last executing test programs: 10m4.006832139s ago: executing program 2 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x10}) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x3, 0x0, 0x2, 0x4, 0x8, 0xc, 0x5, 0x8000, [{0xc569, 0x6, 0x2, 0xa000}, {0x5, 0x1, 0x2, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x6c}}, 0x0) 10m1.913865989s ago: executing program 2 (id=920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x8000, 0x2) openat$cgroup_int(r1, &(0x7f00000003c0)='blkio.reset_stats\x00', 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r2 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xd7e, 0x29b, 0x4, 0x4010, r3, 0x81, '\x00', 0x0, r0, 0x5, 0x5, 0x5, 0xa, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x5, 0xfffff02c}, {0x6}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x5, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x8, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x3ea, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x7, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x4, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x1, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x200005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x3, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x3ff) mq_notify(0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 10m1.150100805s ago: executing program 2 (id=925): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa00090582"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 9m59.309708729s ago: executing program 2 (id=934): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)='rT', 0x34000}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x400}}], 0x30}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 9m59.040821177s ago: executing program 2 (id=935): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff83"], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b80), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m58.835639863s ago: executing program 2 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 5) 9m58.524306313s ago: executing program 32 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 5) 8m31.733094731s ago: executing program 3 (id=1305): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='v7\x00', 0x208000, 0x0) 8m29.800490344s ago: executing program 3 (id=1316): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect) 8m29.358970225s ago: executing program 3 (id=1317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x1000000, &(0x7f00000002c0)={0x4, 0x0, 0x3ff}, 0x0) 8m29.127197s ago: executing program 3 (id=1320): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0xa0019, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='udf\x00', 0x1004000, &(0x7f0000000180)='),\x00') 8m28.509027815s ago: executing program 3 (id=1321): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x4, 0x80) 8m28.205995118s ago: executing program 3 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020323000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r10}, {r8, 0x1500}], 0x2, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 8m28.014145746s ago: executing program 33 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020323000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r10}, {r8, 0x1500}], 0x2, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3m45.641784952s ago: executing program 0 (id=2379): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="08d71d2fc6ebc9790aa45f795ac1000000020000000200000027f0d6237121e62c9a973e840464ffeec4a06a2317985eff06d286fcff70e1e333d667df515eeb90aa341795c9770b75852b2c123b0f882239b0c165ea4b306624a4333b4efd46612c5fa38236a9867f5a00dc272bb05b5f5b321332c1791f71255768d0d9e05bd890797e8a14bd9c0f951b66a757806d00000000000000"], 0x101000) ioctl$TCFLSH(r2, 0x40384708, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYRES32, @ANYBLOB="0c009900010008006900fcf492cd68c6aaf79702c58e4a05000014870004002f6163766c616e3100000000000000000400cc0008"], 0xe4}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x100000001) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180), 0x4) sendto$ax25(r4, &(0x7f0000000100)="e8c458668e251505922a17779eeb04941e0584cac1bf87ea60b60420c70195fe710ca1f303dd69dd76329126e407b3e01dd34f65e6f448413ae45099d30c2a11a3f9325438f4be2821c98967acbe94db6cfcd5b19e63606aa5ea7df6c190c6acee53764c218c07efa3d9f30809aba61a3699245e9b927bca561d8af82b240862d0aa62e3346a6a44c18103299ee01d1452331521c34ee4", 0x97, 0x20040000, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) geteuid() ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3m43.715081301s ago: executing program 0 (id=2384): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="cfada49eed0300", 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x66) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x13d18) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r4, 0xffff) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='rdma']) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m42.316943712s ago: executing program 0 (id=2387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54010000100001000400000000000000ffffffff000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd4a1400e27f00000100000000000000", @ANYRES32], 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000440)}, 0x20) mkdir(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) llistxattr(&(0x7f0000002280)='./file0\x00', 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x5b81, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0xde}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[], 0x15) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="07000000010000", 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r6, 0xee01, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0xf00, 0x800, 0x400, 0x400, 0x3, 0x7, 0x2, 0x1, {0x747, 0x8, 0x1}, {0x2, 0xeb}, {0x10001, 0x4, 0x1}, {0x2, 0x9, 0x1}, 0x2, 0x41, 0x22, 0x6, 0x1, 0x3, 0x4, 0x0, 0x4, 0x80000001, 0x800, 0xfffffbff, 0x2, 0x200, 0x2, 0x4}) 3m39.582441564s ago: executing program 0 (id=2396): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendto(r2, 0x0, 0x57c7, 0x2000c844, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={0x0, 0x0, 0x4018}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xc8a9) mount(&(0x7f0000000100)=@nullb, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) 3m38.493595496s ago: executing program 0 (id=2400): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='v7\x00', 0x208000, 0x0) 3m36.516947132s ago: executing program 0 (id=2406): socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000002c0)={r5, 0xa9ac}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000280)={0xfffffffe, 0x2005}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0xfff, 0xcbaf, {{0x16, 0x4, 0x1, 0xe, 0x58, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0x3b, [@multicast1, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}]}, @ssrr={0x89, 0x1f, 0x7e, [@private=0x9, @remote, @broadcast, @remote, @broadcast, @local, @local]}]}}}}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x8200, 0x1, 0x0, r6}, 0xc) unshare(0x2c020400) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x6b) 3m36.024361541s ago: executing program 34 (id=2406): socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000002c0)={r5, 0xa9ac}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000280)={0xfffffffe, 0x2005}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0xfff, 0xcbaf, {{0x16, 0x4, 0x1, 0xe, 0x58, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0x3b, [@multicast1, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}]}, @ssrr={0x89, 0x1f, 0x7e, [@private=0x9, @remote, @broadcast, @remote, @broadcast, @local, @local]}]}}}}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x8200, 0x1, 0x0, r6}, 0xc) unshare(0x2c020400) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x6b) 6.18616402s ago: executing program 6 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x40000, &(0x7f0000000000)="32dddf53777f55a71a54ed580fc9d86a3a1b24c3833a86e573aae64046bc075d3a668b0385f076e48ac3048a6a25d4415e057b6c389b712b4631f10669bf5e4afc8f1e549d270541c0c6fa314a39a31001fcc5b61bb3479a", 0x58, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="571a4bd406d0552560ad135b9e70f159f26059f9e8525d6d5c8848c05a649ba12ce878eca8bda2559393df5d8f8b1bb57bb2c03c421ea04833bd2f02ccb846d54fa95cbc") r1 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000280)='\x00') r2 = socket(0x10, 0x803, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r3], 0x0) ioctl$NBD_SET_SOCK(r1, 0x1279, r2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x4004c, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x40, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r6, 0x2d3e, 0x0, 0x4, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x200, 0x7, 0x20000, 0x0, 0x0, 0x3}, 0x1c) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYRES32=r10], 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000340)=0x80000000, 0x4) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000640), 0x0, 0x2) 5.188899187s ago: executing program 6 (id=3252): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10002, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1000000, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000540)={0xfffffffffffffffe, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x8000, 0x700, 0xa827, 0x400000, {{0x8, 0x4, 0x0, 0x3f, 0x20, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @private=0xa010102, {[@timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x1, [{@private=0xa010101, 0xffff8001}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$can_raw(r0, &(0x7f0000000880), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="021300000200000061a0fcfb1829f970fd423e89368ec5617df05dbe0fcadc91be0e2fde0da461caf3d2d7bf73876e3d8e7559d14e998e770c57a0fcf150da3d4e4c7d140e44e090ec03cda062b27f233c12a7439866a002560918879365bb1da955f1f92309bab3fbf06ca5c81bc590"], 0x10}}, 0x0) 5.178745335s ago: executing program 7 (id=3253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000000)=0x20000, 0x4) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/185, 0xb9) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001822", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.286203988s ago: executing program 4 (id=3258): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00', 0x0, 0x0, 0x2a}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x10b9090, &(0x7f0000000000)) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x10b9090, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000300000000000000000000d02648dc3a04e299d8be000000b5f76ed09fc27ad459", @ANYRES32=r0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc0200"/64], 0x58}, 0x1, 0x2}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=r0, @ANYRESHEX=r3], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x6, 0x0) (async) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x3b, 0x0, 0x0) (async) setsockopt$inet6_opts(r6, 0x29, 0x3b, 0x0, 0x0) 4.242846064s ago: executing program 7 (id=3259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x63, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.093952085s ago: executing program 5 (id=3260): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 4.092319437s ago: executing program 6 (id=3261): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa9610c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa1900000000000000000000e2ffffffddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20000000409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb79637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0adc7e77dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9af0012ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357baad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff16c45ba4a125a5a8a0000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca135ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444653fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a46005332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d366047999c825dbc4bea375529699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c2723d70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524ea2f93229106c871d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd405b8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b74ac5f894b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d6674885914abbf8830abeea2a46342e6a7378173cb2df5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb49ef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38aec0d12aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b68448692686ac80d81a89f9c29e27686fd96885205bc21a80b6704c45e42b3656dfdcd9b3048b04752ccf24103e2375ca712f6ed38b06c96bf3da324700"/2640], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$nl_route(r4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x803, 0x0) 3.724911825s ago: executing program 4 (id=3263): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000, 0xfffffffc, 0x0, 0x4, 0x0, 0x18, "fee8a294f8a0e9ffff0d9683dda1af1ea89de2b7fb0a01040000000008000003000200000000003f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}}, 0x0) (async) tkill(r1, 0x8) (async) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000000007"], 0x18}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0x40) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r8, 0x10c, 0x2, &(0x7f00000000c0)=0xf5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940001000fad413e540000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) setitimer(0x1, &(0x7f0000000000), 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="983bf889c2496e112f69b981ee80b6a912053417bbdff2be3714d283b50590a4cafe5c116eba5c3747c43bf48531738fe1da73730a2300b7b9c9936feef4c2966858c4f9e5dff64fa033596dcbc420639f9f1dc7c713cd1115860ab04cdbf7957523a55ae85f0ef06e977e7cb5da4c0b3b2dd7f19205136db4a8dd36b10cbbd08aabd186301b3a283d0794020c42fc6f27200d352763de6541f2501a1e7831730785aff0891805426be2cc610d951d7bc0b3b41341b7053908aff497ae0b1554d0d216cf2952", @ANYRES64=0x0], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback={0xff00000000000000}}, 0x62) 3.724481492s ago: executing program 5 (id=3264): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x24048010) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05082bbd7000fbdbdf25050000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x44881}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0xe, @void}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x1000000, 0x1000000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) 3.724002663s ago: executing program 7 (id=3265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000000)=""/114) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x640}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x0, 0x700, 0x3, 0x6317, {{0x2b, 0x4, 0x1, 0x39, 0xac, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@rr={0x7, 0x2b, 0xb2, [@multicast2, @multicast1, @local, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010100, @local]}, @ssrr={0x89, 0x23, 0x8c, [@multicast2, @local, @loopback, @multicast1, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0x27, 0x77, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @rand_addr=0x64010101, @remote, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0x1b, 0xe7, [@rand_addr=0x64010102, @broadcast, @multicast2, @private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}]}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=@delqdisc={0xe8, 0x25, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x5, 0xc}, {0xd, 0x9}, {0x5, 0xb}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x26}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8004}, 0x48849) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) io_getevents(0x0, 0x37d1, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x428000, 0x8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r5, 0x400) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qgroup_num_dirty_extents\x00', r6, 0x0, 0x8000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r7, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000009"], 0x3c}}, 0x0) 2.936023308s ago: executing program 6 (id=3267): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="cfada49eed0300", 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x66) io_uring_setup(0xaab, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x13d18) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r5, 0xffff) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='rdma']) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.83698782s ago: executing program 4 (id=3268): r0 = getpid() (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x11, 0x10, 0x0, &(0x7f00000004c0)) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:insmod_exec_t:s0\x00', 0x23) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32=r0], 0x0) (rerun: 32) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000020f20c5062ae10010203013afdb80f6200"/33], 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x334, 0x0, 0x54, 0x0, 0x1, @random="11d03434223d"}, 0x10) (async) syz_open_dev$media(&(0x7f0000000000), 0x91, 0x400) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)) 2.832188899s ago: executing program 6 (id=3269): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x169a82, 0x109) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0xa}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, 0x0, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = socket$caif_stream(0x25, 0x1, 0x2) close_range(0xffffffffffffffff, r5, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(r1, 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x9d) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00') write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0xfffffffd]}}], 0xffc8) 2.672387752s ago: executing program 7 (id=3270): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f0000000a80)=""/66, 0x42}], 0x4, &(0x7f0000000b40)=""/152, 0x98}, 0x6}, {{&(0x7f0000000c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/214, 0xd6}, {&(0x7f0000000dc0)=""/20, 0x14}, {&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000f40)=""/154, 0x9a}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000001000)=""/236, 0xec}], 0x9}, 0x3}, {{&(0x7f00000011c0)=@nfc, 0x80, &(0x7f0000001400)=[{&(0x7f0000001240)=""/187, 0xbb}, {&(0x7f0000001300)=""/159, 0x9f}, {&(0x7f00000013c0)=""/63, 0x3f}], 0x3, &(0x7f0000003600)=""/4096, 0x1000}, 0x5932}, {{&(0x7f0000001440)=@l2, 0x80, &(0x7f0000004600)=[{&(0x7f00000014c0)=""/231, 0xe7}], 0x1, &(0x7f0000004640)=""/72, 0x48}}, {{&(0x7f00000046c0)=@nl=@unspec, 0x80, &(0x7f0000004900)=[{&(0x7f0000004740)=""/136, 0x88}, {&(0x7f0000004800)=""/233, 0xe9}], 0x2, &(0x7f0000004940)=""/241, 0xf1}, 0xe4}], 0x5, 0x1001, &(0x7f0000004b80)) 2.396755683s ago: executing program 1 (id=3271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x101}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000001340)=[{{&(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="1ca42d60c74288658254e6f6141b179131d3ff4c80e3b9ecde435528d9e8301fdf2da6c3a70a8c278be0cc45b2f7c36444bd2fdc7bc82cbe", 0x38}, {&(0x7f0000000440)="6508458a061eaaf7618f9421afa2359a196b01eed4ef8abaa0e28cd716301807babdcb217c690eb5929e0c82741c5034d9df74bc35ebf30ce5120ff922d0bdc0c4be06ef572776c689aa2dc7c935c8f78821c4161e6aa2695e065db17aad039c44536bea3232772c16f2766c2752fa5aa65bf1fea4e7b9e42a259c5aefdac0de00887a190ec511ae98f2c7cae27fe80c02dac75e865ba6165a6597b072fbba760daf97de8d2c4bbe598887f3ec53f6915b0f064ced19789484804082ff8f0c64a16a37cf5ef78cad562979e15db796ef17a214c91a8035f5fcbbaeaa4620b09de2524ac8626d3462e40b75e1d1ba822d", 0xf0}, {&(0x7f0000000540)="a11d6eeca6729d260e8bf7c76fae1cf9abb7e0cbb178c6a4060bb4f484dca014b5bffc27a45182548c0f708e7e034abff000df88ef5f", 0x36}, {&(0x7f0000000580)="bc913f777481dc57428647e45ae9fba66ca9e8c5a4b71c080d2e3f428d405860a1f08b11056424b3e1b7bea546b67a2086a5548c6910170f3e76076b93af989801d6da11b9ff9a9d228d2828c021931bfdb3bd26a8cd63a2a51422877f97b0415350bb47d57a17385a3266d2f4c38c55b22cad422214fb4ddd947d55a3", 0x7d}, {&(0x7f0000000600)="a247a1c4a14d4e883216748bc71bf75b24d777651a4291b87cd923622f18ee2f8449b674d5877933f673b0b37516c61ca76a4981a556ec4438d87f85d4101149fb9b320f6ccca9d10700b3a0d9e52437378a6142ff26641618601dc2522e99009edc3934e555f6aeb15e4020b0820b4858dcdc93e328bc4dd26329886c940bba0e645784931e625121d3dfd5704306415b00e668505db1fb376f2d0b8c647522324c762d779c7b804dcb5e", 0xab}, {&(0x7f0000000700)="6c16da1fe1f11a4aef2bd28cae1f34dad729c2bc3f6ef86afeebfec830a74e2087afc919dd94cf852017073143bac6cca308384ee796061c89988d9920089a8f91d21110117f06dc6a6e5fd1f8ef7d218a558a7a24", 0x55}], 0x6, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4000000}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000008c0)="93d19fc541e96ec9fb3a13ebcf1e62a771141f4812fd2784deb5fc9ab44dcf386ef2132278866079ca557cb8b1ec08f1f71dba3f4f347bdf05edde5a9e798b79b463fea42c839d38b508c6c312e3a70200c92fa531178bb45060ca84d79fd7e05089726175e30a242ba015d3b2dfbec26a2da230684dbbfd352e5d13721537f09bdbd256aa218dbb979053351bc63703e5b73a81d3cdd4d4a763e1237386e9", 0x9f}, {&(0x7f0000000980)="98b6bdcae52945b4dda0c624490f73e7770f85fcbdb4fce8855170a852ee49476cb70bfb464458899effe1d9091dcbfd60b74e252ad3293e", 0x38}, {&(0x7f00000009c0)="49e36c18eb227acddad757d38d42a405298d1051a65fad8ffdf0076b36c0bb69bfaf02a47926dc04d854a078d50fc822a68f4964eac5fa6e96ab82bc7f8be6e789dbd0974a0faa526dfc18595754f251b4d8777de5fbe28cc2b7284b8701504792f534a9aac7ed681915a2cb3440082e93b950d23730d9df74b52eafaf8b19661bee4bd479dbbc1a2c4e72dfba841b9bfebf8278c762c318d7e7c024e9f8ae053b8e39a46a8152bca3461f7a86d227b2bb50d2723fa279f080fe46c8c078a38696b81936443980cd5bad9487aa02cc2c96f63378e6b4995dbfb2955d4591c46ba50f45974cc25d", 0xe7}, {&(0x7f0000000ac0)="2d9e579f3345ee02f8ecb18c664e1d12cd295620fbb8451868dfb29ea6cdef60260d4487c523467e", 0x28}, {&(0x7f0000000c40)="546aad070efa546c76c2d230f3b15b02013b8a1242bb03993c610f4a9d1cc28a01c709fd3bbb65f2e4bfacabc8e23a63580502dcf9c97e87b3861f25b9ab44a5e0e698605dcef76171a1c1e776c4e0c7bf8ba85ab90a63c4e3b9081b2058bef6e0331df2aee05ecd99d9f05c334c2271fd71c34d3db069c29b5a37c9c36060f4c2eeba42b02d28dc5538686b372e748ce9db497850b216a1a1a99b0e2d85565eaad18737824b0d59e171a03d35053670e3cefc8eb8b34f8f838b862e98b8e365ea6a97590ffdf4522eda6b047747bceb482a7d67e3dd36731843a32a687a723a7c2aaa77d75d5c", 0xe7}], 0x5, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r3, r3, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r3, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x20, 0x1, 0x1, [r1, r3, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r1, r2]}}], 0x160, 0x881}}, {{&(0x7f0000000ec0)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000b80)="cd9a4f51dd7639f7b68522a06bd71f12d27a097f41599a01cd20364b", 0x1c}, {&(0x7f0000000f40)="9591424015dd2338fad1e6288d9940f679e2f661d7b35a2fce606076659742bc2f9c0c592598ef958f2ad51d6be964ffaa0bb11ea7467e42e8968b52be688efe88e24e3997b9ecd1ccb5ce6a0c9dd2fcd8a8bf0053c96c7bff61cc5464bd7e858f9716d4e04fd3acdce2472df8199a2c42674862e1fb8fed6e4801374f81e37bc8a79dbede008b563775b985536cf71e908d6206c27bd2fb17d0560b04601dd1fa055ce900cd10516904997d381c1927536c38a6af7939d70d1081", 0xbb}, {&(0x7f0000001000)="ff35e0b36bd6da61f4acdc474714f4cb0cb1d6351059fb7df7faf8d951173ea868d8bc2bacb8ba6b8fc514", 0x2b}, {&(0x7f0000001040)="a5abc5a1c35903a085c2c04536856f397230ee62a6406a33ede42cc3315bdd1e2b9ee06727990989fc00254db562b4c45e00b1849aa44b71d4113085da", 0x3d}, {&(0x7f0000001080)="d261015406ac7baa2de5a0261c6b02807be776a0c19a54ae3ec17bf1b68b5a93ddadd0894a957f45a83657fe065fe522193eaa10e3f4e9269826dbf3b348280cf8eda72b8ff1d0fd380f90e06f2c24da71fc0b60c5f830dc427c1637189bf9253f88e67f4acb386f56451f3a16a72deae18c726feadf852a7102f02184b1327b4d28e16a49b12221bae5a0f45ddb97bf33a5b1d6a7d312d0de97e6a5df7ce07b931ad48119f34cc6814a00090994a25299729ab29e1817c56d6bec6e97f9", 0xbe}, {&(0x7f0000001140)="569a52134d6d83e8d8b7a1b0b14a9fbdf40ed4a61de70bddeb0c8388e842d79d4cd8d80a1bbad765ab07305a1827cdd5a30caa415320f9971baf864e1a8bbb8c8c21cf03cc075756c89e6953ccde8aa202", 0x51}], 0x6, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r3]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r2, r3, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0xc0, 0x8081}}], 0x3, 0x40488c1) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) timerfd_create(0x0, 0x0) (async, rerun: 64) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (rerun: 64) ftruncate(r6, 0x8208200) (async) accept4$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000380)=0x10, 0x800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) (async, rerun: 32) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x200, 0x81}]}) (rerun: 32) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.866513971s ago: executing program 6 (id=3272): r0 = socket$inet(0x2, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000000)="00a357399c8824d70ac0eb3e2038906852e6509077d2337015cfdb11f4e33b6f7ccdd973e79dd672cf5e9f5b004d08d85b", 0x31) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0xfbffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/15, 0xfffffe9c, 0x358) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0xc0000010}) tkill(0x0, 0x12) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 1.693084681s ago: executing program 7 (id=3273): r0 = socket(0x848000000015, 0x800, 0xfffffff8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) geteuid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000400"/20, @ANYRESOCT=r0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002580)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) getpgid(0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002b80)) getgroups(0x4, &(0x7f0000002bc0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000002c0), &(0x7f00000005c0)="ff39b3fc0aa43e3d0403cc5299ea7d2bc4ff59ee85c3fbb2d3d15d3a9d56d8843518a09c9bcd4f996ea6946463c3c6d5f0948e2486a856f3764d5e0091767b779f088c4bf2d5", 0x46, 0x4) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4000, @initdev={0xac, 0x1e, 0xfa, 0x0}}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) socket$netlink(0x10, 0x3, 0xf) fstat(r0, &(0x7f0000002c00)) 1.613083841s ago: executing program 1 (id=3274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 1.57422331s ago: executing program 4 (id=3275): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000), 0x10) socket(0x18, 0xa, 0x2) close(r2) 1.563901986s ago: executing program 5 (id=3276): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x7000000, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x400c4) 1.368940753s ago: executing program 5 (id=3277): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f00000001c0), &(0x7f0000000280)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='romfs\x00', 0x208090, 0x0) 1.246542647s ago: executing program 1 (id=3278): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 818.203981ms ago: executing program 4 (id=3279): syz_emit_ethernet(0x22, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x62, 0x700, 0x1, 0x33, 0x0, @remote, @loopback}}}}}, 0x0) 528.916596ms ago: executing program 7 (id=3280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000000)=""/114) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x640}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x0, 0x700, 0x3, 0x6317, {{0x2b, 0x4, 0x1, 0x39, 0xac, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@rr={0x7, 0x2b, 0xb2, [@multicast2, @multicast1, @local, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010100, @local]}, @ssrr={0x89, 0x23, 0x8c, [@multicast2, @local, @loopback, @multicast1, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0x27, 0x77, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @rand_addr=0x64010101, @remote, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0x1b, 0xe7, [@rand_addr=0x64010102, @broadcast, @multicast2, @private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}]}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=@delqdisc={0xe8, 0x25, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x5, 0xc}, {0xd, 0x9}, {0x5, 0xb}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x26}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8004}, 0x48849) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) io_getevents(0x0, 0x37d1, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x428000, 0x8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r5, 0x400) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qgroup_num_dirty_extents\x00', r6, 0x0, 0x8000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r7, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000009"], 0x3c}}, 0x0) 518.97174ms ago: executing program 1 (id=3281): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x44c88860, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x24522716a989086f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000200)={0xb, 0x1, {0xffffffffffffffff, 0x3, 0x9, 0x0, 0x3}, 0xffff597d}) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000140)={0x60, 0xffffffffffffffda, r1, {{0x3, 0x8000000000000000, 0x9, 0x8, 0x9, 0x60, 0x3, 0x81}}}, 0x60) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x800000008ec0, 0xa) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) 320.657206ms ago: executing program 5 (id=3282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 288.826157ms ago: executing program 1 (id=3283): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvmmsg(0xffffffffffffffff, &(0x7f0000004a40)=[{{&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f0000000a80)=""/66, 0x42}], 0x4, &(0x7f0000000b40)=""/152, 0x98}, 0x6}, {{&(0x7f0000000c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/214, 0xd6}, {&(0x7f0000000dc0)=""/20, 0x14}, {&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000f40)=""/154, 0x9a}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000001000)=""/236, 0xec}], 0x9}, 0x3}, {{&(0x7f00000011c0)=@nfc, 0x80, &(0x7f0000001400)=[{&(0x7f0000001240)=""/187, 0xbb}, {&(0x7f0000001300)=""/159, 0x9f}, {&(0x7f00000013c0)=""/63, 0x3f}], 0x3, &(0x7f0000003600)=""/4096, 0x1000}, 0x5932}, {{&(0x7f0000001440)=@l2, 0x80, &(0x7f0000004600)=[{&(0x7f00000014c0)=""/231, 0xe7}], 0x1, &(0x7f0000004640)=""/72, 0x48}}, {{&(0x7f00000046c0)=@nl=@unspec, 0x80, &(0x7f0000004900)=[{&(0x7f0000004740)=""/136, 0x88}, {&(0x7f0000004800)=""/233, 0xe9}], 0x2, &(0x7f0000004940)=""/241, 0xf1}, 0xe4}], 0x5, 0x1001, &(0x7f0000004b80)) 144.947067ms ago: executing program 5 (id=3284): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='ex:') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r2, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = fanotify_init(0x10, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x400, 0x0, r5, 0x0) fanotify_mark(r4, 0x41, 0x8000038, r5, 0x0) fanotify_mark(r4, 0x80, 0x0, r5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000640)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="002307000000070cae36340c38c6f50fc00a7954"], 0x0, 0x0, 0x0, 0x0}, 0x0) fdatasync(r6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) 122.147012ms ago: executing program 4 (id=3285): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000140)={"f3fc8c0e771a5eaf7b96650d89b5809956919766d9a13368d0c5c98c26a6", 0x1, 0x0, 0x0, 0x1, 0x7432, 0x1, 0x1a, 0x4, [0x8, 0x0, 0x2, 0x3, 0x5, 0xc, 0x9, 0xe3, 0x800, 0x3, 0x7, 0x4, 0x5, 0x10, 0x1, 0xff, 0x3, 0x1, 0x1]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x8, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x20, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x1f, &(0x7f0000000100)=@string={0x1f, 0x3, "197d1810aa13ea08d1167ec2a84dba5bf303caa246a6918294909dd115"}}]}) 0s ago: executing program 1 (id=3286): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x4, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="960318cedf227c272b0c78c01b48e92577f4681c38343e5fd3c5bbdbba40c1955e6011fefbd241f28dd5e5763769e55f333f716d2ec7806af4f7be4b8d2deadba2cdfd50ff06337c3cdee8c94e50bef771ef1ea1f27b9b7547ab8685f7a0d680079d33f0854cc0136148437f91663981d2c0bfaf20cbd2e09fa2b10901fe97792fcd41f0c1e84fa2b7de4efc6405ee752038fbea5f8137cf250d8fc54931e1ffb6b75236e3eea5a45063780b19f1ef7fc25d325f199475933559d4fa1a76a200f961ec93842dee90c31046f88b2e19986ef63e85517c84707a0cc7d3b70df936f280fc784b6c70e2", 0xe8}, {&(0x7f0000000300)="84e6c172fe06bcfe6aa266387d11d6333fa4c9a3a8ac880f48f7b01bbac82e406adb08e6cdc34a2db195ce81e32de607f084b75450b783b730f966e4f358b919056fe06cb84af7c126d37abd5a673e425da76f4796e51c7a0f506b4b6368df27e676509f5f179cdc3d6aeb89361a8f04cf62ec3a714d4e850993dd981d9084ef57468c16ffa785683b05c32547ad76a512914e6ef0599ca92209a539518aa2173008a238b584077104813c008f973fdd367742f425831e7d3ed5d5cadb8fbda82df51a639fc86ada6c40", 0xca}], 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): r 54 [ 734.660751][ T6259] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 735.022105][ T6259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.033258][ T6259] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 735.042996][ T6259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.054088][ T6259] usb 5-1: config 0 descriptor?? [ 735.686628][ T6259] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 735.730166][ T6259] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001D/input/input33 [ 735.871450][ T6259] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 735.908156][ T29] audit: type=1400 audit(1739352742.396:1577): avc: denied { map } for pid=22432 comm="syz.6.2530" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 736.040705][ T5867] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 736.058642][ T29] audit: type=1400 audit(1739352742.396:1578): avc: denied { execute } for pid=22432 comm="syz.6.2530" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 736.262569][ T5867] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 736.336264][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.374479][ T5867] usb 2-1: config 0 descriptor?? [ 736.390314][ T5867] usb 2-1: selecting invalid altsetting 1 [ 736.414009][ T5867] flexcop_usb: set interface failed. [ 736.436934][ T5867] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 736.710622][ T6259] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 736.796620][ T45] ipheth 6-1:8.39: Unable to find endpoints [ 736.953977][ T45] usb 6-1: USB disconnect, device number 40 [ 736.997160][ T6259] usb 7-1: Using ep0 maxpacket: 32 [ 737.011025][ T6259] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.136138][ T5871] usb 5-1: USB disconnect, device number 71 [ 737.180845][ T5817] Bluetooth: hci2: command 0x0405 tx timeout [ 737.574858][ T6259] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.600588][ T6259] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 737.616081][ T6259] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.684657][ T6259] usb 7-1: config 0 descriptor?? [ 738.129826][ T6259] kone 0003:1E7D:2CED.001E: unknown main item tag 0x3 [ 738.144436][ T6259] kone 0003:1E7D:2CED.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 738.390466][ T6259] kone 0003:1E7D:2CED.001E: couldn't init struct kone_device [ 738.449123][ T6259] kone 0003:1E7D:2CED.001E: couldn't install mouse [ 738.796852][ T6259] kone 0003:1E7D:2CED.001E: probe with driver kone failed with error -5 [ 738.838888][ T6259] usb 7-1: USB disconnect, device number 36 [ 738.935837][ T6260] usb 2-1: USB disconnect, device number 55 [ 739.410600][T22593] FAULT_INJECTION: forcing a failure. [ 739.410600][T22593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.453774][T22593] CPU: 1 UID: 0 PID: 22593 Comm: syz.5.2541 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 739.453797][T22593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 739.453806][T22593] Call Trace: [ 739.453811][T22593] [ 739.453817][T22593] dump_stack_lvl+0x16c/0x1f0 [ 739.453840][T22593] should_fail_ex+0x50a/0x650 [ 739.453866][T22593] _copy_to_user+0x32/0xd0 [ 739.453881][T22593] video_usercopy+0xf3e/0x1620 [ 739.453898][T22593] ? __pfx___video_do_ioctl+0x10/0x10 [ 739.453924][T22593] ? __pfx_video_usercopy+0x10/0x10 [ 739.453952][T22593] v4l2_ioctl+0x1ba/0x250 [ 739.453974][T22593] ? __pfx_v4l2_ioctl+0x10/0x10 [ 739.453998][T22593] __x64_sys_ioctl+0x190/0x200 [ 739.454021][T22593] do_syscall_64+0xcd/0x250 [ 739.454039][T22593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.454060][T22593] RIP: 0033:0x7f672e58cde9 [ 739.454072][T22593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.454086][T22593] RSP: 002b:00007f672f4c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.454101][T22593] RAX: ffffffffffffffda RBX: 00007f672e7a5fa0 RCX: 00007f672e58cde9 [ 739.454112][T22593] RDX: 0000400000000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 739.454121][T22593] RBP: 00007f672f4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 739.454130][T22593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.454138][T22593] R13: 0000000000000000 R14: 00007f672e7a5fa0 R15: 00007ffce57a70a8 [ 739.454157][T22593] [ 739.713362][ T29] audit: type=1400 audit(1739352746.176:1579): avc: denied { accept } for pid=22599 comm="syz.5.2544" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 739.981214][ T6260] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 740.231153][T22619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2545'. [ 740.247834][ T29] audit: type=1400 audit(1739352746.696:1580): avc: denied { create } for pid=22609 comm="syz.4.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 740.379852][ T6260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.405853][T22619] speed is unknown, defaulting to 1000 [ 740.529702][ T6260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.550625][ T6260] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 740.563607][ T29] audit: type=1400 audit(1739352746.716:1581): avc: denied { write } for pid=22609 comm="syz.4.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 740.596908][ T6260] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 740.665618][ T6260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.685181][ T6260] usb 2-1: config 0 descriptor?? [ 741.024445][T22619] speed is unknown, defaulting to 1000 [ 741.370042][ T29] audit: type=1400 audit(1739352747.856:1582): avc: denied { append } for pid=22594 comm="syz.1.2543" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 741.939099][T22597] syz.1.2543 (22597): drop_caches: 2 [ 742.011277][ T29] audit: type=1400 audit(1739352748.486:1583): avc: denied { map } for pid=22663 comm="syz.5.2547" path="socket:[46678]" dev="sockfs" ino=46678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 742.589386][ T29] audit: type=1400 audit(1739352748.486:1584): avc: denied { read } for pid=22663 comm="syz.5.2547" path="socket:[46678]" dev="sockfs" ino=46678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 742.710450][ T6260] hid-led 0003:27B8:01ED.001F: probe with driver hid-led failed with error -71 [ 742.831038][ T6260] usb 2-1: USB disconnect, device number 56 [ 743.593793][T22706] netlink: 'syz.4.2552': attribute type 2 has an invalid length. [ 743.602864][T22706] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 743.611614][T22706] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2552'. [ 743.789158][ T29] audit: type=1400 audit(1739352750.276:1585): avc: denied { read write } for pid=22704 comm="syz.4.2552" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 744.015846][ T29] audit: type=1400 audit(1739352750.276:1586): avc: denied { open } for pid=22704 comm="syz.4.2552" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 745.618676][T22749] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 745.640622][ T6260] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 745.653123][T22749] overlayfs: missing 'lowerdir' [ 745.820188][ T6260] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.860635][ T6260] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 745.880869][ T6260] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 745.966518][ T6260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.001053][T22737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 746.022609][ T6260] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 746.247246][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 746.392232][ T6260] usb 2-1: USB disconnect, device number 57 [ 746.496741][T22802] netlink: 2716 bytes leftover after parsing attributes in process `syz.7.2561'. [ 746.580611][ T970] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 746.687272][ T29] audit: type=1400 audit(1739352753.176:1587): avc: denied { read } for pid=22803 comm="syz.4.2564" laddr=127.0.0.1 lport=43840 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 746.738260][T22807] netlink: 'syz.4.2564': attribute type 33 has an invalid length. [ 746.749202][T22807] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2564'. [ 746.763271][ T970] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 746.771862][ T970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.783572][T22807] netlink: 'syz.4.2564': attribute type 10 has an invalid length. [ 746.791499][ T970] usb 6-1: config 0 has no interface number 0 [ 746.798005][ T970] usb 6-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 746.871905][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.891002][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.891417][ T29] audit: type=1400 audit(1739352753.376:1588): avc: denied { write } for pid=22803 comm="syz.4.2564" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 746.917724][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.144515][ T970] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 747.186707][ T970] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 747.210637][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.237890][ T970] usb 6-1: config 0 descriptor?? [ 747.247750][T22773] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 747.301422][ T970] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 747.500936][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2560'. [ 747.540661][T22773] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2560'. [ 747.800866][ T970] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 747.968922][ T970] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 747.995941][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.037328][ T970] usb 2-1: Product: syz [ 748.065359][ T970] usb 2-1: Manufacturer: syz [ 748.085800][ T970] usb 2-1: SerialNumber: syz [ 748.107694][ T970] usb 2-1: config 0 descriptor?? [ 748.401440][ T6433] usb 6-1: Failed to submit usb control message: -110 [ 748.408760][ T6433] usb 6-1: unable to send the bmi data to the device: -110 [ 748.511022][ T6433] usb 6-1: unable to get target info from device [ 748.522835][ T6433] usb 6-1: could not get target info (-110) [ 748.535903][ T6433] usb 6-1: could not probe fw (-110) [ 749.022971][ T6260] usb 6-1: USB disconnect, device number 41 [ 749.184379][ T29] audit: type=1400 audit(1739352755.676:1589): avc: denied { bind } for pid=22880 comm="syz.6.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 749.295491][ T29] audit: type=1400 audit(1739352755.786:1590): avc: denied { listen } for pid=22887 comm="syz.5.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 749.433007][ T29] audit: type=1400 audit(1739352755.806:1591): avc: denied { cmd } for pid=22887 comm="syz.5.2575" path="socket:[47976]" dev="sockfs" ino=47976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 750.531427][ T970] usb-storage 2-1:0.0: USB Mass Storage device detected [ 750.761748][T22933] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2582'. [ 750.964630][ T970] usb 2-1: USB disconnect, device number 58 [ 752.440660][ T5871] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 753.064864][ T5871] usb 2-1: device descriptor read/64, error -71 [ 753.320619][ T5871] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 753.460627][ T5871] usb 2-1: device descriptor read/64, error -71 [ 753.560663][ T29] audit: type=1400 audit(1739352760.046:1592): avc: denied { read write } for pid=22988 comm="syz.6.2591" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 753.588258][ T5871] usb usb2-port1: attempt power cycle [ 753.594975][ T29] audit: type=1400 audit(1739352760.046:1593): avc: denied { open } for pid=22988 comm="syz.6.2591" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 753.830685][ T25] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 753.930659][ T5871] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 753.971058][ T5871] usb 2-1: device descriptor read/8, error -71 [ 753.998632][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.015226][ T25] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 754.066908][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.104658][ T25] usb 6-1: config 0 descriptor?? [ 754.290649][ T45] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 754.499862][ T45] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 754.559070][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 754.616237][ T25] asus 0003:0B05:17E0.0020: hidraw0: USB HID v0.80 Device [HID 0b05:17e0] on usb-dummy_hcd.5-1/input0 [ 754.707038][T23021] fuse: Unknown parameter 'fd0x0000000000000003' [ 754.714183][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 754.739618][ T25] asus 0003:0B05:17E0.0020: Asus input not registered [ 754.780241][T22982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.796383][ T29] audit: type=1326 audit(1739352761.286:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23018 comm="syz.7.2596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c4b8cde9 code=0x0 [ 754.820564][ T25] asus 0003:0B05:17E0.0020: probe with driver asus failed with error -12 [ 754.829854][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 754.841864][T22982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.855736][ T25] usb 6-1: USB disconnect, device number 42 [ 754.862214][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 754.882840][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 754.893141][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.904636][ T45] usb 5-1: config 0 descriptor?? [ 754.910050][T23000] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 756.293559][ T45] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 756.305295][ T45] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 756.694233][ T45] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 757.185923][ T29] audit: type=1400 audit(1739352763.676:1595): avc: denied { mount } for pid=23115 comm="syz.7.2603" name="/" dev="rpc_pipefs" ino=49200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 758.219790][ T5820] usb 5-1: USB disconnect, device number 72 [ 758.818820][ T29] audit: type=1400 audit(1739352765.306:1596): avc: denied { ioctl } for pid=23138 comm="syz.1.2607" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 758.986714][ T29] audit: type=1400 audit(1739352765.476:1597): avc: denied { bind } for pid=23148 comm="syz.6.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 759.028262][ T29] audit: type=1400 audit(1739352765.506:1598): avc: denied { bind } for pid=23148 comm="syz.6.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 759.134749][ T29] audit: type=1400 audit(1739352765.626:1599): avc: denied { relabelfrom } for pid=23152 comm="syz.6.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 759.156240][ T29] audit: type=1400 audit(1739352765.646:1600): avc: denied { relabelto } for pid=23152 comm="syz.6.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 759.187413][T23159] netlink: 'syz.1.2609': attribute type 1 has an invalid length. [ 759.195516][T23159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2609'. [ 759.333606][ T29] audit: type=1326 audit(1739352765.826:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7ffc0000 [ 759.388948][T23176] fuse: Unknown parameter 'fd0x0000000000000003' [ 759.404610][ T29] audit: type=1326 audit(1739352765.846:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7ffc0000 [ 759.493159][ T29] audit: type=1326 audit(1739352765.846:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4282d8cde9 code=0x7ffc0000 [ 759.534414][T23183] tmpfs: Unknown parameter '00000000000000000003mpol' [ 759.550844][ T5820] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 759.559922][ T29] audit: type=1326 audit(1739352765.846:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7ffc0000 [ 759.626788][ T29] audit: type=1326 audit(1739352765.846:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7ffc0000 [ 759.866393][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.878334][ T5820] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 759.889173][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.936708][ T5820] usb 5-1: config 0 descriptor?? [ 760.006494][T23188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 760.020470][T23188] batman_adv: batadv0: Adding interface: gretap1 [ 760.026874][T23188] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.052230][T23188] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 760.754986][T23199] 9pnet_fd: Insufficient options for proto=fd [ 760.892658][ T5820] asus 0003:0B05:17E0.0022: hidraw0: USB HID v0.80 Device [HID 0b05:17e0] on usb-dummy_hcd.4-1/input0 [ 760.940283][ T5820] asus 0003:0B05:17E0.0022: Asus input not registered [ 761.069420][ T5820] asus 0003:0B05:17E0.0022: probe with driver asus failed with error -12 [ 761.079101][T23155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.107276][T23155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.125116][T23218] 9pnet_virtio: no channels available for device syz [ 761.136183][ T5820] usb 5-1: USB disconnect, device number 73 [ 763.084610][T23259] overlayfs: failed to clone upperpath [ 763.232871][ T970] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 763.386265][T23300] FAULT_INJECTION: forcing a failure. [ 763.386265][T23300] name failslab, interval 1, probability 0, space 0, times 0 [ 763.398948][T23300] CPU: 1 UID: 0 PID: 23300 Comm: syz.1.2634 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 763.398968][T23300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 763.398978][T23300] Call Trace: [ 763.398984][T23300] [ 763.398991][T23300] dump_stack_lvl+0x16c/0x1f0 [ 763.399014][T23300] should_fail_ex+0x50a/0x650 [ 763.399039][T23300] ? fs_reclaim_acquire+0xae/0x150 [ 763.399065][T23300] ? tomoyo_encode2+0x100/0x3e0 [ 763.399087][T23300] should_failslab+0xc2/0x120 [ 763.399107][T23300] __kmalloc_noprof+0xcb/0x510 [ 763.399124][T23300] ? d_absolute_path+0x137/0x1b0 [ 763.399145][T23300] ? rcu_is_watching+0x12/0xc0 [ 763.399167][T23300] tomoyo_encode2+0x100/0x3e0 [ 763.399194][T23300] tomoyo_encode+0x29/0x50 [ 763.399216][T23300] tomoyo_realpath_from_path+0x19d/0x720 [ 763.399246][T23300] tomoyo_path_number_perm+0x248/0x590 [ 763.399266][T23300] ? tomoyo_path_number_perm+0x235/0x590 [ 763.399295][T23300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 763.399324][T23300] ? vfs_write+0xaaf/0x1150 [ 763.399361][T23300] ? __pfx_lock_release+0x10/0x10 [ 763.399384][T23300] ? trace_lock_acquire+0x14e/0x1f0 [ 763.399406][T23300] ? lock_acquire+0x2f/0xb0 [ 763.399428][T23300] ? __fget_files+0x40/0x3a0 [ 763.399447][T23300] ? __fget_files+0x206/0x3a0 [ 763.399467][T23300] security_file_ioctl+0x9b/0x240 [ 763.399491][T23300] __x64_sys_ioctl+0xb7/0x200 [ 763.399517][T23300] do_syscall_64+0xcd/0x250 [ 763.399537][T23300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.399560][T23300] RIP: 0033:0x7f4282d8cde9 [ 763.399573][T23300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.399589][T23300] RSP: 002b:00007f4283b1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.399605][T23300] RAX: ffffffffffffffda RBX: 00007f4282fa6080 RCX: 00007f4282d8cde9 [ 763.399616][T23300] RDX: 0000400000000080 RSI: 00000000c008561c RDI: 0000000000000003 [ 763.399626][T23300] RBP: 00007f4283b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 763.399636][T23300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.399645][T23300] R13: 0000000000000000 R14: 00007f4282fa6080 R15: 00007ffeb2f22bc8 [ 763.399668][T23300] [ 763.399715][T23300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 763.968466][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 763.968478][ T29] audit: type=1400 audit(1739352769.846:1638): avc: denied { name_bind } for pid=23295 comm="syz.1.2634" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 764.072701][ T970] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 764.100562][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.113675][ T970] usb 5-1: config 0 descriptor?? [ 764.120607][ T5871] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 764.129992][ T970] usb 5-1: selecting invalid altsetting 1 [ 764.136906][ T970] flexcop_usb: set interface failed. [ 764.143102][ T970] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 764.198531][ T29] audit: type=1326 audit(1739352770.686:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.6.2636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 764.272474][ T5871] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 764.297513][T23309] overlayfs: failed to clone upperpath [ 764.300649][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.329944][ T5871] usb 6-1: config 0 descriptor?? [ 764.346582][ T5871] usb 6-1: selecting invalid altsetting 1 [ 764.365399][ T5871] flexcop_usb: set interface failed. [ 764.380665][ T5871] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 766.114176][ T970] usb 5-1: USB disconnect, device number 74 [ 768.950724][ T45] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 769.159250][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.201152][ T45] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 769.228685][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.253098][ T29] audit: type=1400 audit(1739352775.736:1640): avc: denied { read } for pid=23379 comm="syz.6.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 769.257851][ T45] usb 5-1: config 0 descriptor?? [ 769.882879][ T5871] usb 6-1: USB disconnect, device number 43 [ 770.230806][ T45] asus 0003:0B05:17E0.0023: hidraw0: USB HID v0.80 Device [HID 0b05:17e0] on usb-dummy_hcd.4-1/input0 [ 770.279505][ T45] asus 0003:0B05:17E0.0023: Asus input not registered [ 770.312446][ T45] asus 0003:0B05:17E0.0023: probe with driver asus failed with error -12 [ 770.322245][T23366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.360837][T23366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.468117][ T6260] usb 5-1: USB disconnect, device number 75 [ 770.690637][ T45] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 770.921973][ T45] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 770.933829][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.978545][ T45] usb 6-1: config 0 descriptor?? [ 771.007750][ T45] usb 6-1: selecting invalid altsetting 1 [ 771.030883][ T45] flexcop_usb: set interface failed. [ 771.037529][ T45] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 771.148299][T23435] __vm_enough_memory: pid: 23435, comm: syz.1.2656, bytes: 4503599627366400 not enough memory for the allocation [ 771.376801][ T45] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 772.051804][ T45] usb 5-1: device descriptor read/64, error -71 [ 772.247014][T23458] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2660'. [ 772.300714][ T45] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 772.450591][ T45] usb 5-1: device descriptor read/64, error -71 [ 772.571047][ T45] usb usb5-port1: attempt power cycle [ 772.954364][ T45] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 773.047565][ T45] usb 5-1: device descriptor read/8, error -71 [ 773.340853][ T45] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 773.371398][T23476] speed is unknown, defaulting to 1000 [ 773.371940][ T45] usb 5-1: device descriptor read/8, error -71 [ 773.492382][ T6260] usb 6-1: USB disconnect, device number 44 [ 773.500855][ T45] usb usb5-port1: unable to enumerate USB device [ 773.527240][T23476] speed is unknown, defaulting to 1000 [ 773.914795][T23496] syz.5.2666: attempt to access beyond end of device [ 773.914795][T23496] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 774.575246][T23500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.590828][T23500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.809042][ T29] audit: type=1400 audit(1739352781.296:1641): avc: denied { ioctl } for pid=23510 comm="syz.7.2667" path="socket:[48580]" dev="sockfs" ino=48580 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 774.834829][ T29] audit: type=1400 audit(1739352781.296:1642): avc: denied { getattr } for pid=23510 comm="syz.7.2667" path="socket:[48580]" dev="sockfs" ino=48580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 774.867905][ T29] audit: type=1400 audit(1739352781.296:1643): avc: denied { map } for pid=23510 comm="syz.7.2667" path="socket:[48581]" dev="sockfs" ino=48581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 774.943938][T23508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2668'. [ 775.030893][ T45] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 775.202875][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.270588][ T45] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 775.312560][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.340272][ T45] usb 2-1: config 0 descriptor?? [ 776.038704][ T45] asus 0003:0B05:17E0.0024: hidraw0: USB HID v0.80 Device [HID 0b05:17e0] on usb-dummy_hcd.1-1/input0 [ 776.161585][T23492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.262417][ T45] asus 0003:0B05:17E0.0024: Asus input not registered [ 776.270118][T23492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.280827][ T45] asus 0003:0B05:17E0.0024: probe with driver asus failed with error -12 [ 776.299876][ T45] usb 2-1: USB disconnect, device number 63 [ 777.613425][ T970] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 777.623543][ T29] audit: type=1400 audit(1739352784.106:1644): avc: denied { ioctl } for pid=23632 comm="syz.7.2682" path="uts:[4026533249]" dev="nsfs" ino=4026533249 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 777.650722][ T6260] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 777.658371][ T5871] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 777.792862][ T970] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 777.804183][ T970] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.814718][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 777.825118][ T970] usb 2-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 777.834396][ T6260] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 777.845926][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.854390][ T6260] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 777.865403][ T5871] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 777.875954][ T6260] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 777.885819][ T970] usb 2-1: config 0 descriptor?? [ 777.890853][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.901614][ T6260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.912126][ T5871] usb 5-1: Product: syz [ 777.916563][ T5871] usb 5-1: Manufacturer: syz [ 777.921979][ T5871] usb 5-1: SerialNumber: syz [ 777.927569][T23618] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 777.936148][ T5871] usb 5-1: config 0 descriptor?? [ 777.946225][ T6260] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.958657][ T5871] hub 5-1:0.0: bad descriptor, ignoring hub [ 777.965626][ T5871] hub 5-1:0.0: probe with driver hub failed with error -5 [ 777.979813][ T5871] f81232 5-1:0.0: f81534a converter detected [ 778.162027][ T5871] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 778.190351][ T5871] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 778.226089][ T5871] usb 5-1: USB disconnect, device number 80 [ 778.240280][ T5871] f81232 5-1:0.0: device disconnected [ 778.243110][T23618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2680'. [ 778.299085][ T25] usb 6-1: USB disconnect, device number 45 [ 778.329731][ T970] aquacomputer_d5next 0003:0C70:F012.0025: unknown main item tag 0x0 [ 778.359776][ T970] aquacomputer_d5next 0003:0C70:F012.0025: unknown main item tag 0x0 [ 778.381328][ T970] aquacomputer_d5next 0003:0C70:F012.0025: unknown main item tag 0x0 [ 778.389639][ T970] aquacomputer_d5next 0003:0C70:F012.0025: unknown main item tag 0x0 [ 778.404556][ T970] aquacomputer_d5next 0003:0C70:F012.0025: unknown main item tag 0x0 [ 778.419246][ T970] aquacomputer_d5next 0003:0C70:F012.0025: hidraw0: USB HID v0.05 Device [HID 0c70:f012] on usb-dummy_hcd.1-1/input0 [ 778.438299][ T29] audit: type=1400 audit(1739352784.926:1645): avc: denied { ioctl } for pid=23683 comm="syz.6.2684" path="socket:[48665]" dev="sockfs" ino=48665 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 778.528133][ T25] usb 2-1: USB disconnect, device number 64 [ 778.603304][T23703] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.2685'. [ 778.827473][ T29] audit: type=1400 audit(1739352785.316:1646): avc: denied { create } for pid=23714 comm="syz.7.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 779.160693][ T970] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 779.186944][T23734] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 779.243331][T23743] ptrace attach of ""[23746] was attempted by "./syz-executor exec"[23743] [ 779.258531][ T29] audit: type=1400 audit(1739352785.746:1647): avc: denied { setopt } for pid=23742 comm="syz.5.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 779.330588][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 779.426507][ T970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 779.482335][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 779.585980][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 779.640930][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 779.691948][ T970] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 779.712620][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.721234][ T970] usb 5-1: Product: syz [ 779.726563][ T970] usb 5-1: Manufacturer: syz [ 779.735657][ T970] usb 5-1: SerialNumber: syz [ 779.753686][ T970] usb 5-1: config 0 descriptor?? [ 779.770788][ T970] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 779.789556][T23754] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2695'. [ 779.814579][T23754] netlink: 'syz.6.2695': attribute type 6 has an invalid length. [ 779.856572][T23757] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2696'. [ 779.860540][T23754] netlink: 'syz.6.2695': attribute type 5 has an invalid length. [ 779.925659][T23754] netlink: 'syz.6.2695': attribute type 4 has an invalid length. [ 780.060468][ T29] audit: type=1400 audit(1739352786.536:1648): avc: denied { ioctl } for pid=23768 comm="syz.5.2697" path="socket:[49926]" dev="sockfs" ino=49926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 780.413335][ T29] audit: type=1400 audit(1739352786.906:1649): avc: denied { setopt } for pid=23768 comm="syz.5.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 780.452174][ T6260] usb 5-1: USB disconnect, device number 81 [ 782.295222][ T29] audit: type=1400 audit(1739352788.726:1650): avc: denied { relabelfrom } for pid=23797 comm="syz.5.2703" name="NETLINK" dev="sockfs" ino=49975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 782.332683][ T29] audit: type=1400 audit(1739352788.726:1651): avc: denied { relabelto } for pid=23797 comm="syz.5.2703" name="NETLINK" dev="sockfs" ino=49975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 782.435848][ T29] audit: type=1400 audit(1739352788.726:1652): avc: denied { remount } for pid=23797 comm="syz.5.2703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 782.490453][ T29] audit: type=1400 audit(1739352788.976:1653): avc: denied { write } for pid=23797 comm="syz.5.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 782.859982][T23811] rdma_rxe: rxe_newlink: failed to add lo [ 782.918646][T23811] siw: device registration error -23 [ 782.938745][T23811] : renamed from ipvlan1 [ 783.118485][T23821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2709'. [ 788.112284][T23896] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 788.631258][T23912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2729'. [ 788.844597][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2730'. [ 788.897534][ T29] audit: type=1326 audit(1739352795.386:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23924 comm="syz.6.2731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 789.196898][T23938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2735'. [ 789.523491][T23959] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2739'. [ 789.607129][ T29] audit: type=1326 audit(1739352796.096:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23961 comm="syz.5.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x0 [ 789.720409][T23966] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 791.800774][ T970] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 791.812628][T24014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.852313][T24014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.925487][ T29] audit: type=1400 audit(1739352798.416:1656): avc: denied { name_bind } for pid=24010 comm="syz.7.2752" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 792.575674][ T6260] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 792.584816][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 792.606561][ T970] usb 5-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 792.627468][ T970] usb 5-1: config 1 interface 0 has no altsetting 0 [ 792.707319][ T970] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 792.758902][ T6260] usb 2-1: device descriptor read/64, error -71 [ 792.846649][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.971180][ T970] usb 5-1: Product: syz [ 793.013320][ T970] usb 5-1: Manufacturer: syz [ 793.050741][ T6260] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 793.081254][ T970] usb 5-1: SerialNumber: syz [ 793.250666][ T6260] usb 2-1: device descriptor read/64, error -71 [ 793.362763][ T6260] usb usb2-port1: attempt power cycle [ 793.624979][ T970] usbhid 5-1:1.0: can't add hid device: -71 [ 793.636051][ T970] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 793.655407][ T970] usb 5-1: USB disconnect, device number 82 [ 793.970667][ T6260] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 794.015038][ T6260] usb 2-1: device descriptor read/8, error -71 [ 794.990706][ T6260] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 795.223213][ T6260] usb 2-1: device not accepting address 68, error -71 [ 795.233533][ T6260] usb usb2-port1: unable to enumerate USB device [ 796.591352][ T5871] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 796.660913][ T6260] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 796.742470][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 796.753436][ T5871] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 796.772874][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.791934][ T5871] usb 5-1: config 0 descriptor?? [ 796.808941][ T29] audit: type=1400 audit(1739352803.296:1657): avc: denied { execute } for pid=24117 comm="syz.5.2772" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 796.811260][ T6260] usb 2-1: Using ep0 maxpacket: 16 [ 796.848546][ T6260] usb 2-1: config 7 has an invalid interface number: 75 but max is 3 [ 796.857915][ T6260] usb 2-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 796.868673][ T6260] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 796.877814][ T6260] usb 2-1: config 7 has no interface number 0 [ 796.890764][ T6260] usb 2-1: config 7 interface 75 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.905913][ T6260] usb 2-1: New USB device found, idVendor=12d1, idProduct=8408, bcdDevice=20.94 [ 796.915286][ T6260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.929571][ T6260] usb 2-1: Product: 豥䶲篁댈ፈ鈞詪 [ 796.936313][ T6260] usb 2-1: Manufacturer: Ј [ 796.941010][ T6260] usb 2-1: SerialNumber: 宻陙剶璅턨ࠀ坜쫆凲赚뗙츫쎻継佩ꖭ놩ᓯ꯸☁ㆎ⁥秞 [ 797.335281][ T6260] option 2-1:7.75: GSM modem (1-port) converter detected [ 797.347980][ T6260] usb 2-1: USB disconnect, device number 69 [ 797.354712][ T6260] option 2-1:7.75: device disconnected [ 798.449104][T24168] FAULT_INJECTION: forcing a failure. [ 798.449104][T24168] name failslab, interval 1, probability 0, space 0, times 0 [ 798.462558][T24168] CPU: 1 UID: 0 PID: 24168 Comm: syz.5.2779 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 798.462578][T24168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 798.462588][T24168] Call Trace: [ 798.462592][T24168] [ 798.462597][T24168] dump_stack_lvl+0x16c/0x1f0 [ 798.462612][T24168] should_fail_ex+0x50a/0x650 [ 798.462630][T24168] should_failslab+0xc2/0x120 [ 798.462642][T24168] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 798.462653][T24168] ? skb_clone+0x190/0x3f0 [ 798.462669][T24168] skb_clone+0x190/0x3f0 [ 798.462682][T24168] netlink_deliver_tap+0xabd/0xd30 [ 798.462697][T24168] netlink_unicast+0x5e1/0x7f0 [ 798.462710][T24168] ? __pfx_netlink_unicast+0x10/0x10 [ 798.462726][T24168] netlink_sendmsg+0x8b8/0xd70 [ 798.462740][T24168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.462756][T24168] ____sys_sendmsg+0xaaf/0xc90 [ 798.462773][T24168] ? copy_msghdr_from_user+0x10b/0x160 [ 798.462786][T24168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.462808][T24168] ___sys_sendmsg+0x135/0x1e0 [ 798.462822][T24168] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.462840][T24168] ? __pfx_lock_release+0x10/0x10 [ 798.462854][T24168] ? trace_lock_acquire+0x14e/0x1f0 [ 798.462870][T24168] ? __fget_files+0x206/0x3a0 [ 798.462883][T24168] __sys_sendmsg+0x16e/0x220 [ 798.462897][T24168] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.462918][T24168] do_syscall_64+0xcd/0x250 [ 798.462930][T24168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.462945][T24168] RIP: 0033:0x7f672e58cde9 [ 798.462953][T24168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.462963][T24168] RSP: 002b:00007f672f4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.462972][T24168] RAX: ffffffffffffffda RBX: 00007f672e7a5fa0 RCX: 00007f672e58cde9 [ 798.462979][T24168] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 798.462985][T24168] RBP: 00007f672f4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 798.462990][T24168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.462996][T24168] R13: 0000000000000000 R14: 00007f672e7a5fa0 R15: 00007ffce57a70a8 [ 798.463008][T24168] [ 798.787062][ T29] audit: type=1400 audit(1739352805.246:1658): avc: denied { mount } for pid=24161 comm="syz.1.2778" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 799.312992][ T45] usb 5-1: USB disconnect, device number 83 [ 799.345052][ T29] audit: type=1400 audit(1739352805.836:1659): avc: denied { create } for pid=24171 comm="syz.1.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 799.625430][T24185] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 799.634236][ T29] audit: type=1326 audit(1739352805.896:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24182 comm="syz.4.2782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9650d8cde9 code=0x0 [ 800.555300][T24192] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2784'. [ 800.564610][T24192] unsupported nlmsg_type 40 [ 800.577484][T24191] overlayfs: failed to clone upperpath [ 800.583179][ T29] audit: type=1400 audit(1739352807.066:1661): avc: denied { bind } for pid=24190 comm="syz.1.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 802.820255][ T29] audit: type=1326 audit(1739352809.276:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24241 comm="syz.6.2799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 802.913735][T24242] overlayfs: failed to clone upperpath [ 805.146774][ T29] audit: type=1400 audit(1739352811.536:1663): avc: denied { getopt } for pid=24271 comm="syz.4.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 805.403950][T24279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24279 comm=syz.4.2807 [ 805.847124][T24288] netlink: 'syz.6.2811': attribute type 12 has an invalid length. [ 805.974871][T24300] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2813'. [ 806.201373][ T5820] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 806.766508][T24313] fuse: Bad value for 'fd' [ 806.850977][ T5871] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 807.071123][ T5820] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 807.080201][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.141896][ T5820] usb 6-1: config 0 descriptor?? [ 807.142137][T24330] syz.1.2818: attempt to access beyond end of device [ 807.142137][T24330] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 807.165105][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.176726][ T5871] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 807.179617][ T5820] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 807.186689][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.280400][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.423294][T24307] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 807.505174][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.922544][T24342] Cannot find map_set index 0 as target [ 807.935733][T24342] xt_ecn: cannot match TCP bits for non-tcp packets [ 808.161417][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 808.246624][T24344] team0: Mode changed to "loadbalance" [ 808.258536][T24344] vlan0: entered promiscuous mode [ 808.264675][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 808.302108][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.308429][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.410793][T24291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2809'. [ 808.465595][T24344] team0: Port device vlan0 added [ 808.489601][ T5820] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 808.520292][ T5820] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 808.888899][ T5820] usb 6-1: media controller created [ 808.894439][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 808.901632][ T5820] dvb-usb: MAC address reading failed. [ 808.908784][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.918452][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 810.110962][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 810.119642][ T5820] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 810.322038][ T5820] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 810.446910][ T5820] dvb-usb: schedule remote query interval to 100 msecs. [ 810.472577][T24291] team0 (unregistering): Port device vlan0 removed [ 810.492169][ T5820] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 810.548298][ T5820] usb 5-1: USB disconnect, device number 84 [ 810.602761][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 810.625188][ T970] usb 6-1: USB disconnect, device number 46 [ 810.630579][ T45] dvb-usb: error while querying for an remote control event. [ 810.663277][ T29] audit: type=1326 audit(1739352817.156:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24431 comm="syz.4.2827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9650d8cde9 code=0x0 [ 810.753233][ T970] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 812.312372][T24463] overlay: ./file1 is not a directory [ 813.050204][ T29] audit: type=1400 audit(1739352819.536:1665): avc: denied { append } for pid=24475 comm="syz.1.2834" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 813.081960][T24473] tipc: Started in network mode [ 813.086844][T24473] tipc: Node identity 2ea2686696a6, cluster identity 4711 [ 813.094083][T24473] tipc: Enabled bearer , priority 0 [ 813.729818][T24469] tipc: Disabling bearer [ 813.876956][ T29] audit: type=1400 audit(1739352820.366:1666): avc: denied { write } for pid=24496 comm="syz.6.2840" path="socket:[50784]" dev="sockfs" ino=50784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.929414][T24497] netlink: 320 bytes leftover after parsing attributes in process `syz.6.2840'. [ 814.898297][T24516] syz.1.2843: attempt to access beyond end of device [ 814.898297][T24516] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 815.566830][T24529] No control pipe specified [ 815.874075][T24529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2845'. [ 815.914467][ T29] audit: type=1400 audit(1739352822.406:1667): avc: denied { ioctl } for pid=24533 comm="syz.7.2848" path="socket:[50801]" dev="sockfs" ino=50801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 815.940176][T24534] FAULT_INJECTION: forcing a failure. [ 815.940176][T24534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.978242][T24534] CPU: 0 UID: 0 PID: 24534 Comm: syz.7.2848 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 815.978264][T24534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 815.978272][T24534] Call Trace: [ 815.978276][T24534] [ 815.978283][T24534] dump_stack_lvl+0x16c/0x1f0 [ 815.978305][T24534] should_fail_ex+0x50a/0x650 [ 815.978332][T24534] _copy_to_user+0x32/0xd0 [ 815.978348][T24534] simple_read_from_buffer+0xd0/0x160 [ 815.978373][T24534] proc_fail_nth_read+0x198/0x270 [ 815.978395][T24534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.978417][T24534] ? rw_verify_area+0xcf/0x680 [ 815.978437][T24534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.978458][T24534] vfs_read+0x1df/0xbf0 [ 815.978481][T24534] ? __fget_files+0x1fc/0x3a0 [ 815.978495][T24534] ? __pfx___mutex_lock+0x10/0x10 [ 815.978512][T24534] ? __pfx_vfs_read+0x10/0x10 [ 815.978541][T24534] ? __fget_files+0x206/0x3a0 [ 815.978561][T24534] ksys_read+0x12b/0x250 [ 815.978583][T24534] ? __pfx_ksys_read+0x10/0x10 [ 815.978611][T24534] do_syscall_64+0xcd/0x250 [ 815.978630][T24534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.978651][T24534] RIP: 0033:0x7f19c4b8b7fc [ 815.978663][T24534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 815.978678][T24534] RSP: 002b:00007f19c29f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 815.978692][T24534] RAX: ffffffffffffffda RBX: 00007f19c4da5fa0 RCX: 00007f19c4b8b7fc [ 815.978702][T24534] RDX: 000000000000000f RSI: 00007f19c29f60a0 RDI: 0000000000000005 [ 815.978711][T24534] RBP: 00007f19c29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 815.978719][T24534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 815.978728][T24534] R13: 0000000000000000 R14: 00007f19c4da5fa0 R15: 00007ffceef09a68 [ 815.978748][T24534] [ 817.073645][ T29] audit: type=1400 audit(1739352823.486:1668): avc: denied { connect } for pid=24543 comm="syz.7.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 817.614035][T24567] xt_l2tp: wrong L2TP version: 0 [ 818.479993][T24580] xt_hashlimit: size too large, truncated to 1048576 [ 820.156696][ T29] audit: type=1400 audit(1739352826.636:1669): avc: denied { write } for pid=24603 comm="syz.7.2867" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 820.246044][ T29] audit: type=1400 audit(1739352826.656:1670): avc: denied { ioctl } for pid=24603 comm="syz.7.2867" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 820.430804][ T45] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 820.662014][ T45] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 820.706592][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.881465][ T45] usb 5-1: config 0 descriptor?? [ 820.898062][ T45] usb 5-1: selecting invalid altsetting 1 [ 820.926732][ T45] flexcop_usb: set interface failed. [ 820.961529][T24639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2871'. [ 820.965081][ T45] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 821.281054][T24648] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2869'. [ 821.401964][ T5871] usb 5-1: USB disconnect, device number 85 [ 822.671467][ T29] audit: type=1400 audit(1739352828.356:1671): avc: denied { read } for pid=24683 comm="syz.6.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 823.555220][T24696] overlayfs: failed to clone upperpath [ 823.617270][ T29] audit: type=1400 audit(1739352830.106:1672): avc: denied { write } for pid=24711 comm="syz.5.2884" name="/" dev="ocfs2_dlmfs" ino=51040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 823.617783][T24712] o2cb: This node has not been configured. [ 823.643563][ T29] audit: type=1400 audit(1739352830.106:1673): avc: denied { add_name } for pid=24711 comm="syz.5.2884" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 823.647158][T24712] o2cb: Cluster check failed. Fix errors before retrying. [ 823.676789][T24712] (syz.5.2884,24712,1):user_dlm_register:674 ERROR: status = -22 [ 823.684630][T24712] (syz.5.2884,24712,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 823.777087][ T29] audit: type=1400 audit(1739352830.106:1674): avc: denied { create } for pid=24711 comm="syz.5.2884" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 823.798059][ T29] audit: type=1400 audit(1739352830.106:1675): avc: denied { associate } for pid=24711 comm="syz.5.2884" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 823.819939][ T29] audit: type=1400 audit(1739352830.216:1676): avc: denied { unmount } for pid=10600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 823.850642][ T25] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 824.021084][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 824.030807][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 824.038846][ T25] usb 5-1: config 0 has no interface number 0 [ 824.097766][ T25] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 824.184543][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.212388][ T25] usb 5-1: Product: syz [ 824.224392][ T25] usb 5-1: Manufacturer: syz [ 824.229412][ T25] usb 5-1: SerialNumber: syz [ 824.318986][ T25] usb 5-1: config 0 descriptor?? [ 824.499144][ T25] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 824.520691][ T25] usb 5-1: selecting invalid altsetting 1 [ 824.526437][ T25] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 824.660418][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 824.698543][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 824.811909][ T25] usb 5-1: media controller created [ 824.822225][T24747] netlink: 'syz.1.2892': attribute type 1 has an invalid length. [ 824.850193][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.267657][T24747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.344095][T24747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.520652][ T45] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 825.650643][ T45] usb 2-1: device descriptor read/64, error -71 [ 825.752375][ T5817] Bluetooth: hci2: command 0x0405 tx timeout [ 826.113141][ T25] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 826.135128][ T25] zl10353_read_register: readreg error (reg=127, ret==-110) [ 826.190702][ T45] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 826.351913][ T45] usb 2-1: device descriptor read/64, error -71 [ 826.660705][ T29] audit: type=1400 audit(1739352833.016:1677): avc: denied { connect } for pid=24787 comm="syz.7.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 827.026354][ T45] usb usb2-port1: attempt power cycle [ 827.221368][ T5820] usb 5-1: USB disconnect, device number 86 [ 827.820999][ T45] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 828.060850][ T45] usb 2-1: device not accepting address 72, error -71 [ 829.244312][ T29] audit: type=1400 audit(1739352835.736:1678): avc: denied { mounton } for pid=24824 comm="syz.5.2904" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 829.268229][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.506729][T24819] syz.4.2903: attempt to access beyond end of device [ 829.506729][T24819] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 829.523820][T24826] syz.5.2904: attempt to access beyond end of device [ 829.523820][T24826] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 830.256627][ T29] audit: type=1400 audit(1739352836.736:1679): avc: denied { append } for pid=24815 comm="syz.1.2901" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 830.780819][ T970] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 831.121166][ T970] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 831.142599][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.161572][ T970] usb 5-1: config 0 descriptor?? [ 831.177595][ T970] usb 5-1: selecting invalid altsetting 1 [ 831.183522][ T970] flexcop_usb: set interface failed. [ 831.188973][ T970] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 831.550667][ T45] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 831.596521][T24874] ip6t_srh: unknown srh invflags 7D00 [ 831.741849][ T45] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 831.856660][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.083341][ T45] usb 6-1: config 0 descriptor?? [ 832.215959][ T45] usb 6-1: selecting invalid altsetting 1 [ 832.242612][ T45] flexcop_usb: set interface failed. [ 832.247963][ T45] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 833.019189][ T45] usb 6-1: USB disconnect, device number 47 [ 833.617989][ T6260] usb 5-1: USB disconnect, device number 87 [ 834.418112][ T29] audit: type=1400 audit(1739352840.906:1680): avc: denied { write } for pid=24930 comm="syz.4.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 834.612335][ T29] audit: type=1400 audit(1739352841.106:1681): avc: denied { shutdown } for pid=24944 comm="syz.7.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.622848][T24948] netlink: 'syz.7.2926': attribute type 14 has an invalid length. [ 834.670570][ T45] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 834.759573][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2930'. [ 834.860594][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 834.868966][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 834.878351][ T45] usb 5-1: config 14 has an invalid interface number: 87 but max is 0 [ 834.886875][ T45] usb 5-1: config 14 has no interface number 0 [ 834.897225][ T45] usb 5-1: too many endpoints for config 14 interface 87 altsetting 65: 72, using maximum allowed: 30 [ 834.908367][ T45] usb 5-1: config 14 interface 87 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 834.925936][ T45] usb 5-1: config 14 interface 87 has no altsetting 0 [ 834.934735][ T45] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=2b.d9 [ 834.948097][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.956353][ T45] usb 5-1: Product: syz [ 834.964695][ T45] usb 5-1: Manufacturer: syz [ 834.969323][ T45] usb 5-1: SerialNumber: syz [ 835.323868][ T45] ttusb_dec_send_command: command bulk message failed: error -22 [ 835.368348][ T45] ttusb-dec 5-1:14.87: probe with driver ttusb-dec failed with error -22 [ 835.382875][ T45] usb 5-1: USB disconnect, device number 88 [ 835.498818][ T6260] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 835.523780][ T29] audit: type=1326 audit(1739352842.016:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.6.2933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 835.627509][T24983] overlayfs: failed to clone upperpath [ 835.661879][ T6260] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 835.673862][ T6260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.683334][ T6260] usb 2-1: config 0 descriptor?? [ 835.690052][ T6260] usb 2-1: selecting invalid altsetting 1 [ 835.697899][ T6260] flexcop_usb: set interface failed. [ 835.703287][ T6260] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 838.100629][ T25] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 838.220613][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 838.267399][ T25] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 838.276559][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.286881][ T25] usb 5-1: config 0 descriptor?? [ 838.296931][ T25] usb 5-1: selecting invalid altsetting 1 [ 838.302927][ T25] flexcop_usb: set interface failed. [ 838.308336][ T25] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 838.551235][ T29] audit: type=1326 audit(1739352845.036:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.2945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c4b8cde9 code=0x0 [ 838.686429][ T5871] usb 2-1: USB disconnect, device number 74 [ 839.260561][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 839.690604][ T970] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 839.837447][T25072] tipc: Started in network mode [ 839.842542][T25072] tipc: Node identity 2007ff, cluster identity 4711 [ 839.853264][T25072] tipc: Node number set to 2099199 [ 840.300641][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 840.383237][ T970] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 840.434450][ T29] audit: type=1326 audit(1739352846.886:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25076 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 840.556854][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.672693][ T970] usb 6-1: config 0 descriptor?? [ 840.780661][ T970] usb 6-1: selecting invalid altsetting 1 [ 840.839567][ T970] flexcop_usb: set interface failed. [ 840.847977][ T970] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 840.937530][ T45] usb 5-1: USB disconnect, device number 89 [ 840.942406][ T29] audit: type=1400 audit(1739352847.416:1685): avc: denied { getopt } for pid=25096 comm="syz.6.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 841.285380][ T970] usb 6-1: USB disconnect, device number 48 [ 841.345732][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 841.433411][ T29] audit: type=1326 audit(1739352847.916:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.4.2961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9650d8cde9 code=0x0 [ 841.578297][T25139] overlayfs: failed to resolve './file0': -2 [ 841.590018][T25139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 841.772607][ T5871] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 841.990575][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 841.999719][ T5871] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 842.009110][ T5871] usb 2-1: config 0 has no interface number 0 [ 842.020611][ T5871] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 842.380686][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 842.503659][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.512369][ T5871] usb 2-1: Product: syz [ 842.516586][ T5871] usb 2-1: Manufacturer: syz [ 842.521625][ T5871] usb 2-1: SerialNumber: syz [ 842.531273][ T5871] usb 2-1: config 0 descriptor?? [ 842.540066][ T5871] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 842.696557][ T29] audit: type=1326 audit(1739352849.146:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25140 comm="syz.5.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7fc00000 [ 842.730212][ T29] audit: type=1326 audit(1739352849.146:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25140 comm="syz.5.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f672e58cde9 code=0x7fc00000 [ 842.756985][ T29] audit: type=1326 audit(1739352849.146:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25140 comm="syz.5.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7fc00000 [ 842.795310][ T29] audit: type=1326 audit(1739352849.146:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25140 comm="syz.5.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7fc00000 [ 842.828982][ T29] audit: type=1326 audit(1739352849.146:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25140 comm="syz.5.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7fc00000 [ 842.860131][ T29] audit: type=1326 audit(1739352849.146:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25140 comm="syz.5.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7fc00000 [ 842.889995][ T29] audit: type=1326 audit(1739352849.146:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25140 comm="syz.5.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7fc00000 [ 843.055196][ T5820] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 843.078619][T25165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'. [ 843.221107][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 843.231814][ T5820] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 843.251100][ T5820] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 843.259729][ T5820] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 843.280732][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 843.299706][ T5820] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 843.309492][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 843.322709][ T5820] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 843.331769][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.420562][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 843.492849][ T5820] usb 6-1: config 0 descriptor?? [ 844.458959][ T5871] gspca_spca1528: reg_w err -110 [ 844.463993][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 844.489379][ T5820] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 844.496469][ T5871] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 844.512155][ T5820] usb 6-1: USB disconnect, device number 49 [ 844.522453][ T5820] usblp0: removed [ 845.263756][ T5871] usb 2-1: USB disconnect, device number 75 [ 845.500664][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 845.730942][ T5820] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 845.834314][T25222] tc_dump_action: action bad kind [ 845.946110][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 845.946125][ T29] audit: type=1326 audit(1739352852.436:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.4.2980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9650d8cde9 code=0x0 [ 846.540560][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 846.863182][ T5820] usb 6-1: device not accepting address 50, error -71 [ 847.150447][ T29] audit: type=1326 audit(1739352853.636:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.174077][ T29] audit: type=1326 audit(1739352853.636:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.517812][ T29] audit: type=1326 audit(1739352853.636:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.520562][ T5820] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 847.550561][ T29] audit: type=1326 audit(1739352853.636:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.596623][T25246] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2981'. [ 847.605828][ T29] audit: type=1326 audit(1739352853.636:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.646881][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2983'. [ 847.651745][ T29] audit: type=1326 audit(1739352853.636:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.674653][T25249] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2983'. [ 847.694850][ T29] audit: type=1326 audit(1739352853.636:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.720681][ T29] audit: type=1326 audit(1739352853.636:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.744754][ T29] audit: type=1326 audit(1739352853.636:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25226 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4282d8cde9 code=0x7fc00000 [ 847.774996][ T5820] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 847.857725][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.872980][ T5820] usb 6-1: config 0 descriptor?? [ 848.009477][T25255] IPVS: length: 69 != 8 [ 848.620589][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 848.770112][T25268] FAULT_INJECTION: forcing a failure. [ 848.770112][T25268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.791025][T25268] CPU: 0 UID: 0 PID: 25268 Comm: syz.4.2987 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 848.791050][T25268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 848.791060][T25268] Call Trace: [ 848.791065][T25268] [ 848.791072][T25268] dump_stack_lvl+0x16c/0x1f0 [ 848.791095][T25268] should_fail_ex+0x50a/0x650 [ 848.791123][T25268] _copy_to_user+0x32/0xd0 [ 848.791142][T25268] simple_read_from_buffer+0xd0/0x160 [ 848.791169][T25268] proc_fail_nth_read+0x198/0x270 [ 848.791193][T25268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.791218][T25268] ? rw_verify_area+0xcf/0x680 [ 848.791242][T25268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.791265][T25268] vfs_read+0x1df/0xbf0 [ 848.791290][T25268] ? __fget_files+0x1fc/0x3a0 [ 848.791307][T25268] ? __pfx___mutex_lock+0x10/0x10 [ 848.791326][T25268] ? __pfx_vfs_read+0x10/0x10 [ 848.791357][T25268] ? __fget_files+0x206/0x3a0 [ 848.791379][T25268] ksys_read+0x12b/0x250 [ 848.791403][T25268] ? __pfx_ksys_read+0x10/0x10 [ 848.791435][T25268] do_syscall_64+0xcd/0x250 [ 848.791456][T25268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.791478][T25268] RIP: 0033:0x7f9650d8b7fc [ 848.791492][T25268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 848.791507][T25268] RSP: 002b:00007f9651be0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.791523][T25268] RAX: ffffffffffffffda RBX: 00007f9650fa5fa0 RCX: 00007f9650d8b7fc [ 848.791535][T25268] RDX: 000000000000000f RSI: 00007f9651be00a0 RDI: 0000000000000005 [ 848.791545][T25268] RBP: 00007f9651be0090 R08: 0000000000000000 R09: 0000000000000000 [ 848.791554][T25268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.791564][T25268] R13: 0000000000000000 R14: 00007f9650fa5fa0 R15: 00007fff0686dce8 [ 848.791587][T25268] [ 849.660552][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 849.696381][ T5820] usb 6-1: Cannot read MAC address [ 849.702445][ T5820] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 849.722636][ T5820] usb 6-1: USB disconnect, device number 51 [ 850.049096][T25302] Invalid logical block size (4) [ 850.700565][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 851.740581][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 852.780550][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 853.180715][ T5817] Bluetooth: hci2: command 0x0405 tx timeout [ 853.499928][T25352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 853.514332][T25352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 853.528022][T25353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 853.542736][T25352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 853.561141][T25353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 853.675345][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 853.675359][ T29] audit: type=1326 audit(1739352860.166:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25362 comm="syz.5.3009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x0 [ 855.260848][ T6261] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 855.951927][ T6261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.970851][ T6261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.991017][ T6261] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 856.000070][ T6261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.017377][ T6261] usb 6-1: config 0 descriptor?? [ 856.250662][ T29] audit: type=1400 audit(1739352862.736:1770): avc: denied { write } for pid=25398 comm="syz.4.3017" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 856.387397][ T6261] usbhid 6-1:0.0: can't add hid device: -71 [ 856.393633][ T6261] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 856.437163][ T6261] usb 6-1: USB disconnect, device number 52 [ 856.789594][ T29] audit: type=1326 audit(1739352863.276:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.4.3022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9650d8cde9 code=0x0 [ 856.812549][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.120387][T25431] /dev/nullb0: Can't open blockdev [ 857.241433][ T29] audit: type=1400 audit(1739352863.606:1772): avc: denied { mounton } for pid=25428 comm="syz.1.3023" path="/586/file0" dev="tmpfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 857.264663][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.671226][T25444] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3028'. [ 858.976577][ T29] audit: type=1400 audit(1739352865.466:1773): avc: denied { ioctl } for pid=25452 comm="syz.4.3027" path="/dev/usbmon7" dev="devtmpfs" ino=742 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 859.001882][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.398074][ T29] audit: type=1400 audit(1739352865.886:1774): avc: denied { getopt } for pid=25454 comm="syz.6.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 860.330726][ T5871] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 860.623778][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short [ 860.665837][ T5871] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 860.704612][ T5871] usb 5-1: can't read configurations, error -71 [ 860.894232][ T29] audit: type=1326 audit(1739352867.386:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25497 comm="syz.6.3038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 860.917170][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.997435][T25504] overlayfs: failed to resolve './file1': -2 [ 861.010582][ T6261] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 861.140646][ T25] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 861.160632][ T6261] usb 2-1: Using ep0 maxpacket: 32 [ 861.169376][ T6261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.180646][ T6261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.190378][ T6261] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 861.203800][ T6261] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 861.213819][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.296662][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.308000][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 861.329993][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 861.330966][ T6261] usb 2-1: config 0 descriptor?? [ 861.342248][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.004923][T25500] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 862.020007][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.299266][ T6261] usbhid 2-1:0.0: can't add hid device: -71 [ 862.321603][ T6261] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 862.377366][ T6261] usb 2-1: USB disconnect, device number 76 [ 862.461880][ T5871] usb 6-1: USB disconnect, device number 53 [ 863.182266][T25574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=25574 comm=syz.1.3046 [ 863.280829][T25576] netlink: 'syz.1.3046': attribute type 10 has an invalid length. [ 863.320408][T25576] : (slave bridge0): Enslaving as an active interface with an up link [ 863.645348][ T29] audit: type=1400 audit(1739352870.136:1776): avc: denied { setopt } for pid=25581 comm="syz.1.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 864.460554][ T29] audit: type=1326 audit(1739352870.916:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.7.3052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c4b8cde9 code=0x0 [ 864.500424][T25596] overlayfs: failed to resolve './file1': -2 [ 864.935535][T25612] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3055'. [ 865.264035][T25619] netlink: 'syz.5.3058': attribute type 1 has an invalid length. [ 865.612551][T25619] bond3: entered promiscuous mode [ 865.666575][T25619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.855699][T25625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 866.126402][T25625] bond3: (slave bond4): making interface the new active one [ 866.211606][T25625] bond4: entered promiscuous mode [ 866.236769][T25625] bond3: (slave bond4): Enslaving as an active interface with an up link [ 867.731032][ T29] audit: type=1326 audit(1739352874.176:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25719 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9650d8cde9 code=0x7fc00000 [ 868.877310][ T29] audit: type=1326 audit(1739352875.366:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.5.3071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x0 [ 868.956035][T25756] overlayfs: failed to resolve './file1': -2 [ 869.966618][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.259938][ T29] audit: type=1400 audit(1739352876.576:1780): avc: denied { read } for pid=25754 comm="syz.4.3073" lport=34389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 870.280413][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.286794][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.293213][ T5820] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 870.620665][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 870.641972][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 870.670018][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 870.719975][ T5820] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 870.745974][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 870.769517][ T5820] usb 2-1: Product: syz [ 870.805598][ T5820] usb 2-1: Manufacturer: syz [ 870.819713][ T5820] usb 2-1: SerialNumber: syz [ 870.841385][ T5820] usb 2-1: config 0 descriptor?? [ 871.713086][T25760] loop8: detected capacity change from 0 to 7 [ 871.745295][T25760] Dev loop8: unable to read RDB block 7 [ 871.759315][T25760] loop8: unable to read partition table [ 871.794333][T25760] loop8: partition table beyond EOD, truncated [ 871.924320][T25760] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 871.924320][T25760] ) failed (rc=-5) [ 872.160662][ T29] audit: type=1400 audit(1739352878.626:1781): avc: denied { mount } for pid=25793 comm="syz.6.3081" name="/" dev="autofs" ino=54381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 872.806277][ T29] audit: type=1400 audit(1739352879.296:1782): avc: denied { mount } for pid=25804 comm="syz.4.3082" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 872.811014][T25805] overlay: Unknown parameter 'smackfshat' [ 872.888732][ T29] audit: type=1400 audit(1739352879.296:1783): avc: denied { mounton } for pid=25804 comm="syz.4.3082" path="/593/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 873.032445][ T6342] Bluetooth: (null): Invalid header checksum [ 873.048367][ T6342] Bluetooth: (null): Invalid header checksum [ 873.136377][ T29] audit: type=1400 audit(1739352879.626:1784): avc: denied { create } for pid=25812 comm="syz.6.3084" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 873.179466][ T68] Bluetooth: (null): Invalid header checksum [ 873.214354][ T5820] usb 2-1: USB disconnect, device number 77 [ 873.274219][T23076] Bluetooth: (null): Invalid header checksum [ 873.434131][ T29] audit: type=1326 audit(1739352879.916:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25829 comm="syz.6.3087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 873.527277][ T29] audit: type=1400 audit(1739352880.016:1786): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 873.589851][T25835] overlayfs: failed to clone upperpath [ 874.611648][T25847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3092'. [ 874.997278][T25863] overlay: ./bus is not a directory [ 875.376486][T25877] 9pnet_virtio: no channels available for device 127.0.0.1 [ 875.886950][ T29] audit: type=1400 audit(1739352881.886:1787): avc: denied { mount } for pid=25867 comm="syz.7.3096" name="/" dev="pstore" ino=3494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 875.889151][T25874] syz.4.3098: attempt to access beyond end of device [ 875.889151][T25874] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 876.060353][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 876.098302][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 876.168593][ T29] audit: type=1400 audit(1739352882.646:1788): avc: denied { unmount } for pid=21030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 876.193087][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 876.214225][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 876.223437][ T5817] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 876.238554][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 876.240621][ T29] audit: type=1400 audit(1739352882.686:1789): avc: denied { relabelto } for pid=25871 comm="syz.4.3098" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 876.517143][ T29] audit: type=1400 audit(1739352882.696:1790): avc: denied { associate } for pid=25871 comm="syz.4.3098" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 876.533993][T25876] speed is unknown, defaulting to 1000 [ 876.592205][T25897] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 876.621625][T25900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3101'. [ 876.655831][ T29] audit: type=1326 audit(1739352883.006:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.6.3101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 876.738898][ T29] audit: type=1326 audit(1739352883.226:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25906 comm="syz.4.3103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9650d8cde9 code=0x0 [ 876.806580][T25876] speed is unknown, defaulting to 1000 [ 878.493108][ T5817] Bluetooth: hci5: command tx timeout [ 878.680985][T26022] syz.7.3107: attempt to access beyond end of device [ 878.680985][T26022] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 879.077979][T25876] chnl_net:caif_netlink_parms(): no params data found [ 879.565458][T25876] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.578602][T25876] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.590700][T25876] bridge_slave_0: entered allmulticast mode [ 879.598305][T25876] bridge_slave_0: entered promiscuous mode [ 879.606782][T25876] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.614002][T25876] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.621221][T25876] bridge_slave_1: entered allmulticast mode [ 879.628200][T25876] bridge_slave_1: entered promiscuous mode [ 879.657753][T25876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.683889][T25876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.758134][T25876] team0: Port device team_slave_0 added [ 879.767776][T25876] team0: Port device team_slave_1 added [ 879.837008][T25876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.844835][T25876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.871329][T25876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.883931][T25876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.891104][T25876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.918349][T25876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.993901][T25876] hsr_slave_0: entered promiscuous mode [ 880.005791][T25876] hsr_slave_1: entered promiscuous mode [ 880.017781][T25876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.035466][T25876] Cannot create hsr debugfs directory [ 880.276420][T25876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.641036][ T5817] Bluetooth: hci5: command tx timeout [ 880.900739][ T29] audit: type=1326 audit(1739352887.386:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26266 comm="syz.6.3114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 880.991867][T25876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.005893][T26268] overlayfs: failed to clone upperpath [ 881.112508][T25876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.265799][T25876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.290611][ T29] audit: type=1326 audit(1739352887.746:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26276 comm="syz.5.3116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x0 [ 881.371789][T26283] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3116'. [ 881.639018][T25876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 881.651348][T25876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 881.659502][T25876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 881.669098][T25876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 881.736913][T25876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.757045][T25876] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.768626][T23097] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.775746][T23097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.795627][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.802889][ T2881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.227128][T25876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.302845][T25876] veth0_vlan: entered promiscuous mode [ 882.316147][T25876] veth1_vlan: entered promiscuous mode [ 882.511396][T26318] syz.5.3118: attempt to access beyond end of device [ 882.511396][T26318] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 882.581639][ T970] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 882.760926][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 882.780902][ T5817] Bluetooth: hci5: command tx timeout [ 882.801128][ T970] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.822081][ T970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 882.837314][ T970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 882.839888][T25876] veth0_macvtap: entered promiscuous mode [ 882.848562][ T970] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.866940][ T970] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.877850][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.897097][T25876] veth1_macvtap: entered promiscuous mode [ 882.929864][T25876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.970567][T25876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.987011][T25876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.997637][T25876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.008300][T25876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.019192][T25876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.219799][T25876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.233094][ T970] usb 5-1: usb_control_msg returned -32 [ 883.261379][ T970] usbtmc 5-1:16.0: can't read capabilities [ 883.315733][T25876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.318026][T26329] syz.7.3121: attempt to access beyond end of device [ 883.318026][T26329] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 883.399982][T25876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.462630][T25876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.537303][T25876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.572834][T25876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.653828][T25876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.836569][T25876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.901740][T25876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.966475][T25876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.007707][ T29] audit: type=1400 audit(1739352890.496:1795): avc: denied { read } for pid=26342 comm="syz.7.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 884.369397][T25876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.548179][T25876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.586125][T26346] speed is unknown, defaulting to 1000 [ 884.674902][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.694746][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.729503][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.737947][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.887903][ T5817] Bluetooth: hci5: command tx timeout [ 884.926249][T26346] speed is unknown, defaulting to 1000 [ 885.187671][ T29] audit: type=1326 audit(1739352891.676:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26389 comm="syz.6.3126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 885.193916][T26392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3093'. [ 885.296524][T26395] overlayfs: failed to resolve './file0': -2 [ 885.308561][ T29] audit: type=1400 audit(1739352891.796:1797): avc: denied { write } for pid=26393 comm="syz.5.3127" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 886.069170][T12401] usb 5-1: USB disconnect, device number 92 [ 886.132403][ T29] audit: type=1400 audit(1739352892.626:1798): avc: denied { setopt } for pid=26405 comm="syz.7.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 886.397773][T26421] xt_nfacct: accounting object `syz1' does not exists [ 887.576125][T26436] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3133'. [ 887.586322][T26427] : renamed from bond0 (while UP) [ 888.218400][T20646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.229497][T20646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.245006][T20646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.255534][T20646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.265850][T20646] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 888.273271][T20646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.439460][T26442] speed is unknown, defaulting to 1000 [ 889.664864][T26442] speed is unknown, defaulting to 1000 [ 889.768790][ T29] audit: type=1326 audit(1739352896.256:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26464 comm="syz.5.3140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x0 [ 889.860714][T26470] overlayfs: failed to resolve './file0': -2 [ 889.887895][ T29] audit: type=1400 audit(1739352896.286:1800): avc: denied { ioctl } for pid=26467 comm="syz.6.3141" path="socket:[55828]" dev="sockfs" ino=55828 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 890.022322][ T29] audit: type=1400 audit(1739352896.506:1801): avc: denied { ioctl } for pid=26471 comm="syz.1.3142" path="socket:[55292]" dev="sockfs" ino=55292 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 890.096257][T26442] chnl_net:caif_netlink_parms(): no params data found [ 890.390729][T20646] Bluetooth: hci1: command tx timeout [ 890.415486][T26442] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.433245][T26442] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.447783][T26442] bridge_slave_0: entered allmulticast mode [ 890.467757][T26442] bridge_slave_0: entered promiscuous mode [ 890.483844][T26619] team0: No ports can be present during mode change [ 890.766299][T26442] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.790661][T26442] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.797827][T26442] bridge_slave_1: entered allmulticast mode [ 890.831673][T26442] bridge_slave_1: entered promiscuous mode [ 891.206540][ T6261] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 891.222839][T26442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.252010][T26442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.244139][T26442] team0: Port device team_slave_0 added [ 892.283963][T26442] team0: Port device team_slave_1 added [ 892.291739][ T6261] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 892.300996][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.396095][ T29] audit: type=1400 audit(1739352898.876:1802): avc: denied { create } for pid=26723 comm="syz.7.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 892.448292][ T29] audit: type=1400 audit(1739352898.876:1803): avc: denied { setopt } for pid=26723 comm="syz.7.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 892.475792][T20646] Bluetooth: hci1: command tx timeout [ 892.509065][ T29] audit: type=1400 audit(1739352898.876:1804): avc: denied { write } for pid=26723 comm="syz.7.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 892.538982][ T29] audit: type=1400 audit(1739352898.906:1805): avc: denied { read } for pid=26723 comm="syz.7.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 892.813144][ T6261] usb 2-1: config 0 descriptor?? [ 892.820065][ T6261] usb 2-1: selecting invalid altsetting 1 [ 892.833016][ T6261] flexcop_usb: set interface failed. [ 892.838350][ T6261] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 892.882979][T26442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.890008][T26442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.917113][T26442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.945964][T26442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.965127][T26442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.000396][T26442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.016254][ T29] audit: type=1400 audit(1739352899.506:1806): avc: denied { write } for pid=26740 comm="syz.6.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 894.180914][T26442] hsr_slave_0: entered promiscuous mode [ 894.190156][T26442] hsr_slave_1: entered promiscuous mode [ 894.216189][T26442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.245537][T26442] Cannot create hsr debugfs directory [ 894.399085][ T29] audit: type=1326 audit(1739352900.886:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26833 comm="syz.6.3158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048af8cde9 code=0x0 [ 894.457412][T26858] overlayfs: failed to resolve './file0': -2 [ 894.550931][T20646] Bluetooth: hci1: command tx timeout [ 895.075131][T26442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 895.083967][T26442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 895.097322][T26442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 895.109051][T26442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 895.187870][T26886] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 895.208685][T26886] overlayfs: conflicting lowerdir path [ 895.276787][ T6259] usb 2-1: USB disconnect, device number 78 [ 895.345903][T26442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.378976][ T29] audit: type=1400 audit(1739352901.866:1808): avc: denied { unmount } for pid=10600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 895.381937][T26442] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.417903][T26884] overlayfs: failed to clone upperpath [ 895.851578][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.858650][ T6696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.912282][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.920626][ T6696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.261908][T26442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.645672][T20646] Bluetooth: hci1: command tx timeout [ 897.069150][T26442] veth0_vlan: entered promiscuous mode [ 897.108839][T26442] veth1_vlan: entered promiscuous mode [ 897.137905][T26442] veth0_macvtap: entered promiscuous mode [ 897.149783][T26442] veth1_macvtap: entered promiscuous mode [ 897.176282][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.187663][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.217176][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.234770][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.247288][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.258166][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.268519][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.288753][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.299722][T26442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.309748][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.320287][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.330282][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.340919][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.350759][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.361410][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.371307][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.381840][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.392927][T26442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.440295][T26442] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.449250][T26442] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.458292][T26442] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.467037][T26442] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.204764][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.219077][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.279065][T23081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.293919][ T29] audit: type=1326 audit(1739352904.786:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26951 comm="syz.5.3173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x0 [ 898.320593][T23081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.349179][T26958] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 898.450589][ T6261] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 898.607072][ T6261] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 898.642429][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.845891][ T6261] usb 2-1: config 0 descriptor?? [ 898.878414][ T6261] usb 2-1: selecting invalid altsetting 1 [ 898.884598][ T6261] flexcop_usb: set interface failed. [ 898.914152][ T6261] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 899.483450][ T29] audit: type=1326 audit(1739352905.966:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 899.590971][ T29] audit: type=1326 audit(1739352905.966:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 899.615701][ T29] audit: type=1326 audit(1739352905.976:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 899.655916][ T29] audit: type=1326 audit(1739352905.976:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 899.685650][ T29] audit: type=1326 audit(1739352906.006:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 899.709670][ T29] audit: type=1326 audit(1739352906.006:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 899.776253][ T29] audit: type=1326 audit(1739352906.006:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 900.200830][ T29] audit: type=1400 audit(1739352906.046:1817): avc: denied { mount } for pid=26993 comm="syz.7.3184" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 900.254887][ T29] audit: type=1326 audit(1739352906.116:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.5.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672e58cde9 code=0x7ffc0000 [ 900.530575][ T5820] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 900.622307][T27029] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 900.701888][ T5820] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 900.713389][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.724524][ T5820] usb 6-1: config 0 descriptor?? [ 900.732319][ T5820] usb 6-1: selecting invalid altsetting 1 [ 900.738127][ T5820] flexcop_usb: set interface failed. [ 900.750072][ T5820] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 900.780635][T12401] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 900.923536][T12401] usb 5-1: device descriptor read/64, error -71 [ 900.934667][ T5820] usb 6-1: USB disconnect, device number 54 [ 901.170678][T12401] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 901.250250][ T5820] usb 2-1: USB disconnect, device number 79 [ 901.440598][T12401] usb 5-1: device descriptor read/64, error -71 [ 901.622628][T12401] usb usb5-port1: attempt power cycle [ 901.960662][ T5820] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 902.145158][ T5820] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 902.500204][T12401] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 902.529172][ T5820] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 902.544237][ T5820] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 902.553936][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.562655][T12401] usb 5-1: device descriptor read/8, error -71 [ 902.578129][T27062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 902.588277][ T5820] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 902.820644][T12401] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 902.848704][T12401] usb 5-1: device descriptor read/8, error -71 [ 903.028932][T12401] usb usb5-port1: unable to enumerate USB device [ 903.293435][T12401] usb 2-1: USB disconnect, device number 80 [ 905.230829][T12401] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 905.475500][T12401] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 905.499436][T12401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.515346][T27158] 9pnet_fd: Insufficient options for proto=fd [ 905.526330][T12401] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 905.570029][T12401] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 905.599492][T12401] usb 2-1: Manufacturer: syz [ 905.642121][T12401] usb 2-1: config 0 descriptor?? [ 905.790630][T12401] rc_core: IR keymap rc-hauppauge not found [ 905.807566][T12401] Registered IR keymap rc-empty [ 905.836321][T12401] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 905.882735][T12401] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 905.893922][ T5820] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 905.931820][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 905.956004][T12401] usb 2-1: USB disconnect, device number 81 [ 906.071758][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.084398][ T5820] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 906.120605][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.139481][ T5820] usb 5-1: config 0 descriptor?? [ 906.787580][ T5820] asus 0003:0B05:17E0.0026: hidraw0: USB HID v0.80 Device [HID 0b05:17e0] on usb-dummy_hcd.4-1/input0 [ 906.923166][T27159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.986841][ T5820] asus 0003:0B05:17E0.0026: Asus input not registered [ 907.010342][T27159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.027562][ T5820] asus 0003:0B05:17E0.0026: probe with driver asus failed with error -12 [ 907.119610][ T5820] usb 5-1: USB disconnect, device number 97 [ 907.211827][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 907.211842][ T29] audit: type=1400 audit(1739352913.706:1861): avc: denied { connect } for pid=27223 comm="syz.6.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 907.373405][T27238] overlayfs: failed to clone upperpath [ 909.690667][ T5820] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 909.870653][ T6260] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 909.871666][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.889865][ T5820] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 909.899379][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.931331][ T5820] usb 6-1: config 0 descriptor?? [ 910.054646][ T6260] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 910.082320][ T6260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.096417][ T6260] usb 2-1: config 0 descriptor?? [ 910.112373][ T6260] usb 2-1: selecting invalid altsetting 1 [ 910.118475][ T6260] flexcop_usb: set interface failed. [ 910.135729][ T6260] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 910.343630][ T25] usb 2-1: USB disconnect, device number 82 [ 910.430802][ T5820] asus 0003:0B05:17E0.0027: hidraw0: USB HID v0.80 Device [HID 0b05:17e0] on usb-dummy_hcd.5-1/input0 [ 910.460501][ T5820] asus 0003:0B05:17E0.0027: Asus input not registered [ 910.468312][ T5820] asus 0003:0B05:17E0.0027: probe with driver asus failed with error -12 [ 910.676401][T27280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.692088][T27280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.716058][ T6260] usb 6-1: USB disconnect, device number 56 [ 910.929825][T27351] FAULT_INJECTION: forcing a failure. [ 910.929825][T27351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.948970][T27351] CPU: 0 UID: 0 PID: 27351 Comm: syz.1.3251 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 910.948993][T27351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 910.949004][T27351] Call Trace: [ 910.949009][T27351] [ 910.949016][T27351] dump_stack_lvl+0x16c/0x1f0 [ 910.949040][T27351] should_fail_ex+0x50a/0x650 [ 910.949069][T27351] _copy_from_user+0x2e/0xd0 [ 910.949087][T27351] input_event_from_user+0x134/0x3b0 [ 910.949106][T27351] ? __pfx_input_event_from_user+0x10/0x10 [ 910.949125][T27351] ? __pfx___might_resched+0x10/0x10 [ 910.949150][T27351] ? input_inject_event+0x1a0/0x380 [ 910.949171][T27351] evdev_write+0x377/0x750 [ 910.949191][T27351] ? __pfx_evdev_write+0x10/0x10 [ 910.949210][T27351] ? bpf_lsm_file_permission+0x9/0x10 [ 910.949227][T27351] ? security_file_permission+0x71/0x210 [ 910.949252][T27351] ? rw_verify_area+0xcf/0x680 [ 910.949277][T27351] ? __pfx_evdev_write+0x10/0x10 [ 910.949293][T27351] vfs_write+0x24c/0x1150 [ 910.949320][T27351] ? __fget_files+0x1fc/0x3a0 [ 910.949335][T27351] ? __pfx_lock_release+0x10/0x10 [ 910.949359][T27351] ? __pfx_vfs_write+0x10/0x10 [ 910.949382][T27351] ? __asan_memset+0x23/0x50 [ 910.949408][T27351] ? lock_acquire+0x2f/0xb0 [ 910.949429][T27351] ? __fget_files+0x40/0x3a0 [ 910.949447][T27351] ? __fget_files+0x206/0x3a0 [ 910.949471][T27351] ksys_write+0x207/0x250 [ 910.949495][T27351] ? __pfx_ksys_write+0x10/0x10 [ 910.949519][T27351] ? __bpf_trace_sys_enter+0x37/0x60 [ 910.949544][T27351] ? rcu_is_watching+0x12/0xc0 [ 910.949565][T27351] do_syscall_64+0xcd/0x250 [ 910.949586][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.949608][T27351] RIP: 0033:0x7ff901f8cde9 [ 910.949622][T27351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.949637][T27351] RSP: 002b:00007ff8ffdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 910.949653][T27351] RAX: ffffffffffffffda RBX: 00007ff9021a5fa0 RCX: 00007ff901f8cde9 [ 910.949664][T27351] RDX: 0000000000002250 RSI: 0000400000000040 RDI: 0000000000000003 [ 910.949673][T27351] RBP: 00007ff8ffdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 910.949683][T27351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.949693][T27351] R13: 0000000000000000 R14: 00007ff9021a5fa0 R15: 00007ffeca089fe8 [ 910.949716][T27351] [ 911.242436][ T29] audit: type=1400 audit(1739352917.736:1862): avc: denied { ioctl } for pid=27355 comm="syz.6.3252" path="socket:[57642]" dev="sockfs" ino=57642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 911.268081][T27356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3252'. [ 911.290518][T27356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.298021][T27356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.471882][T27356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.479322][T27356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.844317][T27356] batman_adv: batadv0: Removing interface: gretap1 [ 911.857478][T27370] fuse: Bad value for 'fd' [ 911.919848][T27371] fuse: Bad value for 'fd' [ 912.457146][ T29] audit: type=1400 audit(1739352918.946:1863): avc: denied { nlmsg_write } for pid=27392 comm="syz.1.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 913.341970][T27406] overlayfs: failed to resolve './file0': -2 [ 914.966413][T27447] overlayfs: failed to resolve './file1': -2 [ 915.199927][ T29] audit: type=1400 audit(1739352921.686:1864): avc: denied { bind } for pid=27449 comm="syz.4.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 915.460970][T27461] syz.5.3277: attempt to access beyond end of device [ 915.460970][T27461] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 915.513508][T20646] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 915.522703][T20646] Bluetooth: hci1: Injecting HCI hardware error event [ 915.532745][ T5817] Bluetooth: hci1: hardware error 0x00 [ 1021.584554][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1021.591518][ C1] rcu: 0-...!: (0 ticks this GP) idle=fa74/1/0x4000000000000000 softirq=88531/88531 fqs=0 [ 1021.602820][ C1] rcu: (detected by 1, t=10506 jiffies, g=76013, q=255 ncpus=2) [ 1021.610532][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1021.610555][ C0] NMI backtrace for cpu 0 [ 1021.610564][ C0] CPU: 0 UID: 0 PID: 27440 Comm: syz.6.3272 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 1021.610580][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1021.610588][ C0] RIP: 0010:mark_lock+0x120/0xc60 [ 1021.610609][ C0] Code: 00 00 00 00 c7 40 08 00 00 00 00 48 c7 40 10 00 00 00 00 48 8b 84 24 08 01 00 00 65 48 2b 04 25 28 00 00 00 0f 85 56 09 00 00 <48> 8d 65 d8 89 d0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 [ 1021.610622][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000046 [ 1021.610634][ C0] RAX: 0000000000000000 RBX: ffff888028198b18 RCX: 1ffffffff2dd86ff [ 1021.610643][ C0] RDX: 0000000000000001 RSI: 0000000000000100 RDI: ffffffff96ec37f8 [ 1021.610651][ C0] RBP: ffffc90000007bd8 R08: 0000000000000000 R09: fffffbfff2dd7b99 [ 1021.610660][ C0] R10: ffffffff96ebdccf R11: 0000000000000001 R12: ffff888028198000 [ 1021.610669][ C0] R13: 0000000000000100 R14: 0000000000000008 R15: 1ffff92000000f5a [ 1021.610678][ C0] FS: 00007f0488dd56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1021.610693][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1021.610702][ C0] CR2: 0000000000000000 CR3: 00000000647fc000 CR4: 00000000003526f0 [ 1021.610711][ C0] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 1021.610719][ C0] DR3: 0000000000000008 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1021.610727][ C0] Call Trace: [ 1021.610732][ C0] [ 1021.610738][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1021.610758][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1021.610774][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1021.610793][ C0] ? mark_lock+0x120/0xc60 [ 1021.610809][ C0] ? default_do_nmi+0x6a/0x160 [ 1021.610830][ C0] ? exc_nmi+0x170/0x1e0 [ 1021.610846][ C0] ? end_repeat_nmi+0xf/0x53 [ 1021.610867][ C0] ? mark_lock+0x120/0xc60 [ 1021.610883][ C0] ? mark_lock+0x120/0xc60 [ 1021.610899][ C0] ? mark_lock+0x120/0xc60 [ 1021.610915][ C0] [ 1021.610919][ C0] [ 1021.610925][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1021.610940][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 1021.610957][ C0] ? hlock_class+0x4e/0x130 [ 1021.610970][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 1021.610989][ C0] __lock_acquire+0x9f1/0x3c40 [ 1021.611008][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1021.611025][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1021.611042][ C0] ? advance_sched+0x6d2/0xc60 [ 1021.611062][ C0] lock_acquire.part.0+0x11b/0x380 [ 1021.611078][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 1021.611093][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1021.611110][ C0] ? rcu_is_watching+0x12/0xc0 [ 1021.611124][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1021.611138][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 1021.611151][ C0] ? lock_acquire+0x2f/0xb0 [ 1021.611166][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 1021.611179][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1021.611196][ C0] _raw_spin_lock_irq+0x36/0x50 [ 1021.611213][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 1021.611225][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 1021.611239][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1021.611252][ C0] ? read_tsc+0x9/0x20 [ 1021.611268][ C0] hrtimer_interrupt+0x392/0x8e0 [ 1021.611285][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1021.611305][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1021.611324][ C0] [ 1021.611328][ C0] [ 1021.611333][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1021.611351][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1021.611370][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 a8 3d f6 48 89 df e8 7e 27 3e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 fe 2e f6 65 8b 05 a6 e3 aa 74 85 c0 74 16 5b [ 1021.611381][ C0] RSP: 0018:ffffc9000471f818 EFLAGS: 00000246 [ 1021.611392][ C0] RAX: 0000000000000002 RBX: ffff8880293cc900 RCX: 1ffffffff2de120f [ 1021.611400][ C0] RDX: 0000000000000000 RSI: ffffffff8b6ced20 RDI: ffffffff8bd34e00 [ 1021.611409][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff2dd7baf [ 1021.611417][ C0] R10: ffffffff96ebdd7f R11: 0000000000000004 R12: 0000000000000002 [ 1021.611426][ C0] R13: ffff8880293cc940 R14: ffff8880293cc2e8 R15: ffff8880293cc768 [ 1021.611439][ C0] __unix_dgram_recvmsg+0x32a/0xe50 [ 1021.611459][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1021.611475][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1021.611494][ C0] ? find_held_lock+0x2d/0x110 [ 1021.611509][ C0] ? __might_fault+0x13b/0x190 [ 1021.611525][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 1021.611541][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 1021.611562][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1021.611584][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1021.611602][ C0] ___sys_recvmsg+0x115/0x1a0 [ 1021.611618][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1021.611633][ C0] ? find_held_lock+0x2d/0x110 [ 1021.611650][ C0] ? __pfx___might_resched+0x10/0x10 [ 1021.611669][ C0] ? __might_fault+0xe3/0x190 [ 1021.611684][ C0] do_recvmmsg+0x2f8/0x740 [ 1021.611701][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1021.611717][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 1021.611733][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 1021.611754][ C0] ? do_user_addr_fault+0xe50/0x13f0 [ 1021.611770][ C0] ? __pfx_lock_release+0x10/0x10 [ 1021.611788][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 1021.611805][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1021.611827][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 1021.611844][ C0] do_syscall_64+0xcd/0x250 [ 1021.611859][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.611875][ C0] RIP: 0033:0x7f048af8cde9 [ 1021.611887][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.611898][ C0] RSP: 002b:00007f0488dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1021.611911][ C0] RAX: ffffffffffffffda RBX: 00007f048b1a6080 RCX: 00007f048af8cde9 [ 1021.611920][ C0] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000007 [ 1021.611928][ C0] RBP: 00007f048b00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1021.611936][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1021.611945][ C0] R13: 0000000000000001 R14: 00007f048b1a6080 R15: 00007ffdec2819e8 [ 1021.611957][ C0] [ 1021.612550][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g76013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1022.234180][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=74002 [ 1022.242061][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g76013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1022.253420][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1022.263377][ C1] rcu: RCU grace-period kthread stack dump: [ 1022.269250][ C1] task:rcu_preempt state:I stack:28344 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1022.281165][ C1] Call Trace: [ 1022.284437][ C1] [ 1022.287365][ C1] __schedule+0xf43/0x5890 [ 1022.291787][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1022.296995][ C1] ? __pfx___schedule+0x10/0x10 [ 1022.301852][ C1] ? schedule+0x298/0x350 [ 1022.306183][ C1] ? __pfx_lock_release+0x10/0x10 [ 1022.311208][ C1] ? lock_acquire+0x2f/0xb0 [ 1022.315708][ C1] ? schedule+0x1fd/0x350 [ 1022.320038][ C1] schedule+0xe7/0x350 [ 1022.324111][ C1] schedule_timeout+0x124/0x280 [ 1022.328962][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1022.334334][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1022.339615][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1022.345420][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1022.350880][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1022.355646][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1022.360925][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1022.365600][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1022.370808][ C1] rcu_gp_kthread+0x271/0x380 [ 1022.375481][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1022.380679][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1022.385869][ C1] ? __kthread_parkme+0x148/0x220 [ 1022.390887][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1022.396084][ C1] kthread+0x3af/0x750 [ 1022.400148][ C1] ? __pfx_kthread+0x10/0x10 [ 1022.404737][ C1] ? __pfx_kthread+0x10/0x10 [ 1022.409323][ C1] ret_from_fork+0x45/0x80 [ 1022.413737][ C1] ? __pfx_kthread+0x10/0x10 [ 1022.418321][ C1] ret_from_fork_asm+0x1a/0x30 [ 1022.423093][ C1]