 489.769528][T11684] tipc: Resetting bearer [ 489.887857][T11695] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 490.100986][T11693] libceph: resolve '0.0' (ret=-3): failed [ 490.311961][ T6700] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 490.471888][ T6700] usb 10-1: Using ep0 maxpacket: 8 [ 490.478326][ T6700] usb 10-1: config 0 has an invalid interface number: 113 but max is 0 [ 490.501625][ T6700] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.545996][ T6700] usb 10-1: config 0 has no interface number 0 [ 490.568113][ T6700] usb 10-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 490.577829][ T6700] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.666233][ T25] tipc: Node number set to 896047694 [ 490.687806][ T6700] usb 10-1: Product: syz [ 491.481554][ T6700] usb 10-1: Manufacturer: syz [ 491.490543][ T6700] usb 10-1: SerialNumber: syz [ 491.510639][ T6700] usb 10-1: config 0 descriptor?? [ 491.530051][ T6700] ttusb_dec_send_command: command bulk message failed: error -22 [ 491.566938][ T6700] ttusb-dec 10-1:0.113: probe with driver ttusb-dec failed with error -22 [ 491.729679][ T6700] usb 10-1: USB disconnect, device number 13 [ 492.739836][T11716] FAULT_INJECTION: forcing a failure. [ 492.739836][T11716] name failslab, interval 1, probability 0, space 0, times 0 [ 492.753113][T11716] CPU: 0 UID: 0 PID: 11716 Comm: syz.9.1117 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 492.763891][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 492.773988][T11716] Call Trace: [ 492.777262][T11716] [ 492.780184][T11716] dump_stack_lvl+0x16c/0x1f0 [ 492.784861][T11716] should_fail_ex+0x497/0x5b0 [ 492.789531][T11716] should_failslab+0xc2/0x120 [ 492.794215][T11716] __kmalloc_noprof+0xcb/0x510 [ 492.798988][T11716] ? kasan_save_track+0x14/0x30 [ 492.803849][T11716] nsim_fib_event_nb+0x448/0xec0 [ 492.808835][T11716] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 492.814479][T11716] ? rcu_is_watching+0x12/0xc0 [ 492.819261][T11716] notifier_call_chain+0xb7/0x410 [ 492.824292][T11716] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 492.829769][T11716] atomic_notifier_call_chain+0x71/0x1c0 [ 492.835401][T11716] call_fib_notifiers+0x33/0x70 [ 492.840242][T11716] fib6_add+0x25ee/0x4b20 [ 492.844571][T11716] ? __pfx_fib6_add+0x10/0x10 [ 492.849236][T11716] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.854607][T11716] ? lock_acquire+0x2f/0xb0 [ 492.859100][T11716] ? ip6_route_add+0x7b/0x1c0 [ 492.863765][T11716] ? ip6_route_add+0x8d/0x1c0 [ 492.868452][T11716] ip6_route_add+0x8d/0x1c0 [ 492.872957][T11716] rt6_add_dflt_router+0x268/0x4b0 [ 492.878081][T11716] ? __pfx_rt6_add_dflt_router+0x10/0x10 [ 492.883706][T11716] ? rt6_get_dflt_router+0x475/0x8a0 [ 492.888990][T11716] ? __ipv6_chk_addr_and_flags+0x2f7/0x730 [ 492.894781][T11716] ? __pfx_rt6_get_dflt_router+0x10/0x10 [ 492.900421][T11716] ndisc_router_discovery+0x9ef/0x3520 [ 492.905876][T11716] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 492.911768][T11716] ? do_csum+0x26f/0x2d0 [ 492.916038][T11716] ndisc_rcv+0x3fa/0x620 [ 492.920267][T11716] icmpv6_rcv+0x1223/0x1990 [ 492.924761][T11716] ? __pfx_icmpv6_rcv+0x10/0x10 [ 492.929597][T11716] ip6_protocol_deliver_rcu+0xf70/0x1510 [ 492.935262][T11716] ip6_input_finish+0x14f/0x2f0 [ 492.940100][T11716] ip6_input+0xa1/0xd0 [ 492.944157][T11716] ip6_mc_input+0x48b/0xfd0 [ 492.948649][T11716] ? __pfx_ip6_mc_input+0x10/0x10 [ 492.953674][T11716] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 492.958882][T11716] ? __pfx_ip6_mc_input+0x10/0x10 [ 492.963896][T11716] ipv6_rcv+0x45a/0x680 [ 492.968057][T11716] ? __pfx_ipv6_rcv+0x10/0x10 [ 492.972731][T11716] __netif_receive_skb_one_core+0x12e/0x1e0 [ 492.978643][T11716] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 492.985052][T11716] ? rcu_is_watching+0x12/0xc0 [ 492.989805][T11716] ? ktime_get_with_offset+0x273/0x3a0 [ 492.995253][T11716] ? lockdep_hardirqs_on+0x7c/0x110 [ 493.000489][T11716] ? netif_receive_skb+0x109/0x7b0 [ 493.005593][T11716] __netif_receive_skb+0x1d/0x160 [ 493.010615][T11716] netif_receive_skb+0x13f/0x7b0 [ 493.015540][T11716] ? __pfx_netif_receive_skb+0x10/0x10 [ 493.020988][T11716] ? __pfx___lock_acquire+0x10/0x10 [ 493.026177][T11716] tun_rx_batched.isra.0+0x3eb/0x730 [ 493.031455][T11716] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 493.037254][T11716] ? tun_get_user+0x13e6/0x3e40 [ 493.042105][T11716] ? lock_acquire+0x2f/0xb0 [ 493.046612][T11716] ? tun_get_user+0x13e6/0x3e40 [ 493.051455][T11716] tun_get_user+0x2a16/0x3e40 [ 493.056131][T11716] ? find_held_lock+0x2d/0x110 [ 493.060892][T11716] ? __pfx_tun_get_user+0x10/0x10 [ 493.065904][T11716] ? find_held_lock+0x2d/0x110 [ 493.070658][T11716] ? __pfx_lock_release+0x10/0x10 [ 493.075700][T11716] tun_chr_write_iter+0xdc/0x210 [ 493.080661][T11716] vfs_write+0x5ae/0x1150 [ 493.084983][T11716] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 493.090526][T11716] ? __pfx_vfs_write+0x10/0x10 [ 493.095322][T11716] ? __fget_files+0x40/0x3a0 [ 493.099996][T11716] ksys_write+0x12b/0x250 [ 493.104398][T11716] ? __pfx_ksys_write+0x10/0x10 [ 493.109242][T11716] do_syscall_64+0xcd/0x250 [ 493.114008][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.119910][T11716] RIP: 0033:0x7fe04a37e98f [ 493.124312][T11716] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 493.143920][T11716] RSP: 002b:00007fe04b20d020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 493.152329][T11716] RAX: ffffffffffffffda RBX: 00007fe04a545fa0 RCX: 00007fe04a37e98f [ 493.160300][T11716] RDX: 00000000000003b6 RSI: 00000000200003c0 RDI: 00000000000000c8 [ 493.168255][T11716] RBP: 00007fe04b20d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 493.176210][T11716] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000001 [ 493.184168][T11716] R13: 0000000000000001 R14: 00007fe04a545fa0 R15: 00007ffdc0ce0c28 [ 493.192153][T11716] [ 493.195404][T11716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 493.687705][ T25] libceph: connect (1)[c::]:6789 error -101 [ 493.728415][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 494.002883][ T25] libceph: connect (1)[c::]:6789 error -101 [ 494.028999][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 494.247673][T11720] ceph: No mds server is up or the cluster is laggy [ 495.877543][T11684] tipc: Disabling bearer [ 496.131055][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1120'. [ 496.183453][T11734] netlink: 'syz.9.1121': attribute type 1 has an invalid length. [ 496.191260][T11734] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1121'. [ 497.089880][ T7557] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 497.241903][ T7557] usb 4-1: device descriptor read/64, error -71 [ 497.572234][ T6700] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 497.691922][ T7557] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 497.761838][ T6700] usb 5-1: device descriptor read/64, error -71 [ 497.831878][ T7557] usb 4-1: device descriptor read/64, error -71 [ 498.290403][ T7557] usb usb4-port1: attempt power cycle [ 498.352546][ T6700] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 499.325096][ T6700] usb 5-1: device descriptor read/64, error -71 [ 499.331435][ T7557] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 500.208754][ T6700] usb usb5-port1: attempt power cycle [ 500.380411][ T7557] usb 4-1: device descriptor read/8, error -71 [ 503.691795][ T29] audit: type=1400 audit(1733725564.430:534): avc: denied { create } for pid=11781 comm="syz.9.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 504.216158][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.232332][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.377482][ T29] audit: type=1400 audit(1733725564.440:535): avc: denied { write } for pid=11781 comm="syz.9.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 510.124798][ T29] audit: type=1400 audit(1733725570.710:536): avc: denied { append } for pid=11835 comm="syz.8.1148" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 510.148486][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.826078][ T7557] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 510.873789][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.851990][ T5824] Bluetooth: hci5: command 0xfc11 tx timeout [ 511.857871][T11850] bond0: (slave rose0): Enslaving as an active interface with an up link [ 511.868384][ T5815] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 512.241566][ T7557] usb 9-1: device descriptor read/64, error -71 [ 512.753305][T11863] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 512.848743][T11875] gfs2: not a GFS2 filesystem [ 512.895424][ T7557] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 513.110979][ T7557] usb 9-1: device descriptor read/64, error -71 [ 513.313093][ T7557] usb usb9-port1: attempt power cycle [ 513.712541][ T7557] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 513.715517][T11887] sp0: Synchronizing with TNC [ 513.852703][T11881] [U] [ 514.470177][ T7557] usb 9-1: device descriptor read/8, error -71 [ 514.832366][ T5815] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 516.942053][ T25] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 517.167442][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 517.214907][T11916] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 517.236464][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.256168][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.279560][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.304390][ T25] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 517.313742][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.931297][ T25] usb 7-1: config 0 descriptor?? [ 518.981538][ T25] usb 7-1: can't set config #0, error -71 [ 519.087368][ T5910] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 519.126137][ T25] usb 7-1: USB disconnect, device number 20 [ 519.966567][T11934] ceph: No mds server is up or the cluster is laggy [ 520.633411][ T5910] usb 10-1: device not accepting address 14, error -71 [ 522.762975][T11963] netlink: 'syz.6.1170': attribute type 21 has an invalid length. [ 522.771708][T11963] netlink: 'syz.6.1170': attribute type 1 has an invalid length. [ 523.132753][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 524.060419][T11981] netlink: 'syz.8.1173': attribute type 21 has an invalid length. [ 524.069033][T11981] netlink: 'syz.8.1173': attribute type 1 has an invalid length. [ 524.304267][ T5910] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 524.523904][ T5910] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.582749][ T5910] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 524.621924][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.712323][ T5910] usb 10-1: config 0 descriptor?? [ 524.756721][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 525.333448][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 525.340781][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 525.354222][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 525.392716][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 525.400650][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 525.473790][T11977] [U] [ 525.886494][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 525.893675][ T5910] pwc: recv_control_msg error -32 req 04 val 1500 [ 526.303618][ T5910] pwc: recv_control_msg error -32 req 02 val 2600 [ 526.310803][ T5910] pwc: recv_control_msg error -32 req 02 val 2900 [ 527.035127][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 527.055300][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 527.096300][ T5910] pwc: Registered as video103. [ 527.108902][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input27 [ 528.179465][T10171] libceph: connect (1)[c::]:6789 error -101 [ 528.198073][ T5910] usb 10-1: USB disconnect, device number 16 [ 528.223738][T10171] libceph: mon0 (1)[c::]:6789 connect error [ 528.393409][T12018] ceph: No mds server is up or the cluster is laggy [ 528.485026][T10171] libceph: connect (1)[c::]:6789 error -101 [ 528.529743][T10171] libceph: mon0 (1)[c::]:6789 connect error [ 531.460349][T12040] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 533.357828][T12055] [U] [ 534.382071][ T5866] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 534.851878][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 534.921258][ T5866] usb 5-1: device descriptor read/all, error -71 [ 535.542559][T12080] FAULT_INJECTION: forcing a failure. [ 535.542559][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 535.619949][T12080] CPU: 0 UID: 0 PID: 12080 Comm: syz.4.1193 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 535.630746][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 535.640791][T12080] Call Trace: [ 535.644068][T12080] [ 535.646984][T12080] dump_stack_lvl+0x16c/0x1f0 [ 535.651656][T12080] should_fail_ex+0x497/0x5b0 [ 535.656320][T12080] should_failslab+0xc2/0x120 [ 535.660985][T12080] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 535.667304][T12080] ? sidtab_sid2str_get+0x17a/0x680 [ 535.672758][T12080] kmemdup_noprof+0x29/0x60 [ 535.677249][T12080] sidtab_sid2str_get+0x17a/0x680 [ 535.682365][T12080] sidtab_entry_to_string+0x33/0x110 [ 535.687747][T12080] security_sid_to_context_core+0x35c/0x640 [ 535.693658][T12080] avc_audit_post_callback+0x1ac/0x8c0 [ 535.699246][T12080] ? audit_log_format+0xe9/0x130 [ 535.704179][T12080] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 535.710150][T12080] ? skb_put+0x138/0x1b0 [ 535.714395][T12080] ? audit_log_n_string+0x251/0x540 [ 535.719624][T12080] ? audit_log_n_untrustedstring+0xf2/0x100 [ 535.725531][T12080] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 535.731506][T12080] common_lsm_audit+0x33f/0x2250 [ 535.736444][T12080] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 535.742596][T12080] ? __pfx_common_lsm_audit+0x10/0x10 [ 535.748071][T12080] ? __pfx_lock_release+0x10/0x10 [ 535.753092][T12080] ? __pfx_avc_node_free+0x10/0x10 [ 535.758318][T12080] ? rcu_is_watching+0x12/0xc0 [ 535.763173][T12080] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 535.768969][T12080] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.774159][T12080] ? slow_avc_audit+0x17d/0x210 [ 535.779096][T12080] slow_avc_audit+0x17d/0x210 [ 535.783773][T12080] ? __pfx_slow_avc_audit+0x10/0x10 [ 535.788980][T12080] ? avc_denied+0x138/0x180 [ 535.793489][T12080] ? avc_has_perm_noaudit+0x2f8/0x3a0 [ 535.799020][T12080] avc_has_perm+0x18d/0x1c0 [ 535.803613][T12080] ? __pfx_avc_has_perm+0x10/0x10 [ 535.808655][T12080] ? hlock_class+0x4e/0x130 [ 535.813165][T12080] ? __lock_acquire+0xcc5/0x3c40 [ 535.818203][T12080] sock_has_perm+0x253/0x2f0 [ 535.822798][T12080] ? __pfx_sock_has_perm+0x10/0x10 [ 535.827909][T12080] ? ksys_write+0x12b/0x250 [ 535.832414][T12080] ? __pfx___lock_acquire+0x10/0x10 [ 535.837645][T12080] ? find_held_lock+0x2d/0x110 [ 535.842412][T12080] security_socket_getsockopt+0x211/0x240 [ 535.848133][T12080] do_sock_getsockopt+0xf5/0x800 [ 535.853065][T12080] ? trace_lock_acquire+0x14e/0x1f0 [ 535.858274][T12080] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 535.863936][T12080] ? lock_acquire+0x2f/0xb0 [ 535.868510][T12080] ? __fget_files+0x40/0x3a0 [ 535.873116][T12080] ? __fget_files+0x206/0x3a0 [ 535.877897][T12080] __sys_getsockopt+0x12f/0x260 [ 535.882753][T12080] __x64_sys_getsockopt+0xbd/0x160 [ 535.887856][T12080] ? do_syscall_64+0x91/0x250 [ 535.892528][T12080] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.897727][T12080] do_syscall_64+0xcd/0x250 [ 535.902340][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.908319][T12080] RIP: 0033:0x7fb6bcf7fed9 [ 535.912723][T12080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.932412][T12080] RSP: 002b:00007fb6bdd74058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 535.940835][T12080] RAX: ffffffffffffffda RBX: 00007fb6bd145fa0 RCX: 00007fb6bcf7fed9 [ 535.948818][T12080] RDX: 0000000000000008 RSI: 0000000000000101 RDI: 0000000000000004 [ 535.956883][T12080] RBP: 00007fb6bdd740a0 R08: 0000000000000000 R09: 0000000000000000 [ 535.965107][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.973109][T12080] R13: 0000000000000000 R14: 00007fb6bd145fa0 R15: 00007ffd80081808 [ 535.981103][T12080] [ 536.015472][ T29] audit: type=1400 audit(1733725596.390:537): avc: denied { getopt } for pid=12079 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tsid=146 tclass=ax25_socket permissive=1 [ 536.231293][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.231836][ T29] audit: type=1400 audit(1733725597.070:538): avc: denied { shutdown } for pid=12082 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.270806][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.293842][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.312570][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.322931][ T5824] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 536.332372][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.369488][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.390333][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.401985][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.424007][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.441510][ T5815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 536.532089][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.595348][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 536.643993][T12088] input: syz1 as /devices/virtual/input/input28 [ 536.707702][ T29] audit: type=1400 audit(1733725597.550:539): avc: denied { read } for pid=12091 comm="syz.8.1197" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 536.801853][ T29] audit: type=1400 audit(1733725597.550:540): avc: denied { open } for pid=12091 comm="syz.8.1197" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 536.847327][ T29] audit: type=1400 audit(1733725597.550:541): avc: denied { ioctl } for pid=12091 comm="syz.8.1197" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 536.917218][T12083] lo speed is unknown, defaulting to 1000 [ 536.935593][T12083] lo speed is unknown, defaulting to 1000 [ 536.947677][ T29] audit: type=1400 audit(1733725597.610:542): avc: denied { ioctl } for pid=12091 comm="syz.8.1197" path="socket:[32568]" dev="sockfs" ino=32568 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 539.575874][ T5815] Bluetooth: hci5: command tx timeout [ 539.978814][T12122] binder: BINDER_SET_CONTEXT_MGR already set [ 540.004140][T12122] binder: 12120:12122 ioctl 4018620d 200002c0 returned -16 [ 540.025815][ T29] audit: type=1400 audit(1733725600.550:543): avc: denied { append } for pid=12118 comm="syz.3.1205" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 540.076693][ T29] audit: type=1400 audit(1733725600.790:544): avc: denied { map } for pid=12120 comm="syz.8.1203" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 540.161268][T12083] chnl_net:caif_netlink_parms(): no params data found [ 540.197040][T12131] FAULT_INJECTION: forcing a failure. [ 540.197040][T12131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.216005][T12131] CPU: 0 UID: 0 PID: 12131 Comm: syz.8.1208 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 540.226820][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.236935][T12131] Call Trace: [ 540.240201][T12131] [ 540.243205][T12131] dump_stack_lvl+0x16c/0x1f0 [ 540.247880][T12131] should_fail_ex+0x497/0x5b0 [ 540.252553][T12131] _copy_to_user+0x32/0xd0 [ 540.256966][T12131] simple_read_from_buffer+0xd0/0x160 [ 540.262343][T12131] proc_fail_nth_read+0x198/0x270 [ 540.267389][T12131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.272947][T12131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.278545][T12131] vfs_read+0x1df/0xbe0 [ 540.282709][T12131] ? __fget_files+0x1fc/0x3a0 [ 540.287385][T12131] ? __pfx___mutex_lock+0x10/0x10 [ 540.292404][T12131] ? __pfx_vfs_read+0x10/0x10 [ 540.297246][T12131] ? __fget_files+0x206/0x3a0 [ 540.302010][T12131] ksys_read+0x12b/0x250 [ 540.306329][T12131] ? __pfx_ksys_read+0x10/0x10 [ 540.311082][T12131] do_syscall_64+0xcd/0x250 [ 540.315599][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.321501][T12131] RIP: 0033:0x7f8ae1b7e8ec [ 540.325914][T12131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 540.345051][T12136] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1204'. [ 540.345603][T12131] RSP: 002b:00007f8ae2995050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.363531][T12131] RAX: ffffffffffffffda RBX: 00007f8ae1d45fa0 RCX: 00007f8ae1b7e8ec [ 540.371509][T12131] RDX: 000000000000000f RSI: 00007f8ae29950b0 RDI: 0000000000000004 [ 540.379480][T12131] RBP: 00007f8ae29950a0 R08: 0000000000000000 R09: 0000000000000000 [ 540.387534][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.395501][T12131] R13: 0000000000000000 R14: 00007f8ae1d45fa0 R15: 00007fffbb66f008 [ 540.403500][T12131] [ 540.556324][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.566360][T12083] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.573795][T12083] bridge_slave_0: entered allmulticast mode [ 540.580622][T12083] bridge_slave_0: entered promiscuous mode [ 540.594877][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.608346][T12132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.613245][T12083] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.624433][T12083] bridge_slave_1: entered allmulticast mode [ 540.632539][T12083] bridge_slave_1: entered promiscuous mode [ 540.692294][T12083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.728239][T12083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.861312][T12083] team0: Port device team_slave_0 added [ 540.927764][T12083] team0: Port device team_slave_1 added [ 541.032673][T12145] input: syz0 as /devices/virtual/input/input29 [ 541.129158][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 541.167870][T12083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.178521][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.211336][T12083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.263746][T12083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.282868][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.331111][T12083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.401993][ T7557] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 541.551990][ T7557] usb 9-1: Using ep0 maxpacket: 8 [ 541.565038][ T29] audit: type=1400 audit(1733725602.410:545): avc: denied { module_load } for pid=12150 comm="syz.9.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 541.597991][ T7557] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 541.632035][ T5815] Bluetooth: hci5: command tx timeout [ 541.688246][ T7557] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.757114][ T7557] usb 9-1: Product: syz [ 541.772190][ T7557] usb 9-1: Manufacturer: syz [ 541.786709][ T7557] usb 9-1: SerialNumber: syz [ 541.812343][ T7557] usb 9-1: config 0 descriptor?? [ 541.837516][ T7557] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 542.038538][T12083] hsr_slave_0: entered promiscuous mode [ 542.095945][T12083] hsr_slave_1: entered promiscuous mode [ 542.125593][T12083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.175716][T12083] Cannot create hsr debugfs directory [ 542.366328][ T7557] gspca_sonixj: reg_w1 err -110 [ 542.371381][ T7557] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 542.678153][T12083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.866836][T12083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.986556][T12083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.021971][ T5910] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 543.128689][T12083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.223676][ T5910] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 543.239382][ T5910] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 543.267441][ T5910] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 543.284589][ T5910] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 543.303836][ T5910] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 543.328319][ T5910] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 543.339852][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.350967][ T5910] usb 10-1: Product: syz [ 543.357431][ T5910] usb 10-1: Manufacturer: syz [ 543.363811][T12083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.368906][ T5910] cdc_wdm 10-1:1.0: skipping garbage [ 543.378111][ T5910] cdc_wdm 10-1:1.0: skipping garbage [ 543.388321][T12083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.392265][ T5910] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 543.401726][ T5910] cdc_wdm 10-1:1.0: Unknown control protocol [ 543.404964][T12083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.429718][ T7557] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 543.452468][T12083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.550916][T12083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.567011][T12083] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.598220][T12083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.608729][T12083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.641327][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.648533][ T6952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.716393][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.723036][ T5815] Bluetooth: hci5: command tx timeout [ 543.723551][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.771979][ T7557] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.783817][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.794897][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.806446][ T8] usb 9-1: USB disconnect, device number 25 [ 543.819871][ T7557] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 543.841358][ T7557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.863663][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 543.870434][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 543.881346][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 543.888193][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 543.896822][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 543.903575][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 543.911256][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 543.918003][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 543.925747][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 543.932503][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 543.938985][ T5864] usb 10-1: USB disconnect, device number 17 [ 543.945270][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 543.945302][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 543.945323][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 544.004104][ T7557] usb 5-1: config 0 descriptor?? [ 544.025787][ T7557] pwc: Askey VC010 type 2 USB webcam detected. [ 544.126430][T12083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.313243][T12083] veth0_vlan: entered promiscuous mode [ 544.327588][T12083] veth1_vlan: entered promiscuous mode [ 544.352916][T12083] veth0_macvtap: entered promiscuous mode [ 544.429038][T12083] veth1_macvtap: entered promiscuous mode [ 544.453630][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.464409][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.474545][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.485338][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.495905][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.508928][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.519175][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.531956][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.553146][ T7557] pwc: recv_control_msg error -32 req 02 val 2b00 [ 544.553284][T12083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.593042][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.618580][ T7557] pwc: recv_control_msg error -32 req 02 val 2700 [ 544.625209][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.625380][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.646917][T10171] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 544.715700][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.736156][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.758591][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.769013][ T7557] pwc: recv_control_msg error -32 req 02 val 2c00 [ 544.803728][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.839886][T10171] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.890948][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.902016][ T7557] pwc: recv_control_msg error -32 req 04 val 1000 [ 544.918244][T10171] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 544.942034][T12083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.955303][T10171] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 544.974200][T12083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.983842][ T7557] pwc: recv_control_msg error -32 req 04 val 1300 [ 545.036025][T10171] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 545.056059][T12083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.071027][T10171] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.091542][T12083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.118167][T12083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.134371][T12185] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 545.401807][ T6953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.426088][ T6953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.432211][ T7557] pwc: recv_control_msg error -32 req 02 val 2100 [ 545.452413][ T7557] pwc: recv_control_msg error -32 req 04 val 1500 [ 545.480465][ T6942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.505911][ T5864] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 545.511812][ T6942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.616469][ T29] audit: type=1400 audit(1733725606.450:546): avc: denied { mounton } for pid=12083 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 545.750216][ T5864] usb 10-1: Using ep0 maxpacket: 32 [ 545.801043][ T5864] usb 10-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.812438][ T5864] usb 10-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.822532][ T5864] usb 10-1: config 0 interface 0 has no altsetting 0 [ 545.829398][ T5864] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 545.838816][ T5864] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.880621][ T5864] usb 10-1: config 0 descriptor?? [ 545.886242][ T5815] Bluetooth: hci5: command tx timeout [ 545.952833][ T7557] pwc: recv_control_msg error -32 req 02 val 2600 [ 545.960425][ T7557] pwc: recv_control_msg error -32 req 02 val 2900 [ 546.920769][ T7557] pwc: recv_control_msg error -71 req 04 val 1100 [ 546.932241][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.026927][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.037648][ T5864] hkems 0003:2006:0118.001F: bogus close delimiter [ 547.083688][ T5864] hkems 0003:2006:0118.001F: item 0 4 2 10 parsing failed [ 547.109280][ T5864] hkems 0003:2006:0118.001F: parse failed [ 547.819215][ T5864] hkems 0003:2006:0118.001F: probe with driver hkems failed with error -22 [ 547.855749][ T7557] pwc: recv_control_msg error -71 req 04 val 1200 [ 547.878777][ T7557] pwc: Registered as video103. [ 547.886383][ T5910] usb 10-1: USB disconnect, device number 18 [ 547.886844][ T7557] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 548.154656][T12203] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 548.163995][T12203] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 548.932158][ T7557] usb 5-1: USB disconnect, device number 36 [ 549.267925][T12207] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 549.275162][T12207] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 549.422682][T12207] vhci_hcd vhci_hcd.0: Device attached [ 550.095301][T12209] vhci_hcd: connection closed [ 550.103946][ T6953] vhci_hcd: stop threads [ 550.113640][ T5866] vhci_hcd: vhci_device speed not set [ 550.150607][ T6953] vhci_hcd: release socket [ 550.162341][ T6953] vhci_hcd: disconnect device [ 550.172053][ T5866] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 550.179772][ T5866] usb 39-1: enqueue for inactive port 0 [ 551.381932][ T5910] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 551.399899][ T5866] vhci_hcd: vhci_device speed not set [ 552.441094][T10171] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 552.455520][T10171] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input30 [ 553.289045][ T7557] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 553.483399][ T29] audit: type=1400 audit(1733725614.200:547): avc: denied { map } for pid=12236 comm="syz.3.1227" path="socket:[33291]" dev="sockfs" ino=33291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 553.636931][ T5910] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 553.801893][ T5910] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 553.817833][ T5910] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 553.827923][ T5910] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 553.842832][ T5910] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 554.423180][ T7557] usb 5-1: device not accepting address 37, error -71 [ 554.513832][ T5910] usb 10-1: string descriptor 0 read error: -71 [ 554.520346][ T5910] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 554.530427][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 554.562271][ T5910] usb 10-1: can't set config #1, error -71 [ 554.578646][ T5910] usb 10-1: USB disconnect, device number 19 [ 555.684113][ T5910] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 555.984933][ T5910] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.995810][ T5910] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 556.050598][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.202628][ T5910] usb 10-1: config 0 descriptor?? [ 556.249563][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 556.946899][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 557.868289][ T7557] usb 9-1: USB disconnect, device number 26 [ 557.871853][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 558.082535][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 558.111181][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1236'. [ 558.402201][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 558.892441][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 558.940628][ T5866] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 558.968688][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 558.992989][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 559.142304][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.242333][ T5866] usb 3-1: Product: syz [ 559.246620][ T5866] usb 3-1: Manufacturer: syz [ 559.251781][ T5866] usb 3-1: SerialNumber: syz [ 559.293120][ T5866] usb 3-1: config 0 descriptor?? [ 559.486871][T12284] lo speed is unknown, defaulting to 1000 [ 559.494601][T12284] lo speed is unknown, defaulting to 1000 [ 559.725578][ T5910] pwc: recv_control_msg error -71 req 02 val 2000 [ 559.733425][ T5910] pwc: recv_control_msg error -71 req 02 val 2100 [ 559.748440][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 559.781931][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 560.552557][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 560.576580][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 560.592029][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 560.612193][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 560.619098][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 560.629294][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 560.645516][ T5910] pwc: Registered as video103. [ 560.656048][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input32 [ 560.693328][ T5866] usb 3-1: USB disconnect, device number 7 [ 561.267023][ T5910] usb 10-1: USB disconnect, device number 20 [ 561.998464][T12310] ceph: No mds server is up or the cluster is laggy [ 562.762045][ T7557] libceph: connect (1)[c::]:6789 error -101 [ 562.768078][ T7557] libceph: mon0 (1)[c::]:6789 connect error [ 562.855332][ T7810] udevd[7810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.870473][T12321] ceph: No mds server is up or the cluster is laggy [ 564.054041][ T6700] libceph: connect (1)[c::]:6789 error -101 [ 564.060154][ T6700] libceph: mon0 (1)[c::]:6789 connect error [ 564.098098][ T5910] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 565.388757][ T29] audit: type=1400 audit(1733725626.220:548): avc: denied { relabelfrom } for pid=12337 comm="syz.8.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 565.412732][ T29] audit: type=1400 audit(1733725626.220:549): avc: denied { relabelto } for pid=12337 comm="syz.8.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 565.444636][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.451027][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.732107][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 566.412073][ T5866] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 566.541379][ T29] audit: type=1326 audit(1733725627.380:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 566.568916][ T29] audit: type=1326 audit(1733725627.410:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 566.593776][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.604295][ T5866] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 566.610416][T12363] syz.4.1254[12363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.613648][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.640589][ T29] audit: type=1326 audit(1733725627.450:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 566.664088][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.665950][ T5866] usb 4-1: config 0 descriptor?? [ 566.679920][T12363] syz.4.1254[12363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.680218][T12363] syz.4.1254[12363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.706443][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 566.716551][ T29] audit: type=1326 audit(1733725627.450:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 566.747474][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.755789][ T5816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 566.860035][ T29] audit: type=1326 audit(1733725627.450:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 566.883593][ T29] audit: type=1326 audit(1733725627.450:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 566.931963][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 567.027223][ T29] audit: type=1326 audit(1733725627.550:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 567.051714][ T29] audit: type=1326 audit(1733725627.550:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6bcf7fed9 code=0x7ffc0000 [ 567.918570][ T5816] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 567.932416][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.940513][ T5816] usb 3-1: SerialNumber: syz [ 567.964290][ T5816] usb 3-1: config 0 descriptor?? [ 568.171945][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 568.182577][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 568.189516][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 568.191974][ T5910] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 568.204061][ T5866] pwc: recv_control_msg error -32 req 04 val 1000 [ 568.232317][ T5866] pwc: recv_control_msg error -32 req 04 val 1300 [ 568.377242][ T5910] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.398355][ T5910] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 568.422246][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.451944][T12360] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 568.492492][T12360] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1253'. [ 568.494430][ T5910] usb 9-1: config 0 descriptor?? [ 568.532684][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 568.652693][ T5866] pwc: recv_control_msg error -32 req 02 val 2100 [ 568.667465][ T7557] usb 3-1: USB disconnect, device number 8 [ 568.854632][T12382] bridge0: entered promiscuous mode [ 568.860137][T12382] bridge0: entered allmulticast mode [ 569.396564][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 569.403999][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 569.430981][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 569.440286][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 569.491054][ T5866] pwc: recv_control_msg error -32 req 02 val 2400 [ 569.503348][ T5866] pwc: recv_control_msg error -32 req 02 val 2600 [ 569.886036][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 569.887136][ T5910] pwc: recv_control_msg error -32 req 02 val 2000 [ 570.036100][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 570.072485][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 570.076173][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 570.090654][ T5866] pwc: Registered as video103. [ 570.096763][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 570.110640][ T5866] usb 4-1: USB disconnect, device number 20 [ 570.271719][T12391] FAULT_INJECTION: forcing a failure. [ 570.271719][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 570.304505][T12391] CPU: 1 UID: 0 PID: 12391 Comm: syz.2.1261 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 570.315506][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 570.325574][T12391] Call Trace: [ 570.328858][T12391] [ 570.331798][T12391] dump_stack_lvl+0x16c/0x1f0 [ 570.336499][T12391] should_fail_ex+0x497/0x5b0 [ 570.341186][T12391] ? fs_reclaim_acquire+0xae/0x150 [ 570.346322][T12391] should_failslab+0xc2/0x120 [ 570.351066][T12391] __kmalloc_cache_noprof+0x68/0x410 [ 570.356381][T12391] ip_set_create+0x33f/0x14d0 [ 570.361092][T12391] ? __pfx_ip_set_create+0x10/0x10 [ 570.366264][T12391] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 570.371333][T12391] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 570.376825][T12391] ? __pfx___lock_acquire+0x10/0x10 [ 570.382072][T12391] ? lock_acquire+0x2f/0xb0 [ 570.386588][T12391] ? avc_has_perm_noaudit+0x61/0x3a0 [ 570.391902][T12391] netlink_rcv_skb+0x16b/0x440 [ 570.396693][T12391] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 570.402207][T12391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.407535][T12391] ? bpf_lsm_capable+0x9/0x10 [ 570.412222][T12391] ? security_capable+0x7e/0x260 [ 570.417175][T12391] ? ns_capable+0xd7/0x110 [ 570.421612][T12391] nfnetlink_rcv+0x1b4/0x430 [ 570.426234][T12391] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 570.431364][T12391] ? netlink_deliver_tap+0x1ae/0xd30 [ 570.436650][T12391] netlink_unicast+0x53c/0x7f0 [ 570.441473][T12391] ? __pfx_netlink_unicast+0x10/0x10 [ 570.446749][T12391] netlink_sendmsg+0x8b8/0xd70 [ 570.451506][T12391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.456784][T12391] ____sys_sendmsg+0xaaf/0xc90 [ 570.461532][T12391] ? copy_msghdr_from_user+0x10b/0x160 [ 570.466999][T12391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.472340][T12391] ___sys_sendmsg+0x135/0x1e0 [ 570.477150][T12391] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.482395][T12391] ? __pfx_lock_release+0x10/0x10 [ 570.487457][T12391] ? trace_lock_acquire+0x14e/0x1f0 [ 570.492710][T12391] ? __fget_files+0x206/0x3a0 [ 570.497414][T12391] __sys_sendmsg+0x16e/0x220 [ 570.501998][T12391] ? __pfx___sys_sendmsg+0x10/0x10 [ 570.507120][T12391] do_syscall_64+0xcd/0x250 [ 570.511615][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.516260][ T5815] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 570.517497][T12391] RIP: 0033:0x7f1033b7fed9 [ 570.529607][T12391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.549237][T12391] RSP: 002b:00007f1034a51058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.557687][T12391] RAX: ffffffffffffffda RBX: 00007f1033d45fa0 RCX: 00007f1033b7fed9 [ 570.565683][T12391] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 570.573673][T12391] RBP: 00007f1034a510a0 R08: 0000000000000000 R09: 0000000000000000 [ 570.581750][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.589740][T12391] R13: 0000000000000000 R14: 00007f1033d45fa0 R15: 00007ffc770ad378 [ 570.597748][T12391] [ 570.642084][ T5910] pwc: recv_control_msg error -32 req 02 val 2400 [ 570.655937][ T5910] pwc: recv_control_msg error -32 req 02 val 2600 [ 570.715394][ T5910] pwc: recv_control_msg error -32 req 02 val 2900 [ 570.725300][ T5910] pwc: recv_control_msg error -32 req 02 val 2800 [ 570.813246][T12398] sp0: Synchronizing with TNC [ 571.068597][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 571.146205][T12395] [U] ` [ 571.162122][ T5910] pwc: Registered as video103. [ 571.168005][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input34 [ 571.251083][ T5910] usb 9-1: USB disconnect, device number 27 [ 571.630988][T12413] xt_nat: multiple ranges no longer supported [ 572.475201][ T5816] hid-generic 0000:0003:0000.0020: unknown main item tag 0x0 [ 572.539511][ T5816] hid-generic 0000:0003:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 573.082473][T12424] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 573.996178][T12430] No control pipe specified [ 574.541889][ T5866] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 574.936682][ T5866] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.945756][ T5866] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 574.949579][T12444] new mount options do not match the existing superblock, will be ignored [ 574.966222][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.975345][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 574.986451][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 575.031962][ T5816] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 575.095313][ T5866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 575.110490][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 575.118724][ T5866] usb 3-1: Product: syz [ 575.122996][ T5866] usb 3-1: Manufacturer: syz [ 575.150441][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 575.192109][ T5816] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 575.207538][ T5816] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 575.406005][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 575.416658][ T5866] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 575.421907][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.422709][ T5866] cdc_wdm 3-1:1.0: Unknown control protocol [ 575.454031][ T5816] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 575.489282][ T5816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 575.505106][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.505338][ T5816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 575.591992][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.598631][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.604903][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.611494][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.617730][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.624315][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.630569][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.637160][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.643828][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.650434][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.657178][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.663821][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.670065][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.676648][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.682888][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.689469][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.695716][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.702297][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.708553][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 575.715143][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 575.724513][ T5866] usb 3-1: USB disconnect, device number 9 [ 575.730344][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 576.368137][T12454] xt_nat: multiple ranges no longer supported [ 577.238862][ T5816] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 577.248043][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 577.256304][ T5816] usb 5-1: Product: syz [ 577.260492][ T5816] usb 5-1: Manufacturer: syz [ 578.365458][ T7557] hid-generic 0000:0003:0000.0021: unknown main item tag 0x0 [ 578.387215][ T7557] hid-generic 0000:0003:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 578.631546][T12466] No control pipe specified [ 579.289045][ T5816] usb 5-1: can't set config #1, error -71 [ 579.299929][ T5816] usb 5-1: USB disconnect, device number 39 [ 579.532079][ T971] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 579.671992][ T5816] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 579.681859][ T971] usb 9-1: Using ep0 maxpacket: 16 [ 579.691284][ T971] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 579.715195][ T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.723572][ T971] usb 9-1: Product: syz [ 579.727874][ T971] usb 9-1: Manufacturer: syz [ 579.735814][ T971] usb 9-1: SerialNumber: syz [ 579.761414][ T971] usb 9-1: config 0 descriptor?? [ 579.781687][ T971] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 579.799671][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 579.821908][ T5864] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 579.823689][ T5816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.841886][ T7557] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 579.850990][ T5816] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 579.861537][ T5816] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.882814][ T5816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.897244][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.992205][ T971] ssu100 9-1:0.0: probe with driver ssu100 failed with error -71 [ 580.278427][ T5816] usb 5-1: Product: syz [ 580.291925][ T5864] usb 10-1: Using ep0 maxpacket: 32 [ 580.315024][ T5864] usb 10-1: too many configurations: 151, using maximum allowed: 8 [ 580.325102][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.333811][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.340340][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.354271][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.367576][ T5816] usb 5-1: Manufacturer: syz [ 580.389121][ T971] usb 9-1: USB disconnect, device number 28 [ 580.395205][ T5816] usb 5-1: SerialNumber: syz [ 580.400377][ T7557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.412333][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.418592][ T7557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.428730][ T5816] cdc_mbim 5-1:1.0: skipping garbage [ 580.428767][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.452640][ T7557] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 580.461386][ T5816] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 580.462324][ T7557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.477885][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.486516][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.500371][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.512066][ T5816] cdc_mbim 5-1:1.0: bind() failure [ 580.521875][ T7557] usb 3-1: config 0 descriptor?? [ 580.561274][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.569818][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.576225][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.591799][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.600313][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.608114][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.661850][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.670834][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.677331][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.702946][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.712052][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.721504][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.736454][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 580.745598][ T5864] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.755013][ T5864] usb 10-1: config 0 has no interface number 0 [ 580.761851][ T5864] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.809417][ T5864] usb 10-1: New USB device found, idVendor=0413, idProduct=4e0d, bcdDevice=ab.11 [ 580.818795][ T5864] usb 10-1: New USB device strings: Mfr=225, Product=88, SerialNumber=2 [ 580.827408][ T5864] usb 10-1: Product: syz [ 580.832057][ T5864] usb 10-1: Manufacturer: syz [ 580.836854][ T5864] usb 10-1: SerialNumber: syz [ 580.842837][ T5866] usb 5-1: USB disconnect, device number 40 [ 580.858192][ T5864] usb 10-1: config 0 descriptor?? [ 580.864102][T12478] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 581.333155][ T5866] usb 10-1: USB disconnect, device number 22 [ 583.802039][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 583.802060][ T29] audit: type=1400 audit(1733725644.080:595): avc: denied { execmem } for pid=12493 comm="syz.9.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 583.850247][T12500] netlink: 'syz.9.1291': attribute type 21 has an invalid length. [ 583.858817][T12500] netlink: 'syz.9.1291': attribute type 1 has an invalid length. [ 583.897035][ T7557] usb 3-1: string descriptor 0 read error: -71 [ 583.917536][ T7557] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71 [ 583.929071][ T7557] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 583.949166][ T7557] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71 [ 583.967763][ T7557] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 584.987687][ T7557] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 585.014511][T12502] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 585.197874][ T7557] usb 3-1: USB disconnect, device number 10 [ 585.633582][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1298'. [ 585.747540][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1298'. [ 588.658815][T12559] netlink: 'syz.9.1306': attribute type 21 has an invalid length. [ 588.671559][T12559] netlink: 'syz.9.1306': attribute type 1 has an invalid length. [ 588.790342][ T971] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 589.184121][ T971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.202173][ T971] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 589.222126][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.253744][ T971] usb 4-1: config 0 descriptor?? [ 589.264326][ T971] pwc: Askey VC010 type 2 USB webcam detected. [ 589.741926][ T5866] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 589.749276][ T971] pwc: recv_control_msg error -32 req 02 val 2b00 [ 589.758692][ T971] pwc: recv_control_msg error -32 req 02 val 2700 [ 589.791110][ T971] pwc: recv_control_msg error -32 req 02 val 2c00 [ 589.798107][ T971] pwc: recv_control_msg error -32 req 04 val 1000 [ 589.812892][ T971] pwc: recv_control_msg error -32 req 04 val 1300 [ 590.354708][ T971] pwc: recv_control_msg error -32 req 02 val 2000 [ 590.356802][ T5866] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 590.374522][ T5866] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 590.381846][ T971] pwc: recv_control_msg error -32 req 02 val 2100 [ 590.384918][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 590.400328][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 590.411475][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 590.427885][ T5866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 590.452007][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 590.475066][ T5866] usb 3-1: Product: syz [ 590.486384][ T5866] usb 3-1: Manufacturer: syz [ 590.540312][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 590.546356][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 590.562839][ T5866] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 590.589228][ T5866] cdc_wdm 3-1:1.0: Unknown control protocol [ 590.781940][T10171] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 590.833543][ C0] wdm_int_callback: 22 callbacks suppressed [ 590.833574][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.846114][ C0] wdm_int_callback: 22 callbacks suppressed [ 590.846139][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.858264][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.866598][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.873235][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.879653][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.886277][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.892589][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.895455][ T971] pwc: recv_control_msg error -32 req 02 val 2400 [ 590.899191][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.906576][ T971] pwc: recv_control_msg error -32 req 02 val 2600 [ 590.913821][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.925065][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.931727][ T5866] usb 3-1: USB disconnect, device number 11 [ 590.931916][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.944430][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.950499][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 590.959308][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.963642][T10171] usb 9-1: Using ep0 maxpacket: 16 [ 590.983958][T10171] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.010147][T10171] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.101678][T10171] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.165895][T10171] usb 9-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 591.184568][ T971] pwc: recv_control_msg error -71 req 02 val 2800 [ 591.204149][ T971] pwc: recv_control_msg error -71 req 04 val 1100 [ 591.213789][T10171] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.231454][ T971] pwc: recv_control_msg error -71 req 04 val 1200 [ 591.259118][T10171] usb 9-1: config 0 descriptor?? [ 591.266713][ T971] pwc: Registered as video103. [ 591.512430][ T971] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 591.572692][ T971] usb 4-1: USB disconnect, device number 21 [ 592.396784][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 592.620124][T12593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.026834][ T5910] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 593.336005][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.454810][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 593.802856][ T5910] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.908970][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.918330][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.926634][ T5910] usb 5-1: Product: syz [ 593.930853][ T5910] usb 5-1: Manufacturer: syz [ 593.967133][ T5910] usb 5-1: SerialNumber: syz [ 593.995807][ T5910] cdc_mbim 5-1:1.0: skipping garbage [ 594.001350][ T5910] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 594.008967][ T5910] cdc_mbim 5-1:1.0: bind() failure [ 594.215340][T10171] usbhid 9-1:0.0: can't add hid device: -71 [ 594.221712][T10171] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 594.240269][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 594.292107][T10171] usb 9-1: USB disconnect, device number 29 [ 595.469820][T12612] xt_nat: multiple ranges no longer supported [ 595.511487][ T5866] usb 5-1: USB disconnect, device number 41 [ 598.469773][ T5910] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 598.638790][ T29] audit: type=1400 audit(1733725659.480:596): avc: denied { map } for pid=12628 comm="syz.8.1326" path="/212/bus" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 598.682483][ T5910] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 598.712650][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.742835][ T5910] usb 5-1: config 0 descriptor?? [ 598.830878][ T29] audit: type=1400 audit(1733725659.670:597): avc: denied { unmount } for pid=6559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 599.386237][ T29] audit: type=1400 audit(1733725660.210:598): avc: denied { ioctl } for pid=12624 comm="syz.4.1324" path="socket:[34637]" dev="sockfs" ino=34637 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 600.148494][ T5910] ath6kl: Failed to submit usb control message: -110 [ 600.156259][ T5910] ath6kl: unable to send the bmi data to the device: -110 [ 600.167029][ T5910] ath6kl: Unable to send get target info: -110 [ 601.292910][ T5910] ath6kl: Failed to init ath6kl core: -110 [ 601.299468][ T5910] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 601.468557][ T5910] usb 5-1: USB disconnect, device number 42 [ 602.414792][T12649] FAULT_INJECTION: forcing a failure. [ 602.414792][T12649] name failslab, interval 1, probability 0, space 0, times 0 [ 602.427883][T12649] CPU: 1 UID: 0 PID: 12649 Comm: syz.4.1329 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 602.438676][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 602.448724][T12649] Call Trace: [ 602.451994][T12649] [ 602.454925][T12649] dump_stack_lvl+0x16c/0x1f0 [ 602.459598][T12649] should_fail_ex+0x497/0x5b0 [ 602.464264][T12649] should_failslab+0xc2/0x120 [ 602.468947][T12649] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 602.475267][T12649] ? sidtab_sid2str_get+0x17a/0x680 [ 602.480464][T12649] kmemdup_noprof+0x29/0x60 [ 602.484979][T12649] sidtab_sid2str_get+0x17a/0x680 [ 602.489997][T12649] sidtab_entry_to_string+0x33/0x110 [ 602.495397][T12649] security_sid_to_context_core+0x35c/0x640 [ 602.501298][T12649] avc_audit_post_callback+0x10b/0x8c0 [ 602.506762][T12649] ? audit_log_format+0xe9/0x130 [ 602.511700][T12649] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 602.517694][T12649] ? skb_put+0x138/0x1b0 [ 602.521965][T12649] ? audit_log_n_string+0x251/0x540 [ 602.527177][T12649] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 602.533179][T12649] common_lsm_audit+0x33f/0x2250 [ 602.538121][T12649] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 602.544198][T12649] ? __pfx_common_lsm_audit+0x10/0x10 [ 602.549693][T12649] ? avc_update_node.isra.0+0x49d/0x800 [ 602.555254][T12649] ? __pfx_avc_node_free+0x10/0x10 [ 602.560799][T12649] ? rcu_is_watching+0x12/0xc0 [ 602.565570][T12649] ? slow_avc_audit+0x17d/0x210 [ 602.570417][T12649] slow_avc_audit+0x17d/0x210 [ 602.575095][T12649] ? __pfx_slow_avc_audit+0x10/0x10 [ 602.580295][T12649] ? avc_has_extended_perms+0x7c9/0xf70 [ 602.585841][T12649] ? avc_denied+0x138/0x180 [ 602.590336][T12649] ? avc_denied+0x141/0x180 [ 602.594851][T12649] avc_has_extended_perms+0x9a1/0xf70 [ 602.600218][T12649] ? find_held_lock+0x2d/0x110 [ 602.604991][T12649] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 602.610943][T12649] ? tomoyo_path_number_perm+0x298/0x590 [ 602.616590][T12649] ? __pfx_lock_release+0x10/0x10 [ 602.621731][T12649] ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 602.628215][T12649] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 602.635152][T12649] ? __pfx_lock_release+0x10/0x10 [ 602.640237][T12649] ? selinux_file_ioctl+0x180/0x270 [ 602.645467][T12649] selinux_file_ioctl+0x180/0x270 [ 602.650525][T12649] security_file_ioctl+0xc6/0x240 [ 602.655555][T12649] __x64_sys_ioctl+0xb7/0x200 [ 602.660223][T12649] do_syscall_64+0xcd/0x250 [ 602.664809][T12649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.670715][T12649] RIP: 0033:0x7fb6bcf7fed9 [ 602.675136][T12649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.694838][T12649] RSP: 002b:00007fb6bdd74058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.703275][T12649] RAX: ffffffffffffffda RBX: 00007fb6bd145fa0 RCX: 00007fb6bcf7fed9 [ 602.711258][T12649] RDX: 00000000200019c0 RSI: 00000000000089e2 RDI: 0000000000000004 [ 602.719255][T12649] RBP: 00007fb6bdd740a0 R08: 0000000000000000 R09: 0000000000000000 [ 602.727233][T12649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.735220][T12649] R13: 0000000000000000 R14: 00007fb6bd145fa0 R15: 00007ffd80081808 [ 602.743442][T12649] [ 602.915327][ T29] audit: type=1400 audit(1733725663.250:599): avc: denied { ioctl } for pid=12648 comm="syz.4.1329" path="socket:[34742]" dev="sockfs" ino=34742 ioctlcmd=0x89e2 ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 604.645288][T12662] FAULT_INJECTION: forcing a failure. [ 604.645288][T12662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.752147][T12662] CPU: 1 UID: 0 PID: 12662 Comm: syz.2.1333 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 604.763004][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 604.773166][T12662] Call Trace: [ 604.776486][T12662] [ 604.779430][T12662] dump_stack_lvl+0x16c/0x1f0 [ 604.784139][T12662] should_fail_ex+0x497/0x5b0 [ 604.788838][T12662] _copy_to_user+0x32/0xd0 [ 604.793297][T12662] simple_read_from_buffer+0xd0/0x160 [ 604.798743][T12662] proc_fail_nth_read+0x198/0x270 [ 604.803803][T12662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 604.809379][T12662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 604.814954][T12662] vfs_read+0x1df/0xbe0 [ 604.819127][T12662] ? __fget_files+0x1fc/0x3a0 [ 604.823991][T12662] ? __pfx___mutex_lock+0x10/0x10 [ 604.829053][T12662] ? __pfx_vfs_read+0x10/0x10 [ 604.833757][T12662] ? __fget_files+0x206/0x3a0 [ 604.838473][T12662] ksys_read+0x12b/0x250 [ 604.842765][T12662] ? __pfx_ksys_read+0x10/0x10 [ 604.847563][T12662] do_syscall_64+0xcd/0x250 [ 604.852097][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.858015][T12662] RIP: 0033:0x7f1033b7e8ec [ 604.862448][T12662] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 604.882077][T12662] RSP: 002b:00007f1034a51050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 604.890499][T12662] RAX: ffffffffffffffda RBX: 00007f1033d45fa0 RCX: 00007f1033b7e8ec [ 604.898528][T12662] RDX: 000000000000000f RSI: 00007f1034a510b0 RDI: 0000000000000004 [ 604.906583][T12662] RBP: 00007f1034a510a0 R08: 0000000000000000 R09: 0000000000000000 [ 604.914561][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.922526][T12662] R13: 0000000000000000 R14: 00007f1033d45fa0 R15: 00007ffc770ad378 [ 604.930506][T12662] [ 606.881863][ T971] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 607.032073][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 607.059884][ T971] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 607.724887][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.805853][ T971] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 607.820603][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.837539][ T971] usb 3-1: Product: syz [ 607.847035][ T971] usb 3-1: Manufacturer: syz [ 607.900576][ T971] usb 3-1: SerialNumber: syz [ 608.126432][ T971] usb 3-1: config 0 descriptor?? [ 608.138806][ T971] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 608.148250][ T971] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 608.263863][ T5910] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 608.518111][ T5816] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 608.636875][ T5910] usb 5-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 188, changing to 11 [ 609.013386][ T5910] usb 5-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.026796][ T5910] usb 5-1: config 1 interface 0 has no altsetting 0 [ 609.036880][ T5910] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 609.046121][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.054568][ T5910] usb 5-1: Product: syz [ 609.058752][ T5910] usb 5-1: Manufacturer: syz [ 609.064346][ T5910] usb 5-1: SerialNumber: syz [ 609.098209][ T971] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 609.115442][ T971] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 609.134133][ T5816] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.153444][ T971] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 609.181880][ T5816] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 609.204805][ T971] em28xx 3-1:0.0: No AC97 audio processor [ 609.263333][ T5816] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.292637][ T971] usb 3-1: USB disconnect, device number 12 [ 609.311197][ T5816] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 609.344890][ T971] em28xx 3-1:0.0: Disconnecting em28xx [ 609.416642][ T5816] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 609.451460][ T971] em28xx 3-1:0.0: Freeing device [ 609.463717][ T5816] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.488170][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.497485][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 609.508194][ T5910] usbhid 5-1:1.0: can't add hid device: -71 [ 609.525568][ T5910] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 609.533816][ T5816] usb 9-1: Product: syz [ 609.549115][ T5816] usb 9-1: Manufacturer: syz [ 609.570304][ T5910] usb 5-1: USB disconnect, device number 43 [ 609.588859][ T5816] cdc_wdm 9-1:1.0: skipping garbage [ 609.601341][ T5816] cdc_wdm 9-1:1.0: skipping garbage [ 609.638590][ T5816] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 609.647176][ T5816] cdc_wdm 9-1:1.0: Unknown control protocol [ 609.837863][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 609.844561][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 609.851420][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 609.858086][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 609.864752][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 609.871407][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 609.878047][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 609.884693][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 609.891123][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 609.897774][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 609.904146][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 609.910793][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 609.917893][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 609.922676][ T5866] usb 9-1: USB disconnect, device number 30 [ 609.924583][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 609.936616][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 609.972472][ T29] audit: type=1400 audit(1733725670.790:600): avc: denied { bind } for pid=12712 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 610.012404][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 612.161906][ T5816] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 612.525409][ T5816] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.535997][ T5816] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 612.559769][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.580840][ T5816] usb 5-1: config 0 descriptor?? [ 612.582224][ T6700] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 612.591047][ T5816] pwc: Askey VC010 type 2 USB webcam detected. [ 612.751927][ T6700] usb 9-1: Using ep0 maxpacket: 16 [ 612.765279][ T6700] usb 9-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 612.797843][ T6700] usb 9-1: config 1 interface 0 has no altsetting 0 [ 612.817276][ T6700] usb 9-1: New USB device found, idVendor=0525, idProduct=bc41, bcdDevice= 0.40 [ 612.843803][ T6700] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.878108][ T6700] usb 9-1: Product: 풲搅⾈컻틐» [ 613.682013][ T5816] pwc: recv_control_msg error -32 req 02 val 2b00 [ 613.715158][ T5816] pwc: recv_control_msg error -32 req 02 val 2700 [ 613.740788][ T6700] usb 9-1: SerialNumber: Ы [ 614.203788][ T5816] pwc: recv_control_msg error -32 req 02 val 2c00 [ 614.217373][ T5816] pwc: recv_control_msg error -32 req 04 val 1000 [ 614.232144][ T5816] pwc: recv_control_msg error -32 req 04 val 1300 [ 614.244907][ T6700] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 614.302018][ T6700] usb 9-1: USB disconnect, device number 31 [ 614.621589][ T29] audit: type=1400 audit(1733725675.460:601): avc: denied { bind } for pid=12757 comm="syz.9.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 614.714188][ T5816] pwc: recv_control_msg error -32 req 02 val 2100 [ 614.721531][ T5816] pwc: recv_control_msg error -32 req 04 val 1500 [ 615.056355][T12761] FAULT_INJECTION: forcing a failure. [ 615.056355][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 615.069339][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.2.1361 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 615.080127][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 615.090220][T12761] Call Trace: [ 615.093512][T12761] [ 615.096445][T12761] dump_stack_lvl+0x16c/0x1f0 [ 615.101129][T12761] should_fail_ex+0x497/0x5b0 [ 615.105813][T12761] ? fs_reclaim_acquire+0xae/0x150 [ 615.111048][T12761] should_failslab+0xc2/0x120 [ 615.115818][T12761] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 615.121647][T12761] ? __alloc_skb+0x2b1/0x380 [ 615.126254][T12761] __alloc_skb+0x2b1/0x380 [ 615.130698][T12761] ? __pfx___alloc_skb+0x10/0x10 [ 615.135666][T12761] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 615.141666][T12761] netlink_alloc_large_skb+0x69/0x130 [ 615.147107][T12761] netlink_sendmsg+0x689/0xd70 [ 615.151914][T12761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.157254][T12761] ____sys_sendmsg+0xaaf/0xc90 [ 615.162159][T12761] ? copy_msghdr_from_user+0x10b/0x160 [ 615.167643][T12761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.172996][T12761] ___sys_sendmsg+0x135/0x1e0 [ 615.177712][T12761] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.182958][T12761] ? __pfx_lock_release+0x10/0x10 [ 615.188002][T12761] ? trace_lock_acquire+0x14e/0x1f0 [ 615.193242][T12761] ? __fget_files+0x206/0x3a0 [ 615.197928][T12761] __sys_sendmsg+0x16e/0x220 [ 615.202617][T12761] ? __pfx___sys_sendmsg+0x10/0x10 [ 615.207749][T12761] do_syscall_64+0xcd/0x250 [ 615.212274][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.218272][T12761] RIP: 0033:0x7f1033b7fed9 [ 615.222696][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.242334][T12761] RSP: 002b:00007f1034a30058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.250952][T12761] RAX: ffffffffffffffda RBX: 00007f1033d46080 RCX: 00007f1033b7fed9 [ 615.259050][T12761] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 615.267117][T12761] RBP: 00007f1034a300a0 R08: 0000000000000000 R09: 0000000000000000 [ 615.275098][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.283100][T12761] R13: 0000000000000000 R14: 00007f1033d46080 R15: 00007ffc770ad378 [ 615.291101][T12761] [ 615.389908][ T29] audit: type=1400 audit(1733725676.220:602): avc: denied { setattr } for pid=12764 comm="syz.3.1363" path="/proc/828/net/wireless" dev="proc" ino=4026534261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 615.472154][ T29] audit: type=1400 audit(1733725676.310:603): avc: denied { ioctl } for pid=12764 comm="syz.3.1363" path="socket:[35315]" dev="sockfs" ino=35315 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 615.498775][ T5816] pwc: recv_control_msg error -32 req 02 val 2600 [ 615.509546][ T5816] pwc: recv_control_msg error -32 req 02 val 2900 [ 615.526971][ T5816] pwc: recv_control_msg error -32 req 02 val 2800 [ 615.544492][ T5816] pwc: recv_control_msg error -32 req 04 val 1100 [ 615.616513][T12770] FAULT_INJECTION: forcing a failure. [ 615.616513][T12770] name failslab, interval 1, probability 0, space 0, times 0 [ 615.630298][T12770] CPU: 1 UID: 0 PID: 12770 Comm: syz.8.1362 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 615.641278][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 615.651522][T12770] Call Trace: [ 615.654813][T12770] [ 615.657964][T12770] dump_stack_lvl+0x16c/0x1f0 [ 615.662762][T12770] should_fail_ex+0x497/0x5b0 [ 615.667895][T12770] ? fs_reclaim_acquire+0xae/0x150 [ 615.673161][T12770] should_failslab+0xc2/0x120 [ 615.677930][T12770] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 615.683598][T12770] ? lockdep_init_map_type+0x16d/0x7d0 [ 615.689288][T12770] ? security_inode_alloc+0x3b/0x2b0 [ 615.694730][T12770] security_inode_alloc+0x3b/0x2b0 [ 615.699891][T12770] inode_init_always_gfp+0xce4/0x1030 [ 615.705310][T12770] alloc_inode+0x82/0x230 [ 615.709655][T12770] new_inode+0x22/0x210 [ 615.713826][T12770] proc_pid_make_inode+0x22/0x160 [ 615.718872][T12770] proc_pident_instantiate+0x85/0x320 [ 615.724344][T12770] proc_pident_lookup+0x226/0x2a0 [ 615.729394][T12770] __lookup_slow+0x24f/0x460 [ 615.734015][T12770] ? __pfx___lookup_slow+0x10/0x10 [ 615.739322][T12770] ? walk_component+0x342/0x5b0 [ 615.744215][T12770] ? lookup_fast+0x155/0x540 [ 615.748841][T12770] walk_component+0x350/0x5b0 [ 615.753620][T12770] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 615.760055][T12770] path_openat+0x228/0x2d60 [ 615.764571][T12770] ? __schedule+0xe60/0x5ad0 [ 615.769182][T12770] ? __pfx_path_openat+0x10/0x10 [ 615.774141][T12770] do_filp_open+0x20c/0x470 [ 615.778661][T12770] ? __pfx_do_filp_open+0x10/0x10 [ 615.783734][T12770] ? __pfx_kfree_link+0x10/0x10 [ 615.788610][T12770] ? alloc_fd+0x41f/0x760 [ 615.792976][T12770] do_sys_openat2+0x17a/0x1e0 [ 615.797696][T12770] ? __pfx_do_sys_openat2+0x10/0x10 [ 615.802923][T12770] ? irqentry_exit+0x3b/0x90 [ 615.807543][T12770] __x64_sys_openat+0x175/0x210 [ 615.812407][T12770] ? __pfx___x64_sys_openat+0x10/0x10 [ 615.817805][T12770] ? __x64_sys_openat+0x16/0x210 [ 615.822790][T12770] do_syscall_64+0xcd/0x250 [ 615.827317][T12770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.833315][T12770] RIP: 0033:0x7f8ae1b7e840 [ 615.837742][T12770] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 615.857463][T12770] RSP: 002b:00007f8ae2952f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 615.865895][T12770] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8ae1b7e840 [ 615.873874][T12770] RDX: 0000000000000002 RSI: 00007f8ae2952fc0 RDI: 00000000ffffff9c [ 615.881861][T12770] RBP: 00007f8ae2952fc0 R08: 0000000000000000 R09: 0000000000000000 [ 615.889860][T12770] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 615.898106][T12770] R13: 0000000000000000 R14: 00007f8ae1d46160 R15: 00007fffbb66f008 [ 615.906107][T12770] [ 616.461991][ T5816] pwc: recv_control_msg error -71 req 04 val 1200 [ 616.466072][ T29] audit: type=1400 audit(1733725677.310:604): avc: denied { create } for pid=12771 comm="syz.8.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.489059][ T29] audit: type=1400 audit(1733725677.310:605): avc: denied { write } for pid=12771 comm="syz.8.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.511985][ T29] audit: type=1400 audit(1733725677.310:606): avc: denied { nlmsg_write } for pid=12771 comm="syz.8.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.542601][ T5816] pwc: Registered as video103. [ 616.556643][ T5816] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 616.568801][T12774] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.664609][ T29] audit: type=1400 audit(1733725677.510:607): avc: denied { create } for pid=12773 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 616.682246][ T5816] usb 5-1: USB disconnect, device number 44 [ 616.833422][ T971] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 617.134344][ T971] usb 4-1: device descriptor read/64, error -71 [ 618.081682][T12789] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 618.153608][ T971] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 618.324601][ T971] usb 4-1: device descriptor read/64, error -71 [ 618.448798][ T971] usb usb4-port1: attempt power cycle [ 618.872021][ T971] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 618.942887][ T971] usb 4-1: device descriptor read/8, error -71 [ 619.034587][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 619.160051][T12813] x_tables: duplicate entry at hook 2 [ 619.222008][ T6700] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 619.282905][ T971] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 619.304972][ T971] usb 4-1: device descriptor read/8, error -71 [ 619.413191][ T971] usb usb4-port1: unable to enumerate USB device [ 620.133836][T12820] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(96522942243474) <= P.seqno(0) <= S.SWH(96522942243548)) and (P.ackno exists or LAWL(262236853373554) <= P.ackno(262236853373555) <= S.AWH(262236853373555), sending SYNC... [ 620.157141][ T7557] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 620.182277][ T29] audit: type=1400 audit(1733725681.030:608): avc: denied { read } for pid=12776 comm="syz.3.1366" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=56998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 620.188516][ T6700] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 620.229147][ T6700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.243105][ T6700] usb 3-1: config 0 descriptor?? [ 620.256000][ T6700] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 620.352077][ T971] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 620.362171][ T7557] usb 10-1: Using ep0 maxpacket: 16 [ 620.379273][ T7557] usb 10-1: config 0 has an invalid interface number: 230 but max is 0 [ 620.402446][ T7557] usb 10-1: config 0 has no interface number 0 [ 620.419220][ T7557] usb 10-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=8c.81 [ 620.432234][ T7557] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.440742][ T7557] usb 10-1: Product: syz [ 620.448363][ T7557] usb 10-1: Manufacturer: syz [ 620.457205][ T7557] usb 10-1: SerialNumber: syz [ 620.465814][ T7557] usb 10-1: config 0 descriptor?? [ 620.511938][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 620.521270][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.536715][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.547010][ T971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.567953][ T971] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 620.577239][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.595349][ T971] usb 5-1: config 0 descriptor?? [ 620.683645][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.702687][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.721427][ T7557] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in warm state. [ 620.780950][ T7557] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 620.808970][ T7557] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B210)) [ 620.874966][ T7557] usb 10-1: media controller created [ 620.914348][T12806] ALSA: mixer_oss: invalid OSS volume '' [ 620.920714][T12806] ALSA: mixer_oss: invalid OSS volume '' [ 620.923458][ T7557] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.019845][ T6700] gspca_sunplus: reg_w_riv err -71 [ 621.038633][ T6700] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 621.081482][ T6700] usb 3-1: USB disconnect, device number 13 [ 621.180332][ T29] audit: type=1400 audit(1733725682.020:609): avc: denied { map } for pid=12812 comm="syz.8.1374" path="socket:[36077]" dev="sockfs" ino=36077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 621.293891][ T29] audit: type=1400 audit(1733725682.050:610): avc: denied { read } for pid=12812 comm="syz.8.1374" path="socket:[36077]" dev="sockfs" ino=36077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 621.300248][ T7557] DVB: Unable to find symbol lgdt3305_attach() [ 621.324044][ T7557] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B210)' [ 621.332979][ T7557] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully initialized and connected. [ 621.349544][ T7557] usb 10-1: USB disconnect, device number 23 [ 621.402911][ T7557] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully deinitialized and disconnected. [ 621.609127][T12825] FAULT_INJECTION: forcing a failure. [ 621.609127][T12825] name failslab, interval 1, probability 0, space 0, times 0 [ 621.622257][T12825] CPU: 1 UID: 0 PID: 12825 Comm: syz.3.1376 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 621.633238][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.643494][T12825] Call Trace: [ 621.647061][T12825] [ 621.650027][T12825] dump_stack_lvl+0x16c/0x1f0 [ 621.654830][T12825] should_fail_ex+0x497/0x5b0 [ 621.659551][T12825] ? fs_reclaim_acquire+0xae/0x150 [ 621.664896][T12825] should_failslab+0xc2/0x120 [ 621.669738][T12825] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 621.675160][T12825] ? ptlock_alloc+0x1f/0x70 [ 621.679915][T12825] ptlock_alloc+0x1f/0x70 [ 621.684294][T12825] pte_alloc_one+0x74/0x390 [ 621.688966][T12825] __pte_alloc+0x6e/0x3b0 [ 621.693334][T12825] ? __pfx___pte_alloc+0x10/0x10 [ 621.698581][T12825] ? __pfx_lock_release+0x10/0x10 [ 621.703920][T12825] ? do_raw_spin_lock+0x12d/0x2c0 [ 621.708998][T12825] do_pte_missing+0x27ff/0x3e70 [ 621.713923][T12825] ? _raw_spin_unlock+0x28/0x50 [ 621.718819][T12825] ? __pmd_alloc+0x380/0x860 [ 621.723458][T12825] __handle_mm_fault+0x103c/0x2a40 [ 621.728823][T12825] ? __pfx___handle_mm_fault+0x10/0x10 [ 621.734419][T12825] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 621.740544][T12825] ? find_vma+0xc0/0x140 [ 621.744884][T12825] ? __pfx_find_vma+0x10/0x10 [ 621.749885][T12825] handle_mm_fault+0x3fa/0xaa0 [ 621.754913][T12825] do_user_addr_fault+0x7a3/0x13f0 [ 621.760378][T12825] exc_page_fault+0x5c/0xc0 [ 621.764929][T12825] asm_exc_page_fault+0x26/0x30 [ 621.769841][T12825] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 621.775712][T12825] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 621.795689][T12825] RSP: 0018:ffffc9000cba7b58 EFLAGS: 00050202 [ 621.801791][T12825] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 621.809804][T12825] RDX: fffff52001974f79 RSI: ffffc9000cba7bc8 RDI: 0000000020000100 [ 621.817792][T12825] RBP: 0000000020000100 R08: 0000000000000000 R09: fffff52001974f79 [ 621.825773][T12825] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc9000cba7bc8 [ 621.833762][T12825] R13: 0000000020000104 R14: 00007ffffffff000 R15: 0000000000000000 [ 621.841758][T12825] _copy_to_user+0xbb/0xd0 [ 621.846198][T12825] base_sock_ioctl+0x229/0x580 [ 621.850990][T12825] ? __pfx_base_sock_ioctl+0x10/0x10 [ 621.856331][T12825] sock_do_ioctl+0x116/0x280 [ 621.860950][T12825] ? __pfx_sock_do_ioctl+0x10/0x10 [ 621.866117][T12825] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 621.872707][T12825] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 621.879353][T12825] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 621.886535][T12825] sock_ioctl+0x228/0x6c0 [ 621.890890][T12825] ? __pfx_sock_ioctl+0x10/0x10 [ 621.895761][T12825] ? selinux_file_ioctl+0x180/0x270 [ 621.900967][T12825] ? selinux_file_ioctl+0xb4/0x270 [ 621.906104][T12825] ? __pfx_sock_ioctl+0x10/0x10 [ 621.910997][T12825] __x64_sys_ioctl+0x190/0x200 [ 621.915789][T12825] do_syscall_64+0xcd/0x250 [ 621.920378][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.926325][T12825] RIP: 0033:0x7fcc7537fed9 [ 621.930770][T12825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.950671][T12825] RSP: 002b:00007fcc76130058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.959238][T12825] RAX: ffffffffffffffda RBX: 00007fcc75545fa0 RCX: 00007fcc7537fed9 [ 621.967241][T12825] RDX: 0000000020000100 RSI: 0000000080044942 RDI: 0000000000000003 [ 621.975242][T12825] RBP: 00007fcc761300a0 R08: 0000000000000000 R09: 0000000000000000 [ 621.981617][T12829] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 621.983393][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.983594][T12825] R13: 0000000000000000 R14: 00007fcc75545fa0 R15: 00007ffc5139eec8 [ 621.983624][T12825] [ 622.000350][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1378'. [ 622.135767][T12830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1378'. [ 622.210115][ T971] usbhid 5-1:0.0: can't add hid device: -71 [ 622.216390][ T971] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 622.235306][ T971] usb 5-1: USB disconnect, device number 45 [ 622.261969][ T5910] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 622.313413][T12832] FAULT_INJECTION: forcing a failure. [ 622.313413][T12832] name failslab, interval 1, probability 0, space 0, times 0 [ 622.396580][T12832] CPU: 1 UID: 0 PID: 12832 Comm: syz.3.1379 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 622.407597][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 622.417692][T12832] Call Trace: [ 622.420960][T12832] [ 622.423882][T12832] dump_stack_lvl+0x16c/0x1f0 [ 622.428557][T12832] should_fail_ex+0x497/0x5b0 [ 622.433226][T12832] ? fs_reclaim_acquire+0xae/0x150 [ 622.438331][T12832] should_failslab+0xc2/0x120 [ 622.443080][T12832] __kmalloc_noprof+0xcb/0x510 [ 622.447829][T12832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 622.453452][T12832] tomoyo_realpath_from_path+0xb9/0x720 [ 622.458986][T12832] ? tomoyo_path_number_perm+0x235/0x590 [ 622.464629][T12832] ? tomoyo_path_number_perm+0x235/0x590 [ 622.470309][T12832] tomoyo_path_number_perm+0x248/0x590 [ 622.475804][T12832] ? tomoyo_path_number_perm+0x235/0x590 [ 622.481509][T12832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 622.487569][T12832] ? __pfx_lock_release+0x10/0x10 [ 622.492786][T12832] ? trace_lock_acquire+0x14e/0x1f0 [ 622.497992][T12832] ? lock_acquire+0x2f/0xb0 [ 622.502491][T12832] ? __fget_files+0x40/0x3a0 [ 622.507092][T12832] ? __fget_files+0x206/0x3a0 [ 622.511772][T12832] security_file_ioctl+0x9b/0x240 [ 622.516816][T12832] __x64_sys_ioctl+0xb7/0x200 [ 622.521493][T12832] do_syscall_64+0xcd/0x250 [ 622.526017][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.531901][T12832] RIP: 0033:0x7fcc7537fed9 [ 622.536385][T12832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.556090][T12832] RSP: 002b:00007fcc76130058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.564511][T12832] RAX: ffffffffffffffda RBX: 00007fcc75545fa0 RCX: 00007fcc7537fed9 [ 622.572490][T12832] RDX: 0000000020000100 RSI: 0000000040046109 RDI: 0000000000000003 [ 622.580453][T12832] RBP: 00007fcc761300a0 R08: 0000000000000000 R09: 0000000000000000 [ 622.588414][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.596371][T12832] R13: 0000000000000000 R14: 00007fcc75545fa0 R15: 00007ffc5139eec8 [ 622.604352][T12832] [ 622.617910][ T5910] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.629250][ T5910] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 622.638546][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.649204][ T5910] usb 9-1: config 0 descriptor?? [ 622.652617][T12832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.757336][T12838] sp0: Synchronizing with TNC [ 623.048767][T12835] [U] ` [ 623.091515][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 623.170780][T12839] syz.4.1380 (12839): drop_caches: 0 [ 623.661518][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 623.669475][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 623.678987][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 623.686278][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 623.838783][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 624.222196][ T971] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 624.565329][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 624.588362][ T5910] pwc: recv_control_msg error -32 req 04 val 1500 [ 624.631935][ T971] usb 3-1: Using ep0 maxpacket: 32 [ 624.649922][ T971] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.666073][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 624.705887][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.759393][ T971] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 624.779848][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.801719][ T971] usb 3-1: config 0 descriptor?? [ 624.937472][ T29] audit: type=1400 audit(1733725685.780:611): avc: denied { append } for pid=12855 comm="syz.9.1386" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.001432][T12845] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 625.012314][ T971] hub 3-1:0.0: USB hub found [ 625.074174][ T5910] pwc: recv_control_msg error -32 req 02 val 2600 [ 625.076569][ T29] audit: type=1400 audit(1733725685.920:612): avc: denied { connect } for pid=12862 comm="syz.9.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 625.101416][ T5910] pwc: recv_control_msg error -32 req 02 val 2900 [ 625.116164][ T5910] pwc: recv_control_msg error -32 req 02 val 2800 [ 625.130037][ T5910] pwc: recv_control_msg error -32 req 04 val 1100 [ 625.141349][ T29] audit: type=1400 audit(1733725685.970:613): avc: denied { getopt } for pid=12862 comm="syz.9.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 625.142541][ T5910] pwc: Registered as video103. [ 625.173789][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input38 [ 625.366633][ T7557] usb 9-1: USB disconnect, device number 32 [ 626.103704][T12876] FAULT_INJECTION: forcing a failure. [ 626.103704][T12876] name failslab, interval 1, probability 0, space 0, times 0 [ 626.118244][T12876] CPU: 0 UID: 0 PID: 12876 Comm: syz.4.1390 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 626.129056][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 626.139150][T12876] Call Trace: [ 626.142445][T12876] [ 626.145406][T12876] dump_stack_lvl+0x16c/0x1f0 [ 626.150118][T12876] should_fail_ex+0x497/0x5b0 [ 626.154943][T12876] ? fs_reclaim_acquire+0xae/0x150 [ 626.160571][T12876] should_failslab+0xc2/0x120 [ 626.165319][T12876] __kmalloc_noprof+0xcb/0x510 [ 626.170113][T12876] ethnl_default_doit+0x213/0xba0 [ 626.175183][T12876] ? __nla_parse+0x40/0x60 [ 626.179783][T12876] ? __pfx_ethnl_default_doit+0x10/0x10 [ 626.185662][T12876] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 626.193165][T12876] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 626.200581][T12876] genl_family_rcv_msg_doit+0x202/0x2f0 [ 626.206167][T12876] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 626.212268][T12876] ? genl_get_cmd+0x195/0x580 [ 626.216989][T12876] ? __radix_tree_lookup+0x21f/0x2c0 [ 626.222316][T12876] genl_rcv_msg+0x565/0x800 [ 626.226870][T12876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.231938][T12876] ? __pfx_ethnl_default_doit+0x10/0x10 [ 626.237619][T12876] netlink_rcv_skb+0x16b/0x440 [ 626.242510][T12876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.247567][T12876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 626.252891][T12876] ? down_read+0xc9/0x330 [ 626.257255][T12876] ? __pfx_down_read+0x10/0x10 [ 626.262045][T12876] ? netlink_deliver_tap+0x1ae/0xd30 [ 626.267371][T12876] genl_rcv+0x28/0x40 [ 626.271379][T12876] netlink_unicast+0x53c/0x7f0 [ 626.276212][T12876] ? __pfx_netlink_unicast+0x10/0x10 [ 626.281580][T12876] netlink_sendmsg+0x8b8/0xd70 [ 626.286783][T12876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.292125][T12876] ____sys_sendmsg+0xaaf/0xc90 [ 626.296948][T12876] ? copy_msghdr_from_user+0x10b/0x160 [ 626.302446][T12876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.307922][T12876] ___sys_sendmsg+0x135/0x1e0 [ 626.312636][T12876] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.317871][T12876] ? __pfx_lock_release+0x10/0x10 [ 626.322943][T12876] ? trace_lock_acquire+0x14e/0x1f0 [ 626.328300][T12876] ? __fget_files+0x206/0x3a0 [ 626.333409][T12876] __sys_sendmsg+0x16e/0x220 [ 626.338110][T12876] ? __pfx___sys_sendmsg+0x10/0x10 [ 626.343492][T12876] do_syscall_64+0xcd/0x250 [ 626.348159][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.354185][T12876] RIP: 0033:0x7fb6bcf7fed9 [ 626.358659][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.378396][T12876] RSP: 002b:00007fb6bdd74058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.387020][T12876] RAX: ffffffffffffffda RBX: 00007fb6bd145fa0 RCX: 00007fb6bcf7fed9 [ 626.395127][T12876] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 626.403133][T12876] RBP: 00007fb6bdd740a0 R08: 0000000000000000 R09: 0000000000000000 [ 626.411152][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.419384][T12876] R13: 0000000000000000 R14: 00007fb6bd145fa0 R15: 00007ffd80081808 [ 626.427405][T12876] [ 627.196335][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.202768][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.291927][ T971] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 627.488882][ T971] usbhid 3-1:0.0: can't add hid device: -71 [ 627.496533][ T971] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 627.502013][ T7557] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 627.535506][ T971] usb 3-1: USB disconnect, device number 14 [ 627.795642][ T7557] usb 4-1: Using ep0 maxpacket: 16 [ 627.823081][ T7557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.844221][ T7557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.845737][ T7557] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.858808][ T7557] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 628.867986][ T7557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.913482][T12899] FAULT_INJECTION: forcing a failure. [ 628.913482][T12899] name failslab, interval 1, probability 0, space 0, times 0 [ 628.926688][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.2.1397 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 628.937452][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 628.947605][T12899] Call Trace: [ 628.950872][T12899] [ 628.953812][T12899] dump_stack_lvl+0x16c/0x1f0 [ 628.958510][T12899] should_fail_ex+0x497/0x5b0 [ 628.963190][T12899] ? fs_reclaim_acquire+0xae/0x150 [ 628.968294][T12899] should_failslab+0xc2/0x120 [ 628.973050][T12899] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 628.978607][T12899] ? security_file_alloc+0x34/0x2b0 [ 628.983891][T12899] security_file_alloc+0x34/0x2b0 [ 628.988907][T12899] init_file+0x93/0x480 [ 628.993075][T12899] alloc_empty_file+0x91/0x1e0 [ 628.997830][T12899] path_openat+0xe1/0x2d60 [ 629.002244][T12899] ? hlock_class+0x4e/0x130 [ 629.006758][T12899] ? __lock_acquire+0x15a9/0x3c40 [ 629.011839][T12899] ? __pfx_path_openat+0x10/0x10 [ 629.016768][T12899] ? __pfx___lock_acquire+0x10/0x10 [ 629.021963][T12899] ? lock_acquire.part.0+0x11b/0x380 [ 629.027234][T12899] ? find_held_lock+0x2d/0x110 [ 629.032336][T12899] do_filp_open+0x20c/0x470 [ 629.036845][T12899] ? __pfx_do_filp_open+0x10/0x10 [ 629.041891][T12899] ? find_held_lock+0x2d/0x110 [ 629.046666][T12899] ? _raw_spin_unlock+0x28/0x50 [ 629.051606][T12899] ? alloc_fd+0x41f/0x760 [ 629.055951][T12899] do_sys_openat2+0x17a/0x1e0 [ 629.060661][T12899] ? __pfx_do_sys_openat2+0x10/0x10 [ 629.065962][T12899] ? __fget_files+0x206/0x3a0 [ 629.070747][T12899] __x64_sys_creat+0xcd/0x120 [ 629.075511][T12899] ? __pfx___x64_sys_creat+0x10/0x10 [ 629.080836][T12899] ? __pfx_ksys_write+0x10/0x10 [ 629.085918][T12899] ? do_syscall_64+0x91/0x250 [ 629.090599][T12899] do_syscall_64+0xcd/0x250 [ 629.095108][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.101088][T12899] RIP: 0033:0x7f1033b7fed9 [ 629.106069][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.126137][T12899] RSP: 002b:00007f1034a51058 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 629.134736][T12899] RAX: ffffffffffffffda RBX: 00007f1033d45fa0 RCX: 00007f1033b7fed9 [ 629.142724][T12899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 629.150903][T12899] RBP: 00007f1034a510a0 R08: 0000000000000000 R09: 0000000000000000 [ 629.159008][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.166975][T12899] R13: 0000000000000000 R14: 00007f1033d45fa0 R15: 00007ffc770ad378 [ 629.174956][T12899] [ 629.191576][ T7557] usb 4-1: config 0 descriptor?? [ 629.210449][ T7557] usb 4-1: can't set config #0, error -71 [ 629.260171][ T7557] usb 4-1: USB disconnect, device number 26 [ 631.021494][T12917] ipt_REJECT: ECHOREPLY no longer supported. [ 631.571541][T12918] [U] ^L [ 631.961424][T12920] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1399'. [ 678.451905][ T16] sched: DL replenish lagged too much [ 688.277249][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 736.921816][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 736.928925][ C0] rcu: 1-...!: (1 GPs behind) idle=2184/1/0x4000000000000000 softirq=49740/49741 fqs=2 [ 736.940892][ C0] rcu: (detected by 0, t=10502 jiffies, g=45205, q=192 ncpus=2) [ 736.948652][ C0] Sending NMI from CPU 0 to CPUs 1: [ 736.948699][ C1] NMI backtrace for cpu 1 [ 736.948714][ C1] CPU: 1 UID: 0 PID: 7175 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 736.948739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 736.948751][ C1] RIP: 0010:lock_is_held_type+0xf2/0x150 [ 736.948790][ C1] Code: c0 45 31 ed 44 39 f0 41 0f 94 c5 48 c7 c7 40 db 6c 8b e8 91 16 00 00 b8 ff ff ff ff 65 0f c1 05 4c 92 d8 74 83 f8 01 75 2d 9c <58> f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44 [ 736.948810][ C1] RSP: 0018:ffffc90000a18d38 EFLAGS: 00000046 [ 736.948827][ C1] RAX: 0000000000000001 RBX: ffff8880276aaf48 RCX: 0000000000000001 [ 736.948841][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cdb40 RDI: ffffffff8bd1b6a0 [ 736.948855][ C1] RBP: ffff88805c947300 R08: 0000000000000005 R09: 0000000000000000 [ 736.948868][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880276aa440 [ 736.948881][ C1] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000001 [ 736.948894][ C1] FS: 00005555791ec500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 736.948914][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.948929][ C1] CR2: 00007fcc7550a2d8 CR3: 00000000123fa000 CR4: 00000000003526f0 [ 736.948942][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.948954][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.948967][ C1] Call Trace: [ 736.948975][ C1] [ 736.948985][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 736.949010][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 736.949035][ C1] ? nmi_handle+0x1ac/0x5d0 [ 736.949059][ C1] ? lock_is_held_type+0xf2/0x150 [ 736.949083][ C1] ? default_do_nmi+0x6a/0x160 [ 736.949103][ C1] ? exc_nmi+0x170/0x1e0 [ 736.949121][ C1] ? end_repeat_nmi+0xf/0x53 [ 736.949154][ C1] ? lock_is_held_type+0xf2/0x150 [ 736.949179][ C1] ? lock_is_held_type+0xf2/0x150 [ 736.949204][ C1] ? lock_is_held_type+0xf2/0x150 [ 736.949229][ C1] [ 736.949235][ C1] [ 736.949243][ C1] ? __pfx_advance_sched+0x10/0x10 [ 736.949268][ C1] advance_sched+0x819/0xc60 [ 736.949291][ C1] ? timerqueue_del+0x83/0x150 [ 736.949316][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 736.949345][ C1] ? __pfx_advance_sched+0x10/0x10 [ 736.949364][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 736.949397][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 736.949423][ C1] ? read_tsc+0x9/0x20 [ 736.949453][ C1] hrtimer_interrupt+0x392/0x8e0 [ 736.949485][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 736.949511][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 736.949537][ C1] [ 736.949543][ C1] [ 736.949550][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 736.949579][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 736.949606][ C1] Code: b8 ff ff ff ff 65 0f c1 05 f0 cf 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 736.949625][ C1] RSP: 0018:ffffc90010227b50 EFLAGS: 00000206 [ 736.949641][ C1] RAX: 0000000000000046 RBX: 1ffff92002044f6b RCX: 00000000d439196c [ 736.949654][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cdb40 RDI: ffffffff8bd1b6a0 [ 736.949668][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dca598 [ 736.949680][ C1] R10: ffffffff96e52cc7 R11: 0000000000000000 R12: 0000000000000000 [ 736.949693][ C1] R13: ffffffff8e1bb500 R14: 0000000000000000 R15: 0000000000000000 [ 736.949714][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 736.949737][ C1] ? rcu_is_watching+0x12/0xc0 [ 736.949764][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 736.949793][ C1] ? __memcg_slab_post_alloc_hook+0x3ca/0x9b0 [ 736.949823][ C1] ? lock_acquire+0x2f/0xb0 [ 736.949843][ C1] ? __memcg_slab_post_alloc_hook+0x3ca/0x9b0 [ 736.949871][ C1] __memcg_slab_post_alloc_hook+0x3de/0x9b0 [ 736.949897][ C1] ? __memcg_slab_post_alloc_hook+0x3ca/0x9b0 [ 736.949924][ C1] ? kasan_save_track+0x14/0x30 [ 736.949947][ C1] kmem_cache_alloc_noprof+0x366/0x3d0 [ 736.949973][ C1] ? sk_prot_alloc+0x60/0x2a0 [ 736.950002][ C1] sk_prot_alloc+0x60/0x2a0 [ 736.950027][ C1] sk_alloc+0x36/0xb90 [ 736.950045][ C1] inet_create+0x3a1/0x10a0 [ 736.950077][ C1] ? inet_create+0x90/0x10a0 [ 736.950107][ C1] __sock_create+0x335/0x8d0 [ 736.950135][ C1] __sys_socket+0x14f/0x260 [ 736.950161][ C1] ? __pfx___sys_socket+0x10/0x10 [ 736.950191][ C1] __x64_sys_socket+0x72/0xb0 [ 736.950217][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 736.950241][ C1] do_syscall_64+0xcd/0x250 [ 736.950269][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.950296][ C1] RIP: 0033:0x7fcc75381df7 [ 736.950317][ C1] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.950336][ C1] RSP: 002b:00007ffc5139eb58 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 736.950354][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcc75381df7 [ 736.950367][ C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 736.950379][ C1] RBP: 00007ffc5139f27c R08: 00007ffc5139ebac R09: 00007ffc5139ef97 [ 736.950393][ C1] R10: 00007ffc5139ec00 R11: 0000000000000206 R12: 00007fcc7550de40 [ 736.950406][ C1] R13: 000000000009a1bb R14: 0000000000099a57 R15: 00007fcc75510000 [ 736.950425][ C1] [ 736.950678][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g45205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 737.490796][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 737.500767][ C0] rcu: RCU grace-period kthread stack dump: [ 737.506683][ C0] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 737.518600][ C0] Call Trace: [ 737.521888][ C0] [ 737.524830][ C0] __schedule+0xe58/0x5ad0 [ 737.529266][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 737.534501][ C0] ? __pfx___schedule+0x10/0x10 [ 737.539368][ C0] ? schedule+0x298/0x350 [ 737.543709][ C0] ? __pfx_lock_release+0x10/0x10 [ 737.548790][ C0] ? lock_acquire+0x2f/0xb0 [ 737.553759][ C0] ? schedule+0x1fd/0x350 [ 737.558125][ C0] schedule+0xe7/0x350 [ 737.562235][ C0] schedule_timeout+0x124/0x280 [ 737.567324][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 737.572718][ C0] ? __pfx_process_timeout+0x10/0x10 [ 737.578041][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 737.583862][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 737.589544][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 737.594340][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 737.599636][ C0] ? rcu_gp_init+0xc82/0x1630 [ 737.604417][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 737.609640][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 737.615467][ C0] rcu_gp_kthread+0x271/0x380 [ 737.620364][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 737.625704][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 737.630944][ C0] ? __kthread_parkme+0x148/0x220 [ 737.636168][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 737.641640][ C0] kthread+0x2c1/0x3a0 [ 737.645740][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.651119][ C0] ? __pfx_kthread+0x10/0x10 [ 737.656213][ C0] ret_from_fork+0x45/0x80 [ 737.660829][ C0] ? __pfx_kthread+0x10/0x10 [ 737.665545][ C0] ret_from_fork_asm+0x1a/0x30 [ 737.670379][ C0] [ 737.673444][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 737.679776][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 737.690109][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 737.700255][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 737.705675][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 b4 d9 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 2a b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 737.725740][ C0] RSP: 0018:ffffffff8de07d70 EFLAGS: 00000246 [ 737.731948][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b2a0759 [ 737.740026][ C0] RDX: 0000000000000001 RSI: ffff888143ebf800 RDI: ffff888143ebf864 [ 737.748004][ C0] RBP: ffff888143ebf864 R08: 0000000000000001 R09: ffffed10170c6fed [ 737.756180][ C0] R10: ffff8880b8637f6b R11: 0000000000000000 R12: ffff8881482aa000 [ 737.764162][ C0] R13: ffffffff8ee14c60 R14: 0000000000000000 R15: 0000000000000000 [ 737.772139][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 737.781079][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.787670][ C0] CR2: 000000110c331112 CR3: 0000000034dca000 CR4: 00000000003526f0 [ 737.795745][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.803720][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 737.811697][ C0] Call Trace: [ 737.814981][ C0] [ 737.817830][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 737.824269][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 737.829491][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 737.834978][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 737.840713][ C0] ? tmigr_requires_handle_remote+0x141/0x480 [ 737.846901][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 737.853353][ C0] ? hrtimer_run_queues+0x97/0x500 [ 737.858491][ C0] ? update_process_times+0x178/0x2d0 [ 737.863877][ C0] ? __pfx_update_process_times+0x10/0x10 [ 737.869608][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 737.875093][ C0] ? update_wall_time+0x1c/0x40 [ 737.880050][ C0] ? tick_nohz_handler+0x376/0x530 [ 737.885188][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 737.890662][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 737.896070][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 737.901892][ C0] ? read_tsc+0x9/0x20 [ 737.905985][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 737.911216][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 737.917474][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 737.923316][ C0] [ 737.926267][ C0] [ 737.929306][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.935593][ C0] ? ct_kernel_exit+0x139/0x190 [ 737.940732][ C0] ? acpi_safe_halt+0x1a/0x20 [ 737.945605][ C0] acpi_idle_enter+0xc5/0x160 [ 737.950317][ C0] cpuidle_enter_state+0xaa/0x4f0 [ 737.955420][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 737.961281][ C0] cpuidle_enter+0x4e/0xa0 [ 737.965823][ C0] do_idle+0x310/0x3f0 [ 737.969916][ C0] ? __pfx_do_idle+0x10/0x10 [ 737.974523][ C0] ? do_idle+0x2b9/0x3f0 [ 737.978811][ C0] cpu_startup_entry+0x4f/0x60 [ 737.983621][ C0] rest_init+0x16b/0x2b0 [ 737.987905][ C0] ? acpi_subsystem_init+0x133/0x180 [ 737.993383][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 737.999214][ C0] start_kernel+0x3e4/0x4d0 [ 738.003741][ C0] x86_64_start_reservations+0x18/0x30 [ 738.009392][ C0] x86_64_start_kernel+0xb2/0xc0 [ 738.014379][ C0] common_startup_64+0x13e/0x148 [ 738.019347][ C0]