last executing test programs: 7m52.630948896s ago: executing program 1 (id=346): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) sched_setscheduler(0x0, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m51.407626698s ago: executing program 1 (id=349): r0 = io_uring_setup(0x3362, &(0x7f0000000140)={0x0, 0x793f, 0x8000, 0x1, 0x2}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{&(0x7f0000000280)="8c8eaaec9d6e439eee826561d9a4772b39b82981151cbbb3d8cab955b4b5bb3ae5a9faf975899e03cefbfda683e19e5d008c1515df02f2a3b7a725815aaed933ffb4300c01435f078340d6b8980396a9d12f3b08e78f460b26904453ec22e87c1f9a2b5b375369e76f9999cf477c13fc55e48d621773373cc53943d67311356314f4bcf2ff27255327acc30319c7bd42fb510fc12d0d2cf5f0bf103e614d704f1a1f6e1a5d19d424730914e26e7a1be95031f13d4960435e79ce69d3ac51559f2db7f042294105dff0b04f8cc19fb83dcec1ae2308f052b2c3d3a84e9dc2b9", 0xdf, 0x3}, {&(0x7f0000000380)="6a3af9f15e72a8eacdf4b8f2d992ae79fea650c1a69d9453b284f7efaa6328c899a39f60c443277b2c15833c53398334cff27b25345f65f0c4652483dd43fa9cf1b32b03c1afbcfaf2193952d2a749b9ae1eaed147eff6479c958655c2bd464e28fd56ee2261310e352d94877366", 0x6e, 0x3}]}, 0x2, 0x2}, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES16], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x752f) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @win={{0x8000, 0x6, 0x9, 0x4}, 0x9, 0x11, &(0x7f0000000100)={{0xfffff800, 0x6, 0x19cb7df7, 0x1}}, 0x3, 0x0, 0xa}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 7m47.015955353s ago: executing program 1 (id=356): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x20000) readahead(r0, 0x1000, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 7m46.973006013s ago: executing program 1 (id=357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x149e82, 0x1) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffffffffffffffe}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) write$uinput_user_dev(r7, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffe}, 0x0, [0x0, 0x0, 0xfffffffe, 0x9, 0x80, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40006, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cc], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x9, 0x0, 0xa, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0xc1a5, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xd, 0x1000, 0x0, 0xf, 0x4, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb51, 0x0, 0xe], [0x80000007, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x5f78, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x4], [0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x80, 0x0, 0x3, 0x9cac, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdb9, 0xb50, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x1, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x400000, 0x1, 0xfffffffd, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x3, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x5, 0x0, 0x405d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd5f5, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff, 0x3]}, 0x45c) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000027232120bb0430095d0e010203010902120001ff0010000904af00"], 0x0) fcntl$dupfd(r3, 0x406, r3) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) 7m43.54466269s ago: executing program 1 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x14) 7m43.22346519s ago: executing program 1 (id=371): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r1, &(0x7f0000000280)="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", 0x100000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) (async) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) (async) write$dsp(r1, &(0x7f0000000280)="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", 0x100000) (async) 7m28.091716242s ago: executing program 32 (id=371): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r1, &(0x7f0000000280)="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", 0x100000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) (async) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) (async) write$dsp(r1, &(0x7f0000000280)="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", 0x100000) (async) 6m29.105493283s ago: executing program 2 (id=597): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="f74746200200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r8 = fanotify_init(0x0, 0x2) fanotify_mark(r8, 0x80, 0x20, 0xffffffffffffffff, 0x0) 6m28.375862795s ago: executing program 2 (id=600): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newnexthop={0x34, 0x68, 0x1, 0x1, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x9}, {0x2, 0x9}, {0x1, 0xff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x50, r2, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peekuser(0x3, r1, 0x8000000000000000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x18) getgroups(0x16, 0xfffffffffffffffe) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m26.789259884s ago: executing program 2 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0xfffffffc, 0x10100, 0x1, 0x40}, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) 6m23.391317075s ago: executing program 2 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) fchdir(0xffffffffffffffff) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8, 0x0) getdents(r3, &(0x7f0000000440)=""/4085, 0x104a) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="bb953d20", @ANYRES16=r4, @ANYBLOB="b70b00000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) 6m22.495429297s ago: executing program 2 (id=615): ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, &(0x7f00000000c0), 0x0, 0x4, 0x71, &(0x7f0000000200)=""/113, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0xa8002, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6m21.001071882s ago: executing program 2 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6m5.831405506s ago: executing program 33 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5m40.902959827s ago: executing program 4 (id=699): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x82, 0x6, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x40, 0x20000000, 0xa06}}) sendmsg$xdp(r3, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2c, 0x1, r7, 0x17}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000240)="04a3b0ebba280db57034f42c8e9c784b5d11761230784a300c079613b0333103402ab74d83fa64d54a30e432853ed5a4f74922fb533d0dfae6dedc3238ea8cf13165ed5959e9864928adb392053c5816097e78df4b7516790bc644b2b4d9072d", 0x60}, {&(0x7f0000000300)="6f6e9e592211ca88835894a4f28bf59eee3de0fdc078829bb34ff9bac097b7f475d8a3d99492b9a6527320df6d68455cbe6e2c254b406378d3db2d65b207d9c00e5f343d8f1508edf47842e8a01f305caec84be4cb85c90f7c4dae276266f7a74ca026a92b5eef5e4b65608df9f64ba09c0404c4976e3f985a409d6ac4bf31d83cf0352c111ad875c55fe2370e5f6d417e1203d69c6fb22fa63c8eafdc536ef2afc888fc5cff4e71b494b175eeae75b5e086ae54cb0c181abfe719e15f037c9e668496a69dcb8f5148af898da592531e0bbf84863867922567b232ea1542b4d4f0608bcfe2c3ce433a757b65a552541cb279108c", 0xf4}, {&(0x7f00000005c0)="9e898cfea480f97b6e46a4f373d9c40a4a1b360eba47c6c2ba27a6510f2c0ddda20b9dd27feaa45d721be7ac6c847ff39ea7f4785795a872d35040f137d565a4a3a199957231053e5c0f0b6c41ab5e3c8aa2fd890973f7935dd3554bf72e70eaaa78ae69d6fc1929de72866ecbb1ed26c71ef751a2953ea8ab319b55ba6493388a93f60562c78054cdaccd2adeeab962402d4da5e79001768a910c0f127177c184e294", 0xa3}], 0x3, 0x0, 0x0, 0x4000040}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) 5m37.330334515s ago: executing program 4 (id=711): syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6a, 0xfb, 0xd7, 0x40, 0x71d, 0x1005, 0x46a2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x3, 0x2, 0x56, 0x33, 0x11, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x8, 0xf, 0x7f}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x6, 0x4, 0xf}}]}}, {{0x9, 0x4, 0x82, 0x0, 0x0, 0xff, 0x6, 0x65, 0x6}}]}}]}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs={0x40046304, 0x3}], 0x1000, 0x0, &(0x7f0000000080)="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"}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x9a5, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffffff9, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r2, 0x0, 0x0, 0x0}, 0x30) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x426}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 5m33.338808855s ago: executing program 4 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) read$FUSE(r4, &(0x7f00000076c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r8, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast1}, 0x2, 0x2, 0x0, 0x9000}}, 0x26) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r10) 5m32.222504359s ago: executing program 4 (id=722): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.metacopy\x00') 5m31.156600642s ago: executing program 4 (id=726): openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_init1(0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x20, 0x0, r4, &(0x7f0000000300)={0x201, 0x118, 0x11}, &(0x7f0000000440)='./cgroup\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_sco(r2, &(0x7f0000000040), 0x8) listen(r2, 0x1) accept4(r2, 0x0, 0x0, 0x80800) io_setup(0x8, 0x0) 5m30.874952523s ago: executing program 3 (id=727): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r7 = fanotify_init(0x0, 0x2) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x455, 0x40000008, r8, 0x0) 5m29.859653623s ago: executing program 3 (id=729): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}], 0x2}}], 0x1, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x4, 0x11, '\x00', [@generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x148, 0x29, 0x36, {0x5e, 0x26, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x71, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2b8}}], 0x1, 0x810) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x80810, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) poll(&(0x7f0000000140)=[{r1, 0x20b6}], 0x1, 0x76) creat(&(0x7f00000002c0)='./file1\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @rose, @null, @default, @rose, @bcast, @bcast, @rose]}, &(0x7f00000000c0)=0x48, 0x800) 5m27.146702103s ago: executing program 3 (id=734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m25.888055895s ago: executing program 3 (id=736): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.metacopy\x00') 5m24.914864672s ago: executing program 3 (id=738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1, 0x6, 0x7}, 0x20) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m24.500282739s ago: executing program 4 (id=740): ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000040)={0x4, "02bd87ecd36ce800080000d32d87ac6ba29abe00000000cdea00", 0x2, 0x1, 0x394bfddf, 0x1, 0x1}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x7f, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/220, 0xdc) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x587241, 0x83) r7 = open_tree(r6, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="388b0900080211000000080211000000ffffff46e36380049792ffffff9800ffffffffffff0800cec108021100000108021100000000000000ffffffffffff0802110000018b00e36bfd8a732a4b8e111bd5c80d921e33e1e6d1a5f8b3a459311296f6e71a71480000d6098dc8c6af86a8a49c8b914960981125ad50158335f275292a17b84478dac583e10cbdf7e0fe524fe8b5bce8ab99d2de97b4ca9f006c366cd5233bec15825d8575c87644d9c4d3ca47a77ce82a0fcb6bb48781e5fd0100000004fc25230b4be1a52ef5c8c6b58aa0000000ffffffffffffffffffffffff97006a5bd45376fc808935c40b3c0a3111c1edfdab4dc54dcea1a1dec876436cc607d78b86cbc67a80a47ab26885209d74514728bdd2709a1dbae8bf09b9adb01700330eb3eabf1b285cedc9e4bc06ed5cd463d12eb0686afef4b82e0735a9a46ecd78a01401696cd3f147a3a243077ebf3f4c623b3def6a25ee4a278aca276dfde31867e9c79315be632a441a2431771123add1bf"], 0x176) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x14044017}, 0x0) 5m23.5323525s ago: executing program 34 (id=740): ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000040)={0x4, "02bd87ecd36ce800080000d32d87ac6ba29abe00000000cdea00", 0x2, 0x1, 0x394bfddf, 0x1, 0x1}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x7f, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/220, 0xdc) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x587241, 0x83) r7 = open_tree(r6, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x176) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x14044017}, 0x0) 5m23.301702275s ago: executing program 3 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) read$FUSE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x101}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r7, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast1}, 0x2, 0x2, 0x0, 0x9000}}, 0x26) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r9) 5m22.547973849s ago: executing program 35 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) read$FUSE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x101}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r7, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast1}, 0x2, 0x2, 0x0, 0x9000}}, 0x26) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r9) 11.452074841s ago: executing program 6 (id=1682): r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10.570524209s ago: executing program 5 (id=1683): bind$tipc(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chdir(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0)=0xffffffffffffff7f, 0xffffffffffffffff, 0x0, 0x81, 0x10000000000000) setfsgid(0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x10, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="6465636f646573206e6f6e6500f8f9b080b27d129bbea03b5c1c2a99a168d5d5808661ec8134850fa4c96b1bd785"], 0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)) connect$tipc(r3, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9.967281978s ago: executing program 7 (id=1686): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) io_setup(0x6, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000500)='wg0\x00', 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x2, 0x0) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) recvfrom$inet6(r2, &(0x7f0000000580)=""/44, 0x2c, 0x100f2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x400) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x8001, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 9.168170002s ago: executing program 8 (id=1687): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x82, 0x6, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x40, 0x20000000, 0xa06}}) sendmsg$xdp(r3, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2c, 0x1, r7, 0x17}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000240)="04a3b0ebba280db57034f42c8e9c784b5d11761230784a300c079613b0333103402ab74d83fa64d54a30e432853ed5a4", 0x30}, {&(0x7f0000000300)="6f6e9e592211ca88835894a4f28bf59eee3de0fdc078829bb34ff9bac097b7f475d8a3d99492b9a6527320df6d68455cbe6e2c254b406378d3db2d65b207d9c00e5f343d8f1508edf47842e8a01f305caec84be4cb85c90f7c4dae276266f7a74ca026a92b5eef5e4b65608df9f64ba09c0404c4976e3f985a409d6ac4bf31d83cf0352c111ad875c55fe2370e5f6d417e1203d69c6fb22fa63c8eafdc536ef2afc888fc5cff4e71b494b175eeae75b5e086ae54cb0c181abfe719e15f037c9e668496a69dcb8f5148af898da592531e0bbf84863867922567b232ea1542b4d4f0608bcfe2c3ce433a757b65a552541cb279108c", 0xf4}, {&(0x7f00000005c0)="9e898cfea480f97b6e46a4f373d9c40a4a1b360eba47c6c2ba27a6510f2c0ddda20b9dd27feaa45d721be7ac6c847ff39ea7f4785795a872d35040f137d565a4a3a199957231053e5c0f0b6c41ab5e3c8aa2fd890973f7935dd3554bf72e70eaaa78ae69d6fc1929de72866ecbb1ed26c71ef751a2953ea8ab319b55ba6493388a93f60562c78054cdaccd2adeeab962402d4da5e79001768a910c0f127177c184e2948a38", 0xa5}], 0x3, 0x0, 0x0, 0x4000040}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) 8.922987731s ago: executing program 5 (id=1689): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32, @ANYBLOB="f74746200200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r5 = fanotify_init(0x0, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x80, 0x20, r6, 0x0) 8.170052418s ago: executing program 5 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) setresgid(0x0, 0xee00, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x40000007}}, 0x48) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 8.158456147s ago: executing program 6 (id=1691): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000000)={0x31, 0x0, 0xfffffffe}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) keyctl$chown(0x4, 0x0, 0xee00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0xfdef) 7.757080743s ago: executing program 7 (id=1692): fstatfs(0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x800, 0x12, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x80000) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) madvise(&(0x7f0000dcf000/0x3000)=nil, 0x3000, 0x17) sendmsg$nl_route(r3, 0x0, 0xc080) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) 6.098543685s ago: executing program 7 (id=1694): openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r7, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0xc009}, 0x24050800) 6.006546114s ago: executing program 6 (id=1695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x20003, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x80, 0xff, 0xc8, 0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) shutdown(r4, 0x1) recvmmsg(r3, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x101, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='nr0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) 5.862393258s ago: executing program 6 (id=1696): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgrp(0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0xa, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$inet_sctp(r1, 0x0, 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x2000284) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 5.860358677s ago: executing program 8 (id=1697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002a00)=ANY=[@ANYRES8=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x44}}, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000440)="ba4f951ff4ab2078f67b11f6108d064a01a612ef25167d026bca341618f01410164071e52c0b4d12e52a767586d9f2913615", &(0x7f0000000480)="7678103132a9cebfa421a1f429"}}, &(0x7f0000000400)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xf4301, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0002000043136a8071b4653fa2a07b19102283d7", @ANYRES8=r6, @ANYBLOB="01002ebd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e008350260c", @ANYBLOB="22f1bc0f9a4607a0b4172552036537d7543b73a14f7ba59bcc682511766f1b1170f637ed6c1c6158ed98aac6edcbb6462d4ee22ac90f99782139ea0f8497a4c56ba9a5564b9b35de8bdb66f460344cf219e2eab682338a7ee46454680aa7b73e6a9e70a64cbc5b044b450c61e1daba9f2d90d6ac9cc2c7a9531ba45dbfc94843a57bdc453cea2dbb79e1b9672b44be94f52c7ed452e313ad3ac810914c4a71e55d4dc9b200", @ANYRES8=r7, @ANYRES16=r6, @ANYRES32=r0], 0x3c}}, 0x200088d1) 5.418288952s ago: executing program 6 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) fchdir(r2) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8, 0x0) getdents(r4, &(0x7f0000000440)=""/4085, 0x104a) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="bb953d20", @ANYRES16, @ANYBLOB="b70b00000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) 5.372579269s ago: executing program 0 (id=1700): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32, @ANYBLOB="f74746200200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r5 = fanotify_init(0x0, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x80, 0x20, r6, 0x0) 5.331233285s ago: executing program 8 (id=1701): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100c28, &(0x7f0000000100)={[], [{@uid_gt}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x100000) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') writev(r8, &(0x7f0000000700)=[{&(0x7f0000000840)="f50e5342", 0x4}], 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e20, @loopback}, {0x2, 0x4e22, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0xa00, 0x1000}) 4.644110108s ago: executing program 0 (id=1702): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) fchdir(r2) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r4, &(0x7f0000000440)=""/4085, 0x104a) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="bb953d20", @ANYRES16=r5, @ANYBLOB="b70b00000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) 4.642407951s ago: executing program 7 (id=1703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.678607347s ago: executing program 8 (id=1704): mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) 3.143683753s ago: executing program 7 (id=1705): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r3, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r2, r7, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x7, 0x3, 0x3, 0x0, 0x1, 0x3, 0x6}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x381000, 0x0) 2.512277457s ago: executing program 8 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff5, 0x6, 0x100, 0x2}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00052fb96dffff1144ee163cddcb0000fff100"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2.423822912s ago: executing program 0 (id=1707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xaf, 0x0) 2.266314319s ago: executing program 8 (id=1708): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000b4d8ffff00000000000000008500000029000000180100002020692500000000002020207b1af8ff00000000bfa300000000000007010000f8ffff9c8cffb702000008000000b70300000200000085000000730000009100000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xb, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000004e00)=ANY=[@ANYBLOB], 0x390) r4 = gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000200ffee0900010173797a32000000000000000000000000a500"], 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r4}, 0x0) recvmmsg(r2, &(0x7f0000004c40)=[{{&(0x7f00000006c0)=@isdn, 0x80, &(0x7f0000000400)=[{&(0x7f00000008c0)=""/128, 0x80}, {&(0x7f0000000c00)=""/157, 0x9d}, {&(0x7f0000000340)=""/43, 0x2b}], 0x3, &(0x7f0000000cc0)=""/173, 0xad}, 0x5}, {{&(0x7f0000001040)=@nfc_llcp, 0x80, &(0x7f0000001300)=[{&(0x7f00000010c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000001140)=""/58, 0x3a}, {&(0x7f0000001180)=""/166, 0xa6}, {&(0x7f0000001240)=""/186, 0xba}], 0x5, &(0x7f0000001380)=""/126, 0x7e}, 0xfffffff8}, {{&(0x7f0000001400)=@x25, 0x80, &(0x7f0000001600)=[{&(0x7f0000001480)=""/175, 0xaf}, {0x0}], 0x2, &(0x7f0000001640)=""/217, 0xd9}, 0x9}, {{&(0x7f0000001740)=@xdp, 0x80, &(0x7f0000003940)=[{0x0}, {0x0}, {&(0x7f00000018c0)=""/16, 0x10}], 0x3, &(0x7f0000003980)=""/162, 0xa2}, 0x80400001}, {{&(0x7f0000003a40)=@nfc_llcp, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003ac0)=""/180, 0xb4}, {&(0x7f0000003b80)=""/91, 0x5b}], 0x2, &(0x7f0000003c40)=""/4096, 0x1000}, 0x5}], 0x5, 0x10060, 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x4, 0x0, &(0x7f0000048000), 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe8000000000000000000000000000aa1400350077673100"/56], 0x50}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000680)="76389e6a6558", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 2.204023005s ago: executing program 0 (id=1709): socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000000400000007000000000000008d9f0e7c63f6299c9787f43510a85f56333c52cd0c354a8d602a38c491da78dbc082199e73d8db62aa7d1dabe25d5adecb32a1967d085a5b5d08cf0898b07d9d014995a028f992420e024d29cf4daadd4d73131d411fea3eae7950288b0c2618b14198ede376510b48d253c59805c9584739f2989030c17d19e7ce530bca3129541035c9484ab2c6602a01fffd4fd9c5e43e41ce880242506b56612a4f3c82bb80fa5edfd1dc0261894f147acfab73a003e0b392b98d6309f41d", @ANYRES32, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB=',cache=0']) fchmod(r0, 0x0) ftruncate(r0, 0x200000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = syz_io_uring_setup(0x3a28, &(0x7f00000004c0)={0x0, 0x2f4c, 0x400, 0x1, 0x1a5}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0, 0x40010040, 0x1}) close_range(r4, r3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000110000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r7], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0x8000, 0x8) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf010000}) 2.005310241s ago: executing program 5 (id=1710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000880)={0x0, 0xe496, 0x5140, 0x3, 0x35e}, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xaf, 0x0) 1.557321969s ago: executing program 5 (id=1711): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x5, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001880), 0x0, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r4}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0xa22) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0) write$P9_RGETLOCK(r5, 0x0, 0x200002e6) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0x92, &(0x7f0000000b00)="da579ab6a3e6c94a82227fa02e8df7871fb5bb75702e50e1b56c45ea37039410679fe3e0064b3b769fa7c8f5837cd060b1e8f31dd034e7598c5c54c164fe4f361684c6c2a207fe3303277c64efc31f2eb29b4f8f9b825963f03ce73e204999afea6ff886fa396955e21e6fee6043ab35101abdda41f352f748c80b2c7e4ba16da46c9dcd0fc348d65de6ffd1be03fb659925") fcntl$setpipe(r5, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000180)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.25613256s ago: executing program 0 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x40000007}}, 0x48) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 124.391538ms ago: executing program 6 (id=1713): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4048000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 67.832392ms ago: executing program 0 (id=1714): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xfffffff9) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x400) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x2b29, 0x0, 0x1, 0x1000}) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x1b, 0x0}}], 0x40000000000012d, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) socket(0x10, 0x803, 0x0) 58.832298ms ago: executing program 7 (id=1715): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000200)="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", 0x1bb}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f6", 0x43}, {&(0x7f0000002300)="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", 0x1f7}], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x700000000000000) 0s ago: executing program 5 (id=1716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) fcntl$lock(r6, 0x6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ffffff7f000000000800000085000000610000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00006c1000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r8, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.7.1082'. [ 476.188894][ T30] audit: type=1400 audit(2000000265.160:561): avc: denied { connect } for pid=10774 comm="syz.8.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 476.218598][T10773] syzkaller0: entered promiscuous mode [ 476.228153][T10773] syzkaller0: entered allmulticast mode [ 476.260644][ T30] audit: type=1400 audit(2000000265.190:562): avc: denied { bind } for pid=10774 comm="syz.8.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 476.295913][ T30] audit: type=1400 audit(2000000265.260:563): avc: denied { getopt } for pid=10774 comm="syz.8.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 476.344365][ T5869] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 476.507493][ T5869] usb 7-1: Using ep0 maxpacket: 8 [ 476.514636][ T5869] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.525406][ T5869] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.536000][ T5869] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.547459][ T5869] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.561613][ T5869] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.685692][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.909490][ T5869] usb 7-1: GET_CAPABILITIES returned 0 [ 476.915192][ T5869] usbtmc 7-1:16.0: can't read capabilities [ 477.144883][T10775] net_ratelimit: 68 callbacks suppressed [ 477.144899][T10775] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 477.219267][ T5869] usb 7-1: USB disconnect, device number 15 [ 477.490290][T10799] Bluetooth: MGMT ver 1.23 [ 477.576207][ T30] audit: type=1400 audit(2000000266.470:564): avc: denied { write } for pid=10792 comm="syz.8.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 477.748707][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 477.755039][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 479.243879][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.251121][ C0] bridge0: topology change detected, propagating [ 479.257789][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.264993][ C0] bridge0: topology change detected, propagating [ 481.292747][T10785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.953618][ T30] audit: type=1400 audit(2000000270.900:565): avc: denied { listen } for pid=10836 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 482.325465][ T30] audit: type=1400 audit(2000000271.300:566): avc: denied { read } for pid=10845 comm="syz.8.1102" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 482.365390][ T30] audit: type=1400 audit(2000000271.320:567): avc: denied { open } for pid=10845 comm="syz.8.1102" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 482.514241][ T89] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 483.144114][ T89] usb 8-1: Using ep0 maxpacket: 8 [ 483.914628][ T89] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.984788][ T89] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.020668][ T89] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.034440][ T89] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.047926][ T89] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 484.059429][T10860] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.1106'. [ 484.068807][T10860] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.1106'. [ 484.078527][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1107'. [ 484.088760][ T89] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.192958][T10861] comedi comedi3: pcl724: I/O port conflict (0xcf7,4) [ 484.614270][ T89] usb 8-1: GET_CAPABILITIES returned 0 [ 484.625960][ T89] usbtmc 8-1:16.0: can't read capabilities [ 484.692978][ T30] audit: type=1400 audit(2000000273.660:568): avc: denied { read write } for pid=10864 comm="syz.6.1108" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 484.812745][ T89] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.822788][ T30] audit: type=1400 audit(2000000273.660:569): avc: denied { open } for pid=10864 comm="syz.6.1108" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 484.826859][T10844] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 484.934149][T10867] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1108'. [ 485.339889][ T89] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 485.411110][ T89] usb 8-1: USB disconnect, device number 6 [ 487.244130][ T5919] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 487.823876][ T5919] usb 8-1: Using ep0 maxpacket: 32 [ 489.234856][ T5919] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 489.243521][ T5919] usb 8-1: config 0 has no interface number 0 [ 489.409340][ T5919] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 489.579147][ T5919] usb 8-1: string descriptor 0 read error: -71 [ 490.580878][ T5919] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 490.598383][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.882790][ T5919] usb 8-1: config 0 descriptor?? [ 490.888429][ T5919] usb 8-1: can't set config #0, error -71 [ 490.895958][ T5919] usb 8-1: USB disconnect, device number 7 [ 492.852735][T10958] syzkaller0: entered promiscuous mode [ 492.860332][T10958] syzkaller0: entered allmulticast mode [ 492.875134][T10961] batman_adv: batadv0: Adding interface: gretap1 [ 492.881503][T10961] batman_adv: batadv0: The MTU of interface gretap1 is too small (1000) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.906869][T10961] batman_adv: batadv0: Interface activated: gretap1 [ 492.917117][ T5883] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 493.666657][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 493.675857][ T5883] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 493.691430][ T5883] usb 6-1: config 0 has no interface number 0 [ 493.699780][ T5883] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 493.711186][ T5883] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 493.722946][ T5883] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.734279][ T5883] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.766828][ T5883] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 493.776058][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.791738][ T5883] usb 6-1: config 0 descriptor?? [ 493.826099][ T5883] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 494.126211][T10929] usb 6-1: USB disconnect, device number 20 [ 494.126294][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 495.392623][T10951] ldusb: No device or device unplugged -19 [ 495.398826][T10929] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 496.906185][ T89] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 497.064134][ T89] usb 6-1: Using ep0 maxpacket: 32 [ 497.070615][ T89] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 497.079252][ T89] usb 6-1: config 0 has no interface number 0 [ 497.089360][ T89] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.101067][ T89] usb 6-1: config 0 interface 85 has no altsetting 0 [ 497.110302][ T89] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 497.119438][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.130142][ T89] usb 6-1: Product: syz [ 497.135720][ T89] usb 6-1: Manufacturer: syz [ 497.140329][ T89] usb 6-1: SerialNumber: syz [ 497.150702][ T89] usb 6-1: config 0 descriptor?? [ 497.533907][ T5869] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 497.704064][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 497.781805][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.837624][ T5869] usb 7-1: config 0 has no interfaces? [ 497.890422][ T89] appletouch 6-1:0.85: Geyser mode initialized. [ 498.018854][ T5869] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 498.088316][ T89] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input18 [ 498.117469][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.149026][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 498.162064][ T5869] usb 7-1: Product: syz [ 498.166888][ T89] usb 6-1: USB disconnect, device number 21 [ 498.177336][ T5869] usb 7-1: Manufacturer: syz [ 498.192140][ T5869] usb 7-1: SerialNumber: syz [ 498.216165][ T5869] usb 7-1: config 0 descriptor?? [ 498.250463][ T89] appletouch 6-1:0.85: input: appletouch disconnected [ 498.354584][ T30] audit: type=1400 audit(2000000287.330:570): avc: denied { bind } for pid=10990 comm="syz.7.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 498.434925][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 498.972117][T10991] Process accounting resumed [ 500.238241][ T5913] usb 7-1: USB disconnect, device number 16 [ 501.007283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.022098][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.966732][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1149'. [ 502.223386][ T30] audit: type=1400 audit(2000000291.190:571): avc: denied { getopt } for pid=11046 comm="syz.7.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 502.523941][T10929] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 502.630740][T11058] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1155'. [ 502.692617][T10929] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.703887][T10929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.716051][T10929] usb 6-1: Product: syz [ 502.720278][T10929] usb 6-1: Manufacturer: syz [ 502.725402][T10929] usb 6-1: SerialNumber: syz [ 502.734320][ T5826] Bluetooth: hci2: unexpected event for opcode 0x040d [ 502.758565][T11062] openvswitch: netlink: Flow actions attr not present in new flow. [ 503.089291][ T30] audit: type=1400 audit(2000000292.020:572): avc: denied { mount } for pid=11063 comm="syz.6.1158" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 503.239870][T10929] cdc_ncm 6-1:1.0: bind() failure [ 503.247467][T11049] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 503.292591][T10929] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 503.344986][T10929] cdc_ncm 6-1:1.1: bind() failure [ 503.381828][T10929] usb 6-1: USB disconnect, device number 22 [ 504.126622][T11075] syzkaller0: entered promiscuous mode [ 504.210617][T11075] syzkaller0: entered allmulticast mode [ 505.149039][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1164'. [ 506.062765][T11103] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1167'. [ 506.455555][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1168'. [ 507.685894][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1171'. [ 507.701450][ T30] audit: type=1400 audit(2000000296.670:573): avc: denied { map } for pid=11117 comm="syz.0.1173" path="socket:[30930]" dev="sockfs" ino=30930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 507.991708][T11126] syz.6.1172: attempt to access beyond end of device [ 507.991708][T11126] ram200: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 508.130520][ T5920] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 508.435266][ T5920] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 508.478224][ T5920] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 508.501690][ T5920] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 508.552922][ T5920] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 508.580394][ T5920] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 508.596523][ T5920] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.140918][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.149138][ T5920] usb 9-1: Product: syz [ 509.153413][ T5920] usb 9-1: Manufacturer: syz [ 509.392525][ T30] audit: type=1400 audit(2000000298.080:574): avc: denied { write } for pid=11127 comm="syz.7.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 509.503089][ T5920] cdc_wdm 9-1:1.0: skipping garbage [ 509.524486][ T5920] cdc_wdm 9-1:1.0: skipping garbage [ 509.533730][ T5920] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 509.539925][ T5920] cdc_wdm 9-1:1.0: Unknown control protocol [ 509.759683][ T30] audit: type=1400 audit(2000000298.730:575): avc: denied { read write } for pid=11118 comm="syz.8.1171" name="cdc-wdm0" dev="devtmpfs" ino=3215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 509.842385][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 509.843115][ T6631] usb 9-1: USB disconnect, device number 9 [ 509.849185][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 509.849206][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 509.871922][ T30] audit: type=1400 audit(2000000298.730:576): avc: denied { open } for pid=11118 comm="syz.8.1171" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 509.917836][ T30] audit: type=1800 audit(2000000298.810:577): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1180" name="bus" dev="overlay" ino=427 res=0 errno=0 [ 510.445392][T11155] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1179'. [ 512.833857][ T6095] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 513.260364][ T6095] usb 6-1: Using ep0 maxpacket: 32 [ 513.361048][ T6095] usb 6-1: device descriptor read/all, error -71 [ 513.533894][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b157000: rx timeout, send abort [ 513.741514][ T30] audit: type=1400 audit(2000000302.710:578): avc: denied { read } for pid=5170 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 513.878488][ T30] audit: type=1400 audit(2000000302.740:579): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.009787][ T30] audit: type=1400 audit(2000000302.740:580): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.048363][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b157000: abort rx timeout. Force session deactivation [ 514.051602][ T30] audit: type=1400 audit(2000000302.740:581): avc: denied { add_name } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.144114][ T30] audit: type=1400 audit(2000000302.740:582): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.205324][ T30] audit: type=1400 audit(2000000302.740:583): avc: denied { append open } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.236220][ T30] audit: type=1400 audit(2000000302.740:584): avc: denied { getattr } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.868051][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c76400: rx timeout, send abort [ 515.194386][ T5920] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 515.376283][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c76400: abort rx timeout. Force session deactivation [ 515.575330][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 515.603689][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.720754][T11218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 515.797986][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.871296][ T5920] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 515.909702][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.150527][ T5920] usb 6-1: config 0 descriptor?? [ 516.309163][ T5869] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 516.781145][ T5869] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.795798][ T5920] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 516.815637][ T5920] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 516.822655][ T5869] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 516.845680][ T5920] holtek 0003:1241:5015.0008: item fetching failed at offset 2/5 [ 516.855132][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.874333][ T5920] holtek 0003:1241:5015.0008: parse failed [ 516.894620][ T5869] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 516.912396][ T5920] holtek 0003:1241:5015.0008: probe with driver holtek failed with error -22 [ 517.213548][T11173] usb 6-1: USB disconnect, device number 25 [ 517.557701][ T30] audit: type=1400 audit(2000000306.520:585): avc: denied { write } for pid=11245 comm="syz.6.1200" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 517.931220][ T30] audit: type=1400 audit(2000000306.900:586): avc: denied { ioctl } for pid=11253 comm="syz.0.1202" path="socket:[31130]" dev="sockfs" ino=31130 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 518.158803][T11264] FAULT_INJECTION: forcing a failure. [ 518.158803][T11264] name failslab, interval 1, probability 0, space 0, times 0 [ 518.171567][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.7.1203 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.171595][T11264] Tainted: [L]=SOFTLOCKUP [ 518.171601][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.171610][T11264] Call Trace: [ 518.171618][T11264] [ 518.171626][T11264] dump_stack_lvl+0x16c/0x1f0 [ 518.171654][T11264] should_fail_ex+0x512/0x640 [ 518.171669][T11264] ? fs_reclaim_acquire+0xae/0x150 [ 518.171694][T11264] should_failslab+0xc2/0x120 [ 518.171717][T11264] __kmalloc_noprof+0xeb/0x910 [ 518.171733][T11264] ? tomoyo_encode2+0x100/0x3e0 [ 518.171761][T11264] ? tomoyo_encode2+0x100/0x3e0 [ 518.171783][T11264] tomoyo_encode2+0x100/0x3e0 [ 518.171809][T11264] tomoyo_encode+0x29/0x50 [ 518.171831][T11264] tomoyo_realpath_from_path+0x18f/0x6e0 [ 518.171862][T11264] tomoyo_path_number_perm+0x245/0x580 [ 518.171881][T11264] ? tomoyo_path_number_perm+0x237/0x580 [ 518.171904][T11264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 518.171949][T11264] ? find_held_lock+0x2b/0x80 [ 518.171974][T11264] ? hook_file_ioctl_common+0x144/0x410 [ 518.171995][T11264] ? __fget_files+0x20e/0x3c0 [ 518.172023][T11264] security_file_ioctl+0x9b/0x240 [ 518.172048][T11264] __x64_sys_ioctl+0xb7/0x210 [ 518.172070][T11264] do_syscall_64+0xcd/0xf80 [ 518.172094][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.172111][T11264] RIP: 0033:0x7f4d2eb8f749 [ 518.172125][T11264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.172141][T11264] RSP: 002b:00007f4d2f96d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.172157][T11264] RAX: ffffffffffffffda RBX: 00007f4d2ede6180 RCX: 00007f4d2eb8f749 [ 518.172167][T11264] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 518.172177][T11264] RBP: 00007f4d2f96d090 R08: 0000000000000000 R09: 0000000000000000 [ 518.172191][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.172200][T11264] R13: 00007f4d2ede6218 R14: 00007f4d2ede6180 R15: 00007ffc5c234788 [ 518.172224][T11264] [ 518.172336][T11264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 519.032938][T11173] usb 9-1: USB disconnect, device number 10 [ 519.135204][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1210'. [ 519.382905][T11289] nbd: socks must be embedded in a SOCK_ITEM attr [ 519.861197][T11292] nvme_fabrics: missing parameter 'transport=%s' [ 520.067848][T11292] nvme_fabrics: missing parameter 'nqn=%s' [ 520.491806][ T9322] udevd[9322]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 520.596952][ T9582] udevd[9582]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 521.304374][ T5967] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 521.436807][T11313] bridge0: port 3(syz_tun) entered blocking state [ 521.453965][T11313] bridge0: port 3(syz_tun) entered disabled state [ 521.464103][ T5967] usb 7-1: Using ep0 maxpacket: 8 [ 521.472682][T11313] syz_tun: entered allmulticast mode [ 521.473269][ T5967] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.483580][T11313] syz_tun: entered promiscuous mode [ 521.524069][ T5967] usb 7-1: config 0 interface 0 has no altsetting 0 [ 521.530845][ T5967] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 521.544016][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.549916][T11313] bridge0: port 3(syz_tun) entered blocking state [ 521.559038][T11313] bridge0: port 3(syz_tun) entered listening state [ 521.561386][ T5967] usb 7-1: config 0 descriptor?? [ 521.904503][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 521.992693][T11313] bridge0: port 3(syz_tun) entered disabled state [ 522.084866][ T5967] usbhid 7-1:0.0: can't add hid device: -71 [ 522.086246][T11313] syz_tun (unregistering): left allmulticast mode [ 522.090894][ T5967] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 522.129513][T11313] syz_tun (unregistering): left promiscuous mode [ 522.184282][T11313] bridge0: port 3(syz_tun) entered disabled state [ 522.204621][ T5967] usb 7-1: USB disconnect, device number 17 [ 523.137087][ T30] audit: type=1400 audit(2000000312.110:587): avc: denied { ioctl } for pid=11341 comm="syz.7.1222" path="socket:[30637]" dev="sockfs" ino=30637 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 523.301979][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 523.511639][ T30] audit: type=1400 audit(2000000312.210:588): avc: denied { connect } for pid=11336 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 523.898323][T11349] FAULT_INJECTION: forcing a failure. [ 523.898323][T11349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.945917][T11349] CPU: 0 UID: 0 PID: 11349 Comm: syz.8.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.945943][T11349] Tainted: [L]=SOFTLOCKUP [ 523.945948][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.945956][T11349] Call Trace: [ 523.945961][T11349] [ 523.945968][T11349] dump_stack_lvl+0x16c/0x1f0 [ 523.945997][T11349] should_fail_ex+0x512/0x640 [ 523.946016][T11349] _copy_from_user+0x2e/0xd0 [ 523.946042][T11349] move_addr_to_kernel+0x65/0x170 [ 523.946069][T11349] __sys_bind+0x11b/0x260 [ 523.946093][T11349] ? __pfx___sys_bind+0x10/0x10 [ 523.946116][T11349] ? __fget_files+0x20e/0x3c0 [ 523.946154][T11349] ? __pfx_ksys_write+0x10/0x10 [ 523.946180][T11349] __x64_sys_bind+0x72/0xb0 [ 523.946203][T11349] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.946226][T11349] do_syscall_64+0xcd/0xf80 [ 523.946250][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.946266][T11349] RIP: 0033:0x7fad1f18f749 [ 523.946280][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.946295][T11349] RSP: 002b:00007fad1ffa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 523.946311][T11349] RAX: ffffffffffffffda RBX: 00007fad1f3e5fa0 RCX: 00007fad1f18f749 [ 523.946322][T11349] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004 [ 523.946332][T11349] RBP: 00007fad1ffa0090 R08: 0000000000000000 R09: 0000000000000000 [ 523.946341][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.946350][T11349] R13: 00007fad1f3e6038 R14: 00007fad1f3e5fa0 R15: 00007ffcb0fe4318 [ 523.946373][T11349] [ 524.295595][T11352] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 524.354148][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058c9f000: rx timeout, send abort [ 524.362396][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058c9d400: rx timeout, send abort [ 524.370793][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058c9f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 524.386502][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058c9d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 524.793166][T11360] syz.6.1226: attempt to access beyond end of device [ 524.793166][T11360] ram200: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 525.161877][T11362] overlayfs: failed to clone lowerpath [ 525.744451][ T30] audit: type=1400 audit(2000000314.720:589): avc: denied { append } for pid=11367 comm="syz.6.1230" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 526.447592][ T30] audit: type=1400 audit(2000000315.420:590): avc: denied { connect } for pid=11350 comm="syz.8.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 527.427906][T11400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.697501][ T30] audit: type=1400 audit(2000000316.670:591): avc: denied { read } for pid=11404 comm="syz.5.1239" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 527.928042][ T30] audit: type=1400 audit(2000000316.690:592): avc: denied { open } for pid=11404 comm="syz.5.1239" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 528.140066][T11408] FAULT_INJECTION: forcing a failure. [ 528.140066][T11408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 528.171480][T11408] CPU: 1 UID: 0 PID: 11408 Comm: syz.5.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.171506][T11408] Tainted: [L]=SOFTLOCKUP [ 528.171512][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.171521][T11408] Call Trace: [ 528.171526][T11408] [ 528.171532][T11408] dump_stack_lvl+0x16c/0x1f0 [ 528.171552][T11408] should_fail_ex+0x512/0x640 [ 528.171565][T11408] should_fail_alloc_page+0xe7/0x130 [ 528.171581][T11408] prepare_alloc_pages+0x401/0x670 [ 528.171598][T11408] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 528.171613][T11408] ? find_held_lock+0x2b/0x80 [ 528.171629][T11408] ? is_bpf_text_address+0x8a/0x1a0 [ 528.171641][T11408] ? bpf_ksym_find+0x127/0x1c0 [ 528.171656][T11408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 528.171667][T11408] ? kernel_text_address+0x8d/0x100 [ 528.171681][T11408] ? __kernel_text_address+0xd/0x40 [ 528.171693][T11408] ? unwind_get_return_address+0x59/0xa0 [ 528.171721][T11408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.171741][T11408] ? policy_nodemask+0xea/0x4e0 [ 528.171765][T11408] alloc_pages_mpol+0x1fb/0x550 [ 528.171780][T11408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 528.171797][T11408] alloc_pages_noprof+0x131/0x390 [ 528.171811][T11408] get_free_pages_noprof+0x10/0xb0 [ 528.171829][T11408] ? copy_iovec_from_user+0x131/0x170 [ 528.171844][T11408] vcs_read+0xba/0xbe0 [ 528.171855][T11408] ? iovec_from_user+0xbb/0x140 [ 528.171865][T11408] ? __import_iovec+0x1dd/0x650 [ 528.171873][T11408] ? avc_policy_seqno+0x9/0x20 [ 528.171882][T11408] ? selinux_file_permission+0x126/0x660 [ 528.171898][T11408] ? __pfx_vcs_read+0x10/0x10 [ 528.171907][T11408] ? bpf_lsm_file_permission+0x9/0x10 [ 528.171917][T11408] ? security_file_permission+0x71/0x210 [ 528.171932][T11408] ? rw_verify_area+0xcf/0x6c0 [ 528.171945][T11408] ? __pfx_vcs_read+0x10/0x10 [ 528.171953][T11408] vfs_readv+0x5c1/0x8b0 [ 528.171968][T11408] ? __pfx_vfs_readv+0x10/0x10 [ 528.171989][T11408] ? __fget_files+0x20e/0x3c0 [ 528.172003][T11408] ? __fget_files+0x140/0x3c0 [ 528.172020][T11408] ? do_readv+0x132/0x340 [ 528.172030][T11408] do_readv+0x132/0x340 [ 528.172042][T11408] ? __pfx_do_readv+0x10/0x10 [ 528.172057][T11408] do_syscall_64+0xcd/0xf80 [ 528.172074][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.172084][T11408] RIP: 0033:0x7f457fb8f749 [ 528.172092][T11408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.172102][T11408] RSP: 002b:00007f4580a12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 528.172112][T11408] RAX: ffffffffffffffda RBX: 00007f457fde5fa0 RCX: 00007f457fb8f749 [ 528.172118][T11408] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 528.172124][T11408] RBP: 00007f4580a12090 R08: 0000000000000000 R09: 0000000000000000 [ 528.172130][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.172135][T11408] R13: 00007f457fde6038 R14: 00007f457fde5fa0 R15: 00007ffd054c1fe8 [ 528.172148][T11408] [ 528.662984][ T30] audit: type=1326 audit(2000000317.630:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.0.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a158f749 code=0x0 [ 530.268303][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1248'. [ 530.623271][T11443] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 531.267891][T11451] FAULT_INJECTION: forcing a failure. [ 531.267891][T11451] name failslab, interval 1, probability 0, space 0, times 0 [ 531.278279][T11448] xt_CT: No such helper "pptp" [ 531.323632][T11451] CPU: 1 UID: 0 PID: 11451 Comm: syz.5.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.323663][T11451] Tainted: [L]=SOFTLOCKUP [ 531.323669][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.323678][T11451] Call Trace: [ 531.323684][T11451] [ 531.323691][T11451] dump_stack_lvl+0x16c/0x1f0 [ 531.323720][T11451] should_fail_ex+0x512/0x640 [ 531.323735][T11451] ? fs_reclaim_acquire+0xae/0x150 [ 531.323762][T11451] should_failslab+0xc2/0x120 [ 531.323784][T11451] __kmalloc_noprof+0xeb/0x910 [ 531.323799][T11451] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 531.323825][T11451] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 531.323845][T11451] tomoyo_realpath_from_path+0xc2/0x6e0 [ 531.323870][T11451] ? tomoyo_profile+0x47/0x60 [ 531.323887][T11451] tomoyo_path_number_perm+0x245/0x580 [ 531.323906][T11451] ? tomoyo_path_number_perm+0x237/0x580 [ 531.323927][T11451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.323947][T11451] ? find_held_lock+0x2b/0x80 [ 531.323994][T11451] ? find_held_lock+0x2b/0x80 [ 531.324022][T11451] ? hook_file_ioctl_common+0x144/0x410 [ 531.324044][T11451] ? __fget_files+0x20e/0x3c0 [ 531.324071][T11451] security_file_ioctl+0x9b/0x240 [ 531.324096][T11451] __x64_sys_ioctl+0xb7/0x210 [ 531.324117][T11451] do_syscall_64+0xcd/0xf80 [ 531.324141][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.324158][T11451] RIP: 0033:0x7f457fb8f749 [ 531.324172][T11451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.324188][T11451] RSP: 002b:00007f45809f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.324204][T11451] RAX: ffffffffffffffda RBX: 00007f457fde6090 RCX: 00007f457fb8f749 [ 531.324213][T11451] RDX: 00002000000000c0 RSI: 000000008010aa01 RDI: 0000000000000003 [ 531.324223][T11451] RBP: 00007f45809f1090 R08: 0000000000000000 R09: 0000000000000000 [ 531.324232][T11451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.324241][T11451] R13: 00007f457fde6128 R14: 00007f457fde6090 R15: 00007ffd054c1fe8 [ 531.324264][T11451] [ 531.761400][T11451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 531.788761][T11455] FAULT_INJECTION: forcing a failure. [ 531.788761][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 531.803829][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.6.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.803856][T11455] Tainted: [L]=SOFTLOCKUP [ 531.803861][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.803871][T11455] Call Trace: [ 531.803875][T11455] [ 531.803882][T11455] dump_stack_lvl+0x16c/0x1f0 [ 531.803910][T11455] should_fail_ex+0x512/0x640 [ 531.803925][T11455] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 531.803945][T11455] should_failslab+0xc2/0x120 [ 531.803966][T11455] kmem_cache_alloc_node_noprof+0x86/0x800 [ 531.803982][T11455] ? __alloc_skb+0x156/0x410 [ 531.804008][T11455] ? __alloc_skb+0x156/0x410 [ 531.804022][T11455] __alloc_skb+0x156/0x410 [ 531.804035][T11455] ? __alloc_skb+0x35d/0x410 [ 531.804049][T11455] ? __pfx___alloc_skb+0x10/0x10 [ 531.804064][T11455] ? __import_iovec+0x1dd/0x650 [ 531.804078][T11455] ? selinux_file_permission+0x126/0x660 [ 531.804102][T11455] ppp_write+0xbd/0x400 [ 531.804125][T11455] ? __pfx_ppp_write+0x10/0x10 [ 531.804143][T11455] vfs_writev+0x5df/0xde0 [ 531.804159][T11455] ? get_pid_task+0x106/0x250 [ 531.804175][T11455] ? __pfx_vfs_writev+0x10/0x10 [ 531.804187][T11455] ? find_held_lock+0x2b/0x80 [ 531.804211][T11455] ? __fget_files+0x20e/0x3c0 [ 531.804228][T11455] ? do_pwritev+0x1a6/0x270 [ 531.804239][T11455] do_pwritev+0x1a6/0x270 [ 531.804252][T11455] ? __pfx_do_pwritev+0x10/0x10 [ 531.804267][T11455] do_syscall_64+0xcd/0xf80 [ 531.804283][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.804294][T11455] RIP: 0033:0x7f03cdb8f749 [ 531.804303][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.804312][T11455] RSP: 002b:00007f03ce9fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 531.804322][T11455] RAX: ffffffffffffffda RBX: 00007f03cdde5fa0 RCX: 00007f03cdb8f749 [ 531.804329][T11455] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 531.804334][T11455] RBP: 00007f03ce9fa090 R08: 0000000000000008 R09: 0000000000000000 [ 531.804340][T11455] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 531.804345][T11455] R13: 00007f03cdde6038 R14: 00007f03cdde5fa0 R15: 00007ffe67d47b68 [ 531.804358][T11455] [ 532.166640][ T30] audit: type=1400 audit(2000000321.140:594): avc: denied { map } for pid=11452 comm="syz.8.1253" path="socket:[31816]" dev="sockfs" ino=31816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 532.192608][ T30] audit: type=1400 audit(2000000321.140:595): avc: denied { read accept } for pid=11452 comm="syz.8.1253" path="socket:[31816]" dev="sockfs" ino=31816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 532.350408][T11466] netlink: 35 bytes leftover after parsing attributes in process `syz.8.1253'. [ 532.402817][T11467] [U] [ 532.405792][T11467] [U] [ 532.408492][T11467] [U] [ 532.411183][T11467] [U] [ 532.413867][T11467] [U] [ 532.416552][T11467] [U] [ 532.419239][T11467] [U] [ 532.421914][T11467] [U] [ 532.522619][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1257'. [ 532.568301][T11467] [U] [ 532.571055][T11467] [U] [ 532.573716][T11467] [U] [ 533.101921][T11459] [U] [ 533.950064][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1263'. [ 534.996165][ T30] audit: type=1400 audit(2000000323.970:596): avc: denied { mounton } for pid=11497 comm="syz.0.1266" path="/300/file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.124548][ T30] audit: type=1400 audit(2000000324.000:597): avc: denied { read write } for pid=11497 comm="syz.0.1266" name="file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.280239][ T30] audit: type=1400 audit(2000000324.000:598): avc: denied { open } for pid=11497 comm="syz.0.1266" path="/300/file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.353541][ T30] audit: type=1400 audit(2000000324.000:599): avc: denied { bind } for pid=11481 comm="syz.7.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.375077][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 535.405766][T11513] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1272'. [ 535.436465][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 536.115885][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 536.587149][ T30] audit: type=1400 audit(2000000325.560:600): avc: denied { search } for pid=11528 comm="syz.5.1278" name="/" dev="configfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 536.784357][T11530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.792000][T11530] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 536.806899][T11530] audit: backlog limit exceeded [ 537.249756][T11534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 537.256359][T11534] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 538.204727][T11542] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 538.231582][T11544] FAULT_INJECTION: forcing a failure. [ 538.231582][T11544] name failslab, interval 1, probability 0, space 0, times 0 [ 538.247608][T11544] CPU: 0 UID: 0 PID: 11544 Comm: syz.7.1282 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.247636][T11544] Tainted: [L]=SOFTLOCKUP [ 538.247647][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.247657][T11544] Call Trace: [ 538.247663][T11544] [ 538.247669][T11544] dump_stack_lvl+0x16c/0x1f0 [ 538.247696][T11544] should_fail_ex+0x512/0x640 [ 538.247711][T11544] ? fs_reclaim_acquire+0xae/0x150 [ 538.247735][T11544] should_failslab+0xc2/0x120 [ 538.247757][T11544] __kmalloc_noprof+0xeb/0x910 [ 538.247772][T11544] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 538.247802][T11544] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 538.247824][T11544] tomoyo_realpath_from_path+0xc2/0x6e0 [ 538.247851][T11544] ? tomoyo_profile+0x47/0x60 [ 538.247869][T11544] tomoyo_path_number_perm+0x245/0x580 [ 538.247889][T11544] ? tomoyo_path_number_perm+0x237/0x580 [ 538.247911][T11544] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 538.247932][T11544] ? find_held_lock+0x2b/0x80 [ 538.247979][T11544] ? find_held_lock+0x2b/0x80 [ 538.248003][T11544] ? hook_file_ioctl_common+0x144/0x410 [ 538.248024][T11544] ? __fget_files+0x20e/0x3c0 [ 538.248051][T11544] security_file_ioctl+0x9b/0x240 [ 538.248075][T11544] __x64_sys_ioctl+0xb7/0x210 [ 538.248096][T11544] do_syscall_64+0xcd/0xf80 [ 538.248122][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.248137][T11544] RIP: 0033:0x7f4d2eb8f749 [ 538.248151][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.248166][T11544] RSP: 002b:00007f4d2f9af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.248181][T11544] RAX: ffffffffffffffda RBX: 00007f4d2ede5fa0 RCX: 00007f4d2eb8f749 [ 538.248192][T11544] RDX: 0000200000000000 RSI: 000000004048aec9 RDI: 0000000000000004 [ 538.248201][T11544] RBP: 00007f4d2f9af090 R08: 0000000000000000 R09: 0000000000000000 [ 538.248211][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.248220][T11544] R13: 00007f4d2ede6038 R14: 00007f4d2ede5fa0 R15: 00007ffc5c234788 [ 538.248244][T11544] [ 538.248250][T11544] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.168871][T11566] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 540.185201][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1290'. [ 540.571360][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 540.571376][ T30] audit: type=1400 audit(2000000329.540:812): avc: denied { lock } for pid=11580 comm="syz.0.1294" path="socket:[32886]" dev="sockfs" ino=32886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 540.645804][ T30] audit: type=1400 audit(2000000329.620:813): avc: denied { write } for pid=11582 comm="syz.8.1295" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 540.957642][ T30] audit: type=1400 audit(2000000329.850:814): avc: denied { ioctl } for pid=11573 comm="syz.7.1291" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 541.425584][ T5967] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 541.614369][ T5967] usb 9-1: Using ep0 maxpacket: 8 [ 541.630340][ T5967] usb 9-1: config index 0 descriptor too short (expected 47, got 45) [ 541.660293][ T5967] usb 9-1: config 17 has an invalid descriptor of length 11, skipping remainder of the config [ 541.701363][ T5967] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 541.725381][ T5967] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 541.739955][ T5967] usb 9-1: config 17 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.762340][ T5967] usb 9-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 541.787805][ T5967] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.821447][ T5967] usb 9-1: Product: syz [ 541.842107][ T5967] usb 9-1: Manufacturer: syz [ 541.856258][ T5967] usb 9-1: SerialNumber: syz [ 541.886369][ T5967] usbtouchscreen 9-1:17.0: probe with driver usbtouchscreen failed with error -8 [ 542.194921][ T5967] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 542.256846][T11634] syz.5.1302: attempt to access beyond end of device [ 542.256846][T11634] ram200: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 542.624125][ T5967] usb 8-1: Using ep0 maxpacket: 16 [ 542.632665][ T5967] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 542.651372][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.692956][T11590] netlink: 'syz.8.1296': attribute type 13 has an invalid length. [ 542.705040][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.815630][T11590] gretap0: refused to change device tx_queue_len [ 542.827431][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.850246][T11590] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 542.908923][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.955111][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.962409][ T8448] usb 9-1: USB disconnect, device number 11 [ 543.045190][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.080214][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.102872][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.147636][ T5967] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 543.175820][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 543.199857][ T5967] usb 8-1: SerialNumber: syz [ 543.216101][ T5967] usb 8-1: config 0 descriptor?? [ 543.325285][ T5967] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input21 [ 543.682832][ T5173] bcm5974 8-1:0.0: could not read from device [ 543.701006][ T5967] usb 8-1: USB disconnect, device number 8 [ 544.588676][T11676] ceph: No mds server is up or the cluster is laggy [ 544.606053][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 544.688306][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 545.615856][T11685] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 545.963684][ T30] audit: type=1400 audit(2000000334.910:815): avc: denied { shutdown } for pid=11683 comm="syz.7.1311" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.125520][ T30] audit: type=1400 audit(2000000335.090:816): avc: denied { unmount } for pid=11700 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 546.908399][T11697] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1311'. [ 550.190955][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5a3400: rx timeout, send abort [ 550.199324][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5a1400: rx timeout, send abort [ 550.209014][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c5a3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 550.223790][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c5a1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 550.517277][ T30] audit: type=1400 audit(2000000339.390:817): avc: denied { name_bind } for pid=11759 comm="syz.6.1327" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 550.906190][T11773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.109530][ T30] audit: type=1400 audit(2000000340.070:818): avc: denied { ioctl } for pid=11777 comm="syz.5.1333" path="socket:[33090]" dev="sockfs" ino=33090 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 551.447591][T11787] loop2: detected capacity change from 0 to 7 [ 551.474892][T11601] Dev loop2: unable to read RDB block 7 [ 551.480677][T11601] loop2: AHDI p1 p2 p3 [ 551.485229][T11601] loop2: partition table partially beyond EOD, truncated [ 551.518717][T11793] input: syz1 as /devices/virtual/input/input22 [ 551.526050][T11601] loop2: p1 start 1601398130 is beyond EOD, truncated [ 551.532824][T11601] loop2: p2 start 1702059890 is beyond EOD, truncated [ 551.584861][T11787] Dev loop2: unable to read RDB block 7 [ 551.701630][T11787] loop2: AHDI p1 p2 p3 [ 551.720595][T11787] loop2: partition table partially beyond EOD, truncated [ 551.824342][T11787] loop2: p1 start 1601398130 is beyond EOD, truncated [ 551.876490][T11787] loop2: p2 start 1702059890 is beyond EOD, truncated [ 552.491233][T11809] overlayfs: missing 'lowerdir' [ 553.393962][ T30] audit: type=1400 audit(2000000342.360:819): avc: denied { ioctl } for pid=11814 comm="syz.8.1343" path="socket:[33207]" dev="sockfs" ino=33207 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 554.346392][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 554.352617][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.359070][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.365510][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.371937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.378395][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.384831][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.391247][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.397678][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.404107][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.410529][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.416985][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.423401][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.429835][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.436279][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.442710][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.449153][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.455603][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.462019][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.468472][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.474904][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.481325][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.487759][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.494187][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.500616][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.507043][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.513462][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.519889][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.526315][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.532746][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.539194][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.545628][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.552065][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.558498][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.564926][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.571357][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.577792][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.584229][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.590646][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.597077][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.603499][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.609932][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.616373][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.622801][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.629245][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.635675][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.642090][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.648520][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.654946][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.661362][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.667795][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.674234][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.680652][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.687087][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.693506][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.699939][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.706370][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.712785][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.719219][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.725649][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.732065][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.738511][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.744936][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.751349][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.757924][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.764358][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.770780][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.777218][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.783644][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.790083][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.796515][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.802931][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.809371][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.815794][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.822216][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.828641][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.835061][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.841485][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.847911][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.854332][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.860742][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.867165][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.873573][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.880008][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.886449][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.892879][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.899310][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.905744][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.912156][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.918580][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.925014][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.931439][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.937865][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.944286][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.950695][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.957120][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.963559][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.969982][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.976426][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.982857][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.989286][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 554.995712][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.002124][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.008558][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.014990][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.021399][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.027823][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.034244][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.040675][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.047113][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.053524][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.059945][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.066380][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.072804][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.079229][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.085663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.092076][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.098507][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.104930][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.111338][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.117775][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.124197][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.130608][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.137029][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.143439][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.149867][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.156303][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.162729][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.169226][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029900000: rx timeout, send abort [ 555.177417][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074d26400: rx timeout, send abort [ 555.186048][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.192488][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.198937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.205369][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.211780][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.218215][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.224661][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.231120][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.237556][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.244013][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.250429][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.256868][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.263279][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.269700][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.276190][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.282675][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.289189][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.295710][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.302189][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.308715][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.315223][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.321755][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.328291][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.334782][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.341264][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.347784][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.354284][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.360751][ T30] audit: type=1400 audit(2000000342.370:820): avc: denied { read } for pid=11814 comm="syz.8.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 555.360775][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.387081][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.393576][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.400114][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.406651][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.413176][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.419733][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.426265][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.432776][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.439353][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.440176][ T30] audit: type=1400 audit(2000000344.310:821): avc: denied { setattr } for pid=11814 comm="syz.8.1343" name="audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 555.445890][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.445963][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.446034][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.446103][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.446167][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.473353][T11827] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1344'. [ 555.476099][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.517089][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.523618][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.530143][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.536700][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.543196][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.549721][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.556272][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.562846][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.569412][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.575992][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.582520][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.589096][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.595656][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.602196][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.608746][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.615295][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.621770][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.628295][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.634778][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.641254][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.647736][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.654722][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.661228][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.667779][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.674392][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.681011][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.687579][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.694074][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.700588][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.707135][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.713606][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.720122][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.726596][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.733030][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.739503][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.745963][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.752392][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.758852][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.765314][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.771746][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.778231][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.784755][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.791227][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.797748][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.804223][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.810663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.817228][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.823773][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.830235][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.836702][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.843133][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.849584][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.856076][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.862526][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.868988][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.875443][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.881893][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.888358][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.894819][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.901276][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.907753][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.914204][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.920644][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.927153][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.933623][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.940092][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.946552][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.952987][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.959482][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.965937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.972389][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.978897][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.985377][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.991830][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 555.998290][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.004753][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.011218][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.017698][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.024160][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.030598][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.037063][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.043511][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.049983][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.056479][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.062952][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.069481][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074d26400: abort rx timeout. Force session deactivation [ 557.331614][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074d27800: rx timeout, send abort [ 557.366879][T11856] netlink: 'syz.7.1352': attribute type 10 has an invalid length. [ 557.839864][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074d27800: abort rx timeout. Force session deactivation [ 559.239260][ T30] audit: type=1400 audit(2000000348.210:822): avc: denied { mount } for pid=11872 comm="syz.7.1356" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 559.355406][ T30] audit: type=1400 audit(2000000348.280:823): avc: denied { bind } for pid=11853 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 559.590494][T11895] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1360'. [ 559.607529][ T30] audit: type=1400 audit(2000000348.580:824): avc: denied { unmount } for pid=9137 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 559.638207][T11896] syzkaller0: entered promiscuous mode [ 559.645804][T11896] syzkaller0: entered allmulticast mode [ 559.780620][ T30] audit: type=1326 audit(2000000348.750:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.7.1363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d2eb8f749 code=0x0 [ 561.272521][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1367'. [ 562.447976][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.455848][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.898760][T11913] syzkaller0: entered promiscuous mode [ 562.907721][T11913] syzkaller0: entered allmulticast mode [ 564.167380][T11961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 564.305670][T11969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 564.993919][T11971] input: syz0 as /devices/virtual/input/input24 [ 566.315655][T11997] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20003 [ 566.324040][T11999] tmpfs: Unknown parameter 'm-X箞LHc#' [ 566.350007][ T30] audit: type=1400 audit(2000000355.320:826): avc: denied { create } for pid=11995 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 567.802904][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a703800: rx timeout, send abort [ 567.811200][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a702000: rx timeout, send abort [ 567.820601][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a703800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 567.834905][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a702000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 569.803012][T12029] syzkaller0: entered promiscuous mode [ 569.833859][T12029] syzkaller0: entered allmulticast mode [ 569.917493][T12055] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 570.378367][ T7060] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 570.557307][ T7060] usb 6-1: Using ep0 maxpacket: 32 [ 570.578229][ T7060] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 570.606858][ T7060] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 570.624131][ T7060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.632160][ T7060] usb 6-1: Product: syz [ 570.652328][ T7060] usb 6-1: Manufacturer: syz [ 570.670831][ T7060] usb 6-1: SerialNumber: syz [ 570.686480][ T7060] usb 6-1: config 0 descriptor?? [ 570.699355][T12064] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 570.727958][ T7060] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input25 [ 570.963608][ T7060] usb 6-1: USB disconnect, device number 26 [ 570.969644][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 570.975571][T12075] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1396'. [ 571.701712][ T5920] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 571.885765][ T5920] usb 9-1: config 2 has an invalid interface number: 255 but max is 0 [ 571.894173][ T5920] usb 9-1: config 2 has no interface number 0 [ 571.902112][ T5920] usb 9-1: config 2 interface 255 has no altsetting 0 [ 571.911656][ T5920] usb 9-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=4f.0b [ 571.923073][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.966551][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 571.972662][ T9508] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 571.983523][ T5920] usb 9-1: Product: syz [ 571.983527][ T9508] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 571.987755][ T5920] usb 9-1: Manufacturer: syz [ 571.987771][ T5920] usb 9-1: SerialNumber: syz [ 573.908927][ T5920] ums-sddr55 9-1:2.255: USB Mass Storage device detected [ 573.941019][ T5920] ums-sddr55 9-1:2.255: Quirks match for vid 07c4 pid a103: 8 [ 574.038659][T12102] syzkaller0: entered promiscuous mode [ 574.054030][ T5920] usb 9-1: USB disconnect, device number 12 [ 574.060045][T12102] syzkaller0: entered allmulticast mode [ 574.280139][T12127] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1403'. [ 574.297036][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1403'. [ 576.445489][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 576.469505][ T9508] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 576.503008][ T9508] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 576.766121][T10929] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 576.924096][T10929] usb 9-1: Using ep0 maxpacket: 8 [ 577.273261][T10929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.292172][T10929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.311138][T10929] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 577.324754][T10929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.370178][T10929] usb 9-1: config 0 descriptor?? [ 577.795097][T10929] usbhid 9-1:0.0: can't add hid device: -71 [ 577.838863][T10929] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 577.856589][T10929] usb 9-1: USB disconnect, device number 13 [ 580.225554][ T5920] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 580.459143][ T5920] usb 9-1: Using ep0 maxpacket: 32 [ 580.512517][ T5920] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 580.529251][ T5920] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 580.543624][ T5920] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 580.563213][ T5920] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 580.593552][ T5920] usb 9-1: config 0 interface 0 has no altsetting 0 [ 580.634633][ T5920] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 580.645148][ T5920] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 580.660560][ T5920] usb 9-1: Product: syz [ 580.665504][ T5920] usb 9-1: Manufacturer: syz [ 580.670255][ T5920] usb 9-1: SerialNumber: syz [ 580.753881][ T5920] usb 9-1: config 0 descriptor?? [ 580.780972][ T5920] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 580.822640][ T5920] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 581.116911][T12233] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1423'. [ 581.159562][T12206] kvm: kvm [12204]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffca01000080 [ 581.307142][T11173] usb 9-1: USB disconnect, device number 14 [ 581.315921][T11173] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 581.364313][ T5920] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 581.536075][ T5920] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 581.551077][ T5920] usb 8-1: config 0 has no interface number 0 [ 581.560069][ T5920] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 581.569632][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.577900][ T5920] usb 8-1: Product: syz [ 581.582135][ T5920] usb 8-1: Manufacturer: syz [ 581.588644][ T5920] usb 8-1: SerialNumber: syz [ 581.602736][ T5920] usb 8-1: config 0 descriptor?? [ 581.791588][T12193] syzkaller0: entered promiscuous mode [ 581.803781][T12193] syzkaller0: entered allmulticast mode [ 581.817921][ T5920] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 581.853882][ T5920] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.901330][ T5920] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 581.934379][ T5920] usb 8-1: media controller created [ 581.981145][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.007169][T12242] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 582.085598][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.125221][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.500807][ T89] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 582.763955][ T89] usb 7-1: Using ep0 maxpacket: 8 [ 582.778171][ T89] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 582.795622][ T89] usb 7-1: config 0 has no interface number 0 [ 582.812000][ T89] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.854760][ T89] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 582.878528][ T89] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.896343][ T89] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.916486][ T89] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 582.961361][ T89] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.998620][ T89] usb 7-1: config 0 descriptor?? [ 583.017973][ T89] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 583.085439][ T5920] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 583.321138][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 583.327450][ T5920] usb 7-1: USB disconnect, device number 18 [ 583.376736][T12250] ldusb: No device or device unplugged -19 [ 583.382786][ T5920] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 583.893915][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 583.894010][ T9508] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 583.910042][ T9508] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 586.169635][ T89] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 586.375694][ T89] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 586.384668][ T89] usb 6-1: config 0 has no interface number 0 [ 586.393531][ T89] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 586.403383][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.413104][ T89] usb 6-1: Product: syz [ 586.418647][ T89] usb 6-1: Manufacturer: syz [ 586.423280][ T89] usb 6-1: SerialNumber: syz [ 586.430563][ T89] usb 6-1: config 0 descriptor?? [ 587.443306][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 588.375168][T12322] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1438'. [ 589.118515][ T9508] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 589.134061][ T9508] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 589.159751][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'. [ 589.284245][ T89] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 589.593293][ T89] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 589.659934][ T89] asix 6-1:0.251: probe with driver asix failed with error -5 [ 589.674676][ T30] audit: type=1400 audit(2000000378.650:827): avc: denied { setopt } for pid=12329 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 589.731532][ T89] usb 6-1: USB disconnect, device number 27 [ 589.863643][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c74400: rx timeout, send abort [ 590.363724][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c74400: abort rx timeout. Force session deactivation [ 590.412993][T12334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.722654][ T5862] usb 8-1: USB disconnect, device number 9 [ 591.244660][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 591.255479][T12355] IPVS: stopping backup sync thread 12356 ... [ 591.262532][ T9508] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 591.269345][ T9508] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 591.339971][T12355] hma224): entered promiscuous mode [ 591.493932][ T5911] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 592.214144][ T5911] usb 9-1: Using ep0 maxpacket: 32 [ 592.222485][ T5911] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 592.232512][ T5911] usb 9-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 592.243429][ T5911] usb 9-1: Manufacturer: syz [ 592.256777][ T5911] usb 9-1: config 0 descriptor?? [ 592.265177][T12369] loop4: detected capacity change from 0 to 2560 [ 592.405004][T12369] loop4: detected capacity change from 2560 to 524287999 [ 592.626103][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 592.636487][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.071701][T12372] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1450'. [ 593.088368][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.113840][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.121791][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.128269][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.131764][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.148267][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.170315][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.180174][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.190044][T11601] ldm_validate_partition_table(): Disk read failed. [ 593.196793][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.207341][T11601] Buffer I/O error on dev loop4, logical block 0, async page read [ 593.225185][T11601] Dev loop4: unable to read RDB block 0 [ 593.225636][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 593.231013][T11601] loop4: unable to read partition table [ 593.267209][T12369] ldm_validate_partition_table(): Disk read failed. [ 593.270642][ T5911] usb 9-1: media controller created [ 593.453894][T12369] Dev loop4: unable to read RDB block 0 [ 593.480694][T12369] loop4: unable to read partition table [ 593.500525][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.510566][T12369] loop_reread_partitions: partition scan of loop4 (޼DrqN- !cnmY [ 593.510566][T12369] ի@ hmM=Kaʙ) failed (rc=-5) [ 593.550127][ T30] audit: type=1400 audit(2000000382.520:828): avc: denied { ioctl } for pid=12380 comm="syz.6.1453" path="socket:[34975]" dev="sockfs" ino=34975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 593.601388][ T5188] ldm_validate_partition_table(): Disk read failed. [ 593.609865][ T5188] Dev loop4: unable to read RDB block 0 [ 593.624420][ T5188] loop4: unable to read partition table [ 593.836128][ T9508] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 593.871691][ T5911] az6027: usb out operation failed. (-71) [ 593.883923][ T5911] stb0899_attach: Driver disabled by Kconfig [ 593.897185][ T5911] az6027: no front-end attached [ 593.897185][ T5911] [ 593.910243][ T5911] az6027: usb out operation failed. (-71) [ 593.917116][ T5911] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 593.929842][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26 [ 593.955955][ T5911] dvb-usb: schedule remote query interval to 400 msecs. [ 593.962991][ T5911] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 593.993598][ T5911] usb 9-1: USB disconnect, device number 15 [ 594.102220][ T5911] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 595.591376][T12396] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1457'. [ 595.642915][T12399] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 595.655160][T12399] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 595.845141][ T5911] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 596.089461][ T5911] usb 8-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 596.101903][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.136590][ T5911] usb 8-1: Product: syz [ 596.145424][ T5911] usb 8-1: Manufacturer: syz [ 596.311447][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c0fc00: rx timeout, send abort [ 596.319761][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c0f400: rx timeout, send abort [ 596.329098][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c0fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 596.343456][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c0f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 596.736433][T10929] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 597.116949][ T5911] usb 8-1: SerialNumber: syz [ 597.135629][ T5911] usb 8-1: config 0 descriptor?? [ 597.247232][T10929] usb 9-1: config index 0 descriptor too short (expected 8192, got 36) [ 597.335695][T10929] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.349248][ T5826] Bluetooth: hci3: urb ffff888028c0ff00 submission failed (2) [ 597.386749][T10929] usb 9-1: config 0 has no interfaces? [ 597.404165][T10929] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 597.413299][T10929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.970103][T10929] usb 9-1: config 0 descriptor?? [ 598.551806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078d0f400: rx timeout, send abort [ 598.560180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058edd000: rx timeout, send abort [ 598.569614][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078d0f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 598.583997][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058edd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 598.738585][ T30] audit: type=1400 audit(2000000387.710:829): avc: denied { read write } for pid=12423 comm="syz.5.1467" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 598.777985][ T30] audit: type=1400 audit(2000000387.710:830): avc: denied { open } for pid=12423 comm="syz.5.1467" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 598.783265][ T116] usb 9-1: USB disconnect, device number 16 [ 598.833950][ T9508] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 598.996208][ T9508] usb 7-1: Using ep0 maxpacket: 8 [ 599.003324][ T9508] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.023630][ T9508] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.034213][ T9508] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 599.043480][ T9508] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.058846][T12428] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1468'. [ 599.073947][T10929] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 599.100444][T12428] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 599.108637][ T9508] usb 7-1: config 0 descriptor?? [ 599.238801][T10929] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 599.251388][T10929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.261038][T10929] usb 6-1: Product: syz [ 599.265334][T10929] usb 6-1: Manufacturer: syz [ 599.270320][T10929] usb 6-1: SerialNumber: syz [ 599.298886][T10929] usb 6-1: config 0 descriptor?? [ 599.517496][ T9508] usbhid 7-1:0.0: can't add hid device: -71 [ 599.523532][ T9508] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 599.546974][ T9508] usb 7-1: USB disconnect, device number 20 [ 599.559170][ T30] audit: type=1400 audit(2000000388.530:831): avc: denied { bind } for pid=12429 comm="syz.8.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 599.610561][T10929] usb 6-1: USB disconnect, device number 28 [ 599.801548][ T5913] usb 8-1: USB disconnect, device number 10 [ 602.134520][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062f48000: rx timeout, send abort [ 602.142819][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062f4a000: rx timeout, send abort [ 602.154052][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062f48000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 602.168434][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062f4a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 602.503981][ T9508] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 602.829410][T12471] netlink: 'syz.0.1477': attribute type 4 has an invalid length. [ 603.503802][ T9508] usb 9-1: Using ep0 maxpacket: 32 [ 603.512293][ T9508] usb 9-1: config 0 has an invalid interface number: 43 but max is 0 [ 603.520500][ T9508] usb 9-1: config 0 has no interface number 0 [ 603.533108][ T9508] usb 9-1: New USB device found, idVendor=2040, idProduct=b200, bcdDevice=b3.c6 [ 603.547077][ T9508] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.558043][ T9508] usb 9-1: Product: syz [ 603.562235][ T9508] usb 9-1: Manufacturer: syz [ 603.567293][ T9508] usb 9-1: SerialNumber: syz [ 603.587676][ T9508] usb 9-1: config 0 descriptor?? [ 603.652690][ T5913] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 603.718839][T12485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.835810][ T30] audit: type=1400 audit(2000000392.720:832): avc: denied { set_context_mgr } for pid=12483 comm="syz.7.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 603.993850][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 604.001076][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.044343][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.887811][ T5913] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 604.922002][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.941512][ T5913] usb 6-1: config 0 descriptor?? [ 606.206991][T12510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1491'. [ 606.245497][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 606.330748][ T5913] usbhid 6-1:0.0: can't add hid device: -71 [ 606.352985][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 606.437687][ T5913] usb 6-1: USB disconnect, device number 29 [ 606.492016][ T9508] dvb-usb: found a 'Hauppauge ATSC MiniCard (B200)' in cold state, will try to load a firmware [ 606.516778][ T9508] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 606.556921][ T9508] dib0700: firmware download failed at 7 with -22 [ 606.710370][ T9508] usb 9-1: USB disconnect, device number 17 [ 606.881179][T12518] syz.8.1493: attempt to access beyond end of device [ 606.881179][T12518] ram200: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 607.064231][ T5862] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 607.368324][ T5862] usb 8-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 607.381725][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.405198][ T5862] usb 8-1: config 0 descriptor?? [ 607.426007][ T5862] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 607.529603][T12527] CUSE: info not properly terminated [ 607.565498][ T30] audit: type=1400 audit(2000000396.530:833): avc: denied { mounton } for pid=12531 comm="syz.8.1499" path="/124/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 607.617859][ T5862] gspca_sn9c2028: read1 error -32 [ 607.623331][ T5862] gspca_sn9c2028: read1 error -32 [ 607.625356][ T6095] IPVS: starting estimator thread 0... [ 607.663831][ T9508] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 607.783830][T12535] IPVS: using max 50 ests per chain, 120000 per kthread [ 607.955564][ T9508] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.968442][ T9508] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.978790][ T9508] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.988293][ T9508] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.234580][ T5862] gspca_sn9c2028: read1 error -110 [ 608.405243][T12525] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 608.426007][ T5862] sn9c2028 8-1:0.0: probe with driver sn9c2028 failed with error -110 [ 608.454306][ T6095] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 608.463715][ T9508] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.616125][ T6095] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 608.631064][ T6095] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 608.644167][ T6095] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.656021][ T6095] usb 9-1: Product: syz [ 608.656864][ T5862] usb 6-1: USB disconnect, device number 30 [ 608.713142][ T6095] usb 9-1: Manufacturer: syz [ 608.722771][ T6095] usb 9-1: SerialNumber: syz [ 608.746878][ T6095] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 609.165408][ T6095] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 609.184177][ T6095] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 609.195877][ T6095] usb 9-1: media controller created [ 609.225378][ T6095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.483530][ T5862] usb 9-1: USB disconnect, device number 18 [ 609.548695][ T6095] usb 8-1: USB disconnect, device number 11 [ 610.985617][ T30] audit: type=1800 audit(2000000399.950:834): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1511" name="nullb0" dev="tmpfs" ino=1087 res=0 errno=0 [ 611.173799][ T5913] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 611.355351][ T5913] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.384116][ T5913] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 611.432099][ T5913] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 611.467944][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.497405][T12574] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 611.508656][ T5913] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.783994][ T30] audit: type=1326 audit(2000000400.660:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 611.922030][ T30] audit: type=1326 audit(2000000400.660:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 611.953170][ T30] audit: type=1326 audit(2000000400.660:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 612.040719][T12593] syz_tun: entered promiscuous mode [ 612.042759][ T5883] usb 6-1: USB disconnect, device number 31 [ 612.051841][T12593] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 612.070048][ T30] audit: type=1326 audit(2000000400.660:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 612.243588][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1514'. [ 612.496737][ T30] audit: type=1326 audit(2000000400.660:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 612.624013][ T30] audit: type=1326 audit(2000000400.660:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 612.652785][ T30] audit: type=1326 audit(2000000400.670:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 612.680204][ T30] audit: type=1326 audit(2000000400.670:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 613.081162][ T30] audit: type=1326 audit(2000000400.670:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1f18f749 code=0x7ffc0000 [ 617.494081][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 617.494097][ T30] audit: type=1400 audit(2000000406.470:870): avc: denied { ioctl } for pid=12648 comm="syz.7.1528" path="socket:[36215]" dev="sockfs" ino=36215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 617.497577][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1528'. [ 617.539299][T12653] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 617.681945][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1529'. [ 620.214641][ T6631] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 620.634068][ T6631] usb 8-1: Using ep0 maxpacket: 8 [ 620.903757][ T6631] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 620.985141][ T6631] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 621.015186][ T6631] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.313923][ T6631] usb 8-1: Product: syz [ 621.318168][ T6631] usb 8-1: Manufacturer: syz [ 621.322748][ T6631] usb 8-1: SerialNumber: syz [ 621.354557][ T6631] usb 8-1: config 0 descriptor?? [ 621.367367][ T6631] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 621.449936][ T30] audit: type=1400 audit(2000000410.420:871): avc: denied { attach_queue } for pid=12711 comm="syz.5.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 622.617153][ T6631] gspca_zc3xx: reg_w_i err -71 [ 623.225383][T12729] ceph: No mds server is up or the cluster is laggy [ 623.248714][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 623.254813][ T6631] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 623.283473][ T6631] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 623.313922][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 623.350637][ T6631] usb 8-1: USB disconnect, device number 12 [ 624.388044][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.394728][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.395688][ T30] audit: type=1400 audit(2000000417.370:872): avc: denied { getopt } for pid=12804 comm="syz.8.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 630.351668][T12827] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 631.015604][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047853400: rx timeout, send abort [ 631.023935][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047851800: rx timeout, send abort [ 631.033794][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888047853400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 631.048170][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888047851800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 631.174712][ T30] audit: type=1400 audit(2000000419.800:873): avc: denied { getopt } for pid=12829 comm="syz.8.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 631.503904][T11173] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 631.978722][T12846] ceph: No mds server is up or the cluster is laggy [ 632.000976][ T9508] libceph: connect (1)[c::]:6789 error -101 [ 632.297606][T11173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 632.310998][ T9508] libceph: mon0 (1)[c::]:6789 connect error [ 632.320000][T11173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 632.398240][T11173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 632.413567][T11173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 632.431236][T11173] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 632.443572][T11173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.467968][T11173] usb 6-1: Product: syz [ 632.478904][T11173] usb 6-1: Manufacturer: syz [ 632.483522][T11173] usb 6-1: SerialNumber: syz [ 632.613312][T11173] usb 6-1: config 0 descriptor?? [ 632.978615][T11173] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 633.810473][ T6631] usb 6-1: USB disconnect, device number 32 [ 634.374854][ T6631] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 634.504840][T12886] ceph: No mds server is up or the cluster is laggy [ 634.657344][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 634.670164][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 635.160886][ T6631] usb 6-1: Using ep0 maxpacket: 8 [ 635.545287][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.551749][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.558219][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.564664][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.571093][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.577519][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.583985][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.590428][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.596857][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.603273][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.609718][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.616158][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.622588][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.629012][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.635439][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.641868][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.648304][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.654737][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.661152][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.667581][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.674046][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.680464][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.686903][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.693332][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.699759][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.706205][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.712618][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.719043][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.725479][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.731898][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.738331][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.744758][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.751175][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.757619][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.764067][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.770520][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.776975][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.783399][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.789846][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.796290][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.802719][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.809165][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.815609][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.822046][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.828484][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.834926][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.841366][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.847806][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.854242][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.860658][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.867084][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.873509][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.879950][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.886378][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.892807][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.899233][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.905665][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.912079][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.918505][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.924950][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.931367][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.937817][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.944258][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 635.950684][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 636.019516][ T6631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.095947][ T6631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.098290][T12901] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 636.108848][ T6631] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 636.131757][ T6631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.134132][T12903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=12903 comm=syz.0.1596 [ 636.142506][ T6631] usb 6-1: config 0 descriptor?? [ 636.815297][T12908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.031055][ T6631] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 637.060956][ T6631] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 637.097194][ T6631] holtek 0003:1241:5015.0009: item fetching failed at offset 2/5 [ 637.117645][ T6631] holtek 0003:1241:5015.0009: parse failed [ 637.207325][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034d0d400: rx timeout, send abort [ 637.444637][ T6631] holtek 0003:1241:5015.0009: probe with driver holtek failed with error -22 [ 637.513699][ T6631] usb 6-1: USB disconnect, device number 33 [ 637.715576][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034d0d400: abort rx timeout. Force session deactivation [ 638.145187][T12931] netlink: 'syz.5.1603': attribute type 1 has an invalid length. [ 639.007672][T12941] ceph: No mds server is up or the cluster is laggy [ 639.016922][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 639.038526][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 639.064165][T11173] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 639.385864][T11173] usb 6-1: Using ep0 maxpacket: 32 [ 639.392689][T11173] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 639.401320][T11173] usb 6-1: config 0 has no interface number 0 [ 640.362133][T11173] usb 6-1: config 0 interface 151 has no altsetting 0 [ 640.377107][ T30] audit: type=1400 audit(2000000429.350:874): avc: denied { bind } for pid=12947 comm="syz.8.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 640.422367][T11173] usb 6-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 640.617778][ T30] audit: type=1400 audit(2000000429.380:875): avc: denied { listen } for pid=12947 comm="syz.8.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 640.673823][T12959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12959 comm=syz.8.1609 [ 640.717128][T11173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.729483][T11173] usb 6-1: Product: syz [ 640.847825][T11173] usb 6-1: Manufacturer: syz [ 640.981121][T11173] usb 6-1: SerialNumber: syz [ 641.020808][T11173] usb 6-1: config 0 descriptor?? [ 641.031113][T11173] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 641.104881][ T5862] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 641.379277][T11173] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 641.392297][ T5862] usb 9-1: Using ep0 maxpacket: 16 [ 641.409752][T11173] sq905c 6-1:0.151: Get version command failed [ 641.423832][ T5862] usb 9-1: config 1 interface 0 altsetting 235 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.427441][T11173] sq905c 6-1:0.151: probe with driver sq905c failed with error -71 [ 641.456998][T12972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12972 comm=syz.5.1615 [ 641.474488][T11173] usb 6-1: USB disconnect, device number 34 [ 641.500306][ T5862] usb 9-1: config 1 interface 0 has no altsetting 0 [ 641.522783][ T5862] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40 [ 641.559843][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.578292][ T5862] usb 9-1: Product: syz [ 641.589673][ T5862] usb 9-1: Manufacturer: చ [ 641.593351][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1617'. [ 641.603905][ T5862] usb 9-1: SerialNumber: syz [ 641.821076][T12978] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 642.163286][ T5862] usbhid 9-1:1.0: can't add hid device: -71 [ 642.178236][ T5862] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 642.196407][ T5862] usb 9-1: USB disconnect, device number 19 [ 642.205401][T12980] binder: 12979:12980 ioctl c0306201 200000000540 returned -22 [ 642.608021][T12988] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1619'. [ 643.016751][ T5913] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 643.074579][T12993] usb usb8: usbfs: process 12993 (syz.6.1621) did not claim interface 0 before use [ 643.183825][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 644.293879][ T5913] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 644.309836][ T5913] usb 6-1: config 179 has no interface number 0 [ 644.319217][T13004] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1624'. [ 644.324055][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 644.370561][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 644.385784][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 644.399056][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 644.413593][ T5913] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 644.440680][ T5913] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 644.457573][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.989899][ T5913] usb 6-1: can't set config #179, error -71 [ 645.025205][ T5913] usb 6-1: USB disconnect, device number 35 [ 645.066056][T13013] netlink: 'syz.0.1627': attribute type 30 has an invalid length. [ 645.116919][T13017] netlink: 'syz.0.1627': attribute type 30 has an invalid length. [ 645.244208][ T5911] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 645.325200][T13026] bridge0: port 3(syz_tun) entered blocking state [ 645.352113][T13026] bridge0: port 3(syz_tun) entered disabled state [ 645.374103][T13026] syz_tun: entered allmulticast mode [ 645.381083][T13026] syz_tun: entered promiscuous mode [ 645.394580][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 645.406579][ T5911] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.424669][T13026] bridge0: port 3(syz_tun) entered blocking state [ 645.431184][T13026] bridge0: port 3(syz_tun) entered forwarding state [ 645.447324][ T5911] usb 7-1: config 0 interface 0 has no altsetting 0 [ 645.463845][ T5911] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 645.472905][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.496286][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1632'. [ 645.514125][ T5911] usb 7-1: config 0 descriptor?? [ 645.574617][T13026] bridge0: port 3(syz_tun) entered disabled state [ 645.706898][T13026] syz_tun (unregistering): left allmulticast mode [ 645.733989][T13026] syz_tun (unregistering): left promiscuous mode [ 645.740763][T13026] bridge0: port 3(syz_tun) entered disabled state [ 646.003213][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.033937][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.222718][ T5911] magicmouse 0003:05AC:0265.000A: hidraw0: USB HID v0.07 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0 [ 647.241040][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 648.079326][ T30] audit: type=1400 audit(2000000437.050:876): avc: denied { ioctl } for pid=13051 comm="syz.8.1638" path="socket:[38135]" dev="sockfs" ino=38135 ioctlcmd=0x4b41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 648.163660][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1640'. [ 648.274172][ T6631] usb 7-1: USB disconnect, device number 21 [ 648.983159][ T30] audit: type=1400 audit(2000000437.950:877): avc: denied { lock } for pid=13073 comm="syz.8.1644" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 649.033922][T13070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.114318][ T30] audit: type=1400 audit(2000000437.990:878): avc: denied { sys_module } for pid=13073 comm="syz.8.1644" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 649.491531][T13088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.846430][T13092] syz.8.1647: attempt to access beyond end of device [ 649.846430][T13092] ram200: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 650.389446][ T30] audit: type=1400 audit(2000000438.800:879): avc: denied { write } for pid=13079 comm="syz.5.1646" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 650.484650][ T30] audit: type=1400 audit(2000000438.810:880): avc: denied { ioctl } for pid=13079 comm="syz.5.1646" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 651.623540][T13100] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 652.821444][T13106] netlink: 'syz.8.1653': attribute type 10 has an invalid length. [ 652.861553][T13106] veth0_vlan: left promiscuous mode [ 652.867664][T13106] veth0_vlan: entered promiscuous mode [ 652.875743][T13106] team0: Device veth0_vlan failed to register rx_handler [ 654.656947][T13144] syz_tun: left promiscuous mode [ 654.699820][T13144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.297710][T11173] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 656.041032][T13157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.056807][T11173] usb 7-1: Using ep0 maxpacket: 16 [ 656.085673][T11173] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.103818][T11173] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 656.473293][T11173] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 656.522355][T11173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.569715][T11173] usb 7-1: Product: syz [ 656.577683][T11173] usb 7-1: Manufacturer: syz [ 656.585460][T11173] usb 7-1: SerialNumber: syz [ 656.672538][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1668'. [ 656.685517][T11173] usb 7-1: config 0 descriptor?? [ 656.716022][ T30] audit: type=1400 audit(2000000445.680:881): avc: denied { mount } for pid=13162 comm="syz.7.1669" name="/" dev="autofs" ino=38280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 657.362973][T13173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.391165][ T30] audit: type=1400 audit(2000000446.360:882): avc: denied { write } for pid=13133 comm="syz.6.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 657.517017][ T30] audit: type=1400 audit(2000000446.490:883): avc: denied { unmount } for pid=9137 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 657.554028][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1672'. [ 657.589891][T13178] netlink: 'syz.7.1672': attribute type 10 has an invalid length. [ 658.103082][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1676'. [ 658.724202][T11173] usb 7-1: USB disconnect, device number 22 [ 662.039340][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051490800: rx timeout, send abort [ 662.047673][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051493c00: rx timeout, send abort [ 662.057695][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051490800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 662.071999][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051493c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 662.357420][ C1] sched: DL replenish lagged too much [ 662.586006][T13206] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1680'. [ 663.487199][T13215] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 665.105234][T13238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.504296][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1689'. [ 666.535660][T13250] syz.6.1691: attempt to access beyond end of device [ 666.535660][T13250] ram200: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 668.033139][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1695'. [ 668.065806][ T89] IPVS: starting estimator thread 0... [ 668.072473][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1694'. [ 668.104823][ T30] audit: type=1400 audit(2000000457.080:884): avc: denied { read } for pid=13259 comm="syz.6.1695" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 668.174048][T13261] IPVS: using max 76 ests per chain, 182400 per kthread [ 668.934355][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 669.374173][T13279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=13279 comm=syz.8.1701 [ 671.075560][T13298] kAFS: unable to lookup cell '({^@' [ 671.116835][T13298] IPVS: stopping backup sync thread 12653 ... [ 671.824587][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582d1800: rx timeout, send abort [ 671.832894][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582d2c00: rx timeout, send abort [ 671.841541][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880582d1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 671.855891][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880582d2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 671.982709][T13313] wg1: entered promiscuous mode [ 672.003377][T13313] wg1: entered allmulticast mode [ 672.219408][ T30] audit: type=1400 audit(2000000461.190:885): avc: denied { setopt } for pid=13314 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 672.530024][T13322] veth1_macvtap: left promiscuous mode [ 672.535587][T13322] macsec0: entered allmulticast mode [ 672.548027][T13322] veth1_macvtap: entered promiscuous mode [ 672.553802][T13322] veth1_macvtap: entered allmulticast mode [ 672.559644][T13322] macsec0: left allmulticast mode [ 672.564718][T13322] veth1_macvtap: left allmulticast mode [ 672.571781][ T30] audit: type=1400 audit(2000000461.490:886): avc: denied { write } for pid=13321 comm="syz.5.1711" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 674.237379][T13337] FAULT_INJECTION: forcing a failure. [ 674.237379][T13337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.238880][T13337] [ 674.238887][T13337] ====================================================== [ 674.238892][T13337] WARNING: possible circular locking dependency detected [ 674.238901][T13337] syzkaller #0 Tainted: G L [ 674.238910][T13337] ------------------------------------------------------ [ 674.238915][T13337] syz.5.1716/13337 is trying to acquire lock: [ 674.238924][T13337] ffffffff8e2d6bc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 674.238979][T13337] [ 674.238979][T13337] but task is already holding lock: [ 674.238984][T13337] ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 674.239027][T13337] [ 674.239027][T13337] which lock already depends on the new lock. [ 674.239027][T13337] [ 674.239032][T13337] [ 674.239032][T13337] the existing dependency chain (in reverse order) is: [ 674.239037][T13337] [ 674.239037][T13337] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 674.239057][T13337] _raw_spin_lock_nested+0x31/0x40 [ 674.239078][T13337] raw_spin_rq_lock_nested+0x29/0x130 [ 674.239100][T13337] task_rq_lock+0xcf/0x490 [ 674.239113][T13337] cgroup_move_task+0x81/0x2a0 [ 674.239128][T13337] css_set_move_task+0x288/0x5f0 [ 674.239147][T13337] cgroup_post_fork+0x201/0x9e0 [ 674.239164][T13337] copy_process+0x56b6/0x7430 [ 674.239177][T13337] kernel_clone+0xfc/0x910 [ 674.239189][T13337] user_mode_thread+0xc8/0x110 [ 674.239203][T13337] rest_init+0x23/0x2b0 [ 674.239217][T13337] start_kernel+0x3ef/0x4d0 [ 674.239232][T13337] x86_64_start_reservations+0x18/0x30 [ 674.239250][T13337] x86_64_start_kernel+0x130/0x190 [ 674.239266][T13337] common_startup_64+0x13e/0x148 [ 674.239285][T13337] [ 674.239285][T13337] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 674.239306][T13337] _raw_spin_lock_irqsave+0x3a/0x60 [ 674.239324][T13337] try_to_wake_up+0xb7/0x1860 [ 674.239346][T13337] __wake_up_common+0x135/0x1f0 [ 674.239363][T13337] __wake_up+0x31/0x60 [ 674.239377][T13337] tty_ldisc_lock+0x59/0xb0 [ 674.239394][T13337] tty_set_ldisc+0x98/0x780 [ 674.239409][T13337] tty_ioctl+0xc2d/0x1650 [ 674.239426][T13337] __x64_sys_ioctl+0x18e/0x210 [ 674.239444][T13337] do_syscall_64+0xcd/0xf80 [ 674.239464][T13337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.239479][T13337] [ 674.239479][T13337] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 674.239500][T13337] _raw_spin_lock_irqsave+0x3a/0x60 [ 674.239518][T13337] __wake_up+0x1c/0x60 [ 674.239532][T13337] tty_port_default_wakeup+0x4d/0x60 [ 674.239551][T13337] serial8250_tx_chars+0x68e/0x860 [ 674.239571][T13337] serial8250_handle_irq+0x761/0xcb0 [ 674.239591][T13337] serial8250_default_handle_irq+0x9e/0x270 [ 674.239612][T13337] serial8250_interrupt+0xf8/0x1d0 [ 674.239634][T13337] __handle_irq_event_percpu+0x236/0x890 [ 674.239658][T13337] handle_irq_event+0xab/0x1e0 [ 674.239680][T13337] handle_edge_irq+0x3ca/0x9e0 [ 674.239701][T13337] __common_interrupt+0xd0/0x2f0 [ 674.239724][T13337] common_interrupt+0xba/0xe0 [ 674.239738][T13337] asm_common_interrupt+0x26/0x40 [ 674.239753][T13337] pv_native_safe_halt+0xf/0x20 [ 674.239772][T13337] default_idle+0x13/0x20 [ 674.239785][T13337] default_idle_call+0x6c/0xb0 [ 674.239798][T13337] do_idle+0x38d/0x510 [ 674.239820][T13337] cpu_startup_entry+0x4f/0x60 [ 674.239842][T13337] start_secondary+0x21d/0x2d0 [ 674.239857][T13337] common_startup_64+0x13e/0x148 [ 674.239874][T13337] [ 674.239874][T13337] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 674.239895][T13337] _raw_spin_lock_irqsave+0x3a/0x60 [ 674.239913][T13337] serial8250_console_write+0x181/0x1890 [ 674.239934][T13337] console_flush_one_record+0x796/0xc60 [ 674.239956][T13337] console_unlock+0xef/0x240 [ 674.239981][T13337] vprintk_emit+0x407/0x6b0 [ 674.239994][T13337] _printk+0xc7/0x100 [ 674.240011][T13337] register_console+0x823/0x1210 [ 674.240024][T13337] univ8250_console_init+0x5f/0x90 [ 674.240044][T13337] console_init+0x152/0x600 [ 674.240062][T13337] start_kernel+0x298/0x4d0 [ 674.240076][T13337] x86_64_start_reservations+0x18/0x30 [ 674.240093][T13337] x86_64_start_kernel+0x130/0x190 [ 674.240108][T13337] common_startup_64+0x13e/0x148 [ 674.240125][T13337] [ 674.240125][T13337] -> #0 (console_owner){-.-.}-{0:0}: [ 674.240146][T13337] __lock_acquire+0x1669/0x2890 [ 674.240163][T13337] lock_acquire+0x179/0x330 [ 674.240179][T13337] console_lock_spinning_enable+0x72/0x80 [ 674.240201][T13337] console_flush_one_record+0x73f/0xc60 [ 674.240224][T13337] console_unlock+0xef/0x240 [ 674.240245][T13337] vprintk_emit+0x407/0x6b0 [ 674.240257][T13337] _printk+0xc7/0x100 [ 674.240274][T13337] should_fail_ex+0x4e7/0x640 [ 674.240288][T13337] strncpy_from_user+0x3b/0x2e0 [ 674.240308][T13337] strncpy_from_user_nofault+0x7f/0x180 [ 674.240325][T13337] bpf_probe_read_user_str+0x26/0x70 [ 674.240348][T13337] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 674.240360][T13337] bpf_trace_run4+0x252/0x5e0 [ 674.240376][T13337] __bpf_trace_sched_switch+0x145/0x190 [ 674.240398][T13337] __traceiter_sched_switch+0x6f/0xc0 [ 674.240420][T13337] __schedule+0x1a1b/0x5ee0 [ 674.240438][T13337] preempt_schedule_irq+0x51/0x90 [ 674.240457][T13337] irqentry_exit+0x1d8/0x8c0 [ 674.240477][T13337] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 674.240492][T13337] __sanitizer_cov_trace_pc+0x4/0x70 [ 674.240509][T13337] netlink_sendmsg+0x15a/0xdd0 [ 674.240529][T13337] ____sys_sendmsg+0xa5d/0xc30 [ 674.240550][T13337] ___sys_sendmsg+0x134/0x1d0 [ 674.240565][T13337] __sys_sendmsg+0x16d/0x220 [ 674.240581][T13337] do_syscall_64+0xcd/0xf80 [ 674.240600][T13337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.240615][T13337] [ 674.240615][T13337] other info that might help us debug this: [ 674.240615][T13337] [ 674.240619][T13337] Chain exists of: [ 674.240619][T13337] console_owner --> &p->pi_lock --> &rq->__lock [ 674.240619][T13337] [ 674.240642][T13337] Possible unsafe locking scenario: [ 674.240642][T13337] [ 674.240646][T13337] CPU0 CPU1 [ 674.240650][T13337] ---- ---- [ 674.240655][T13337] lock(&rq->__lock); [ 674.240664][T13337] lock(&p->pi_lock); [ 674.240675][T13337] lock(&rq->__lock); [ 674.240685][T13337] lock(console_owner); [ 674.240695][T13337] [ 674.240695][T13337] *** DEADLOCK *** [ 674.240695][T13337] [ 674.240699][T13337] 4 locks held by syz.5.1716/13337: [ 674.240708][T13337] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 674.240752][T13337] #1: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5e0 [ 674.240791][T13337] #2: ffffffff8e3b7000 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 674.240830][T13337] #3: ffffffff8e3b7078 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 674.240876][T13337] [ 674.240876][T13337] stack backtrace: [ 674.240885][T13337] CPU: 1 UID: 0 PID: 13337 Comm: syz.5.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.240907][T13337] Tainted: [L]=SOFTLOCKUP [ 674.240912][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.240922][T13337] Call Trace: [ 674.240928][T13337] [ 674.240934][T13337] dump_stack_lvl+0x116/0x1f0 [ 674.240956][T13337] print_circular_bug+0x275/0x340 [ 674.240980][T13337] check_noncircular+0x146/0x160 [ 674.241000][T13337] __lock_acquire+0x1669/0x2890 [ 674.241024][T13337] lock_acquire+0x179/0x330 [ 674.241042][T13337] ? console_lock_spinning_enable+0x61/0x80 [ 674.241067][T13337] ? console_lock_spinning_enable+0x4a/0x80 [ 674.241093][T13337] console_lock_spinning_enable+0x72/0x80 [ 674.241115][T13337] ? console_lock_spinning_enable+0x61/0x80 [ 674.241139][T13337] console_flush_one_record+0x73f/0xc60 [ 674.241166][T13337] ? __pfx_console_flush_one_record+0x10/0x10 [ 674.241190][T13337] ? __lock_acquire+0x436/0x2890 [ 674.241210][T13337] ? is_printk_cpu_sync_owner+0x32/0x40 [ 674.241228][T13337] console_unlock+0xef/0x240 [ 674.241251][T13337] ? __pfx_console_unlock+0x10/0x10 [ 674.241275][T13337] ? do_raw_spin_unlock+0x130/0x230 [ 674.241298][T13337] ? _printk+0xc7/0x100 [ 674.241317][T13337] ? __down_trylock_console_sem+0xb0/0x140 [ 674.241338][T13337] vprintk_emit+0x407/0x6b0 [ 674.241353][T13337] ? __pfx_vprintk_emit+0x10/0x10 [ 674.241367][T13337] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 674.241389][T13337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 674.241407][T13337] ? pt_regs_offset+0x63/0x90 [ 674.241427][T13337] _printk+0xc7/0x100 [ 674.241446][T13337] ? __pfx__printk+0x10/0x10 [ 674.241467][T13337] ? __pfx____ratelimit+0x10/0x10 [ 674.241489][T13337] should_fail_ex+0x4e7/0x640 [ 674.241505][T13337] strncpy_from_user+0x3b/0x2e0 [ 674.241526][T13337] ? lock_acquire+0x179/0x330 [ 674.241546][T13337] strncpy_from_user_nofault+0x7f/0x180 [ 674.241563][T13337] bpf_probe_read_user_str+0x26/0x70 [ 674.241588][T13337] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 674.241601][T13337] bpf_trace_run4+0x252/0x5e0 [ 674.241618][T13337] ? strncpy_from_user+0x1d2/0x2e0 [ 674.241641][T13337] ? __pfx_bpf_trace_run4+0x10/0x10 [ 674.241660][T13337] ? __lock_acquire+0x436/0x2890 [ 674.241678][T13337] ? __lock_acquire+0x436/0x2890 [ 674.241698][T13337] __bpf_trace_sched_switch+0x145/0x190 [ 674.241721][T13337] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 674.241745][T13337] ? psi_group_change+0x521/0xbe0 [ 674.241766][T13337] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 674.241788][T13337] __traceiter_sched_switch+0x6f/0xc0 [ 674.241812][T13337] __schedule+0x1a1b/0x5ee0 [ 674.241830][T13337] ? find_held_lock+0x2b/0x80 [ 674.241856][T13337] ? find_held_lock+0x2b/0x80 [ 674.241881][T13337] ? __pfx___schedule+0x10/0x10 [ 674.241900][T13337] ? avc_has_perm_noaudit+0x149/0x3b0 [ 674.241918][T13337] preempt_schedule_irq+0x51/0x90 [ 674.241939][T13337] irqentry_exit+0x1d8/0x8c0 [ 674.241959][T13337] ? rcu_is_watching+0x12/0xc0 [ 674.241981][T13337] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 674.241997][T13337] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 674.242016][T13337] Code: 48 89 df 5b e9 fd 1c 5e 00 be 03 00 00 00 5b e9 e2 11 ee 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 34 24 65 48 8b 15 78 f0 f3 11 65 8b 05 89 f0 f3 11 a9 00 01 [ 674.242031][T13337] RSP: 0018:ffffc900053079f0 EFLAGS: 00000206 [ 674.242044][T13337] RAX: 0000000000000000 RBX: ffffc90005307e30 RCX: ffffffff8988c40c [ 674.242054][T13337] RDX: ffff88802c564980 RSI: 0000000000000000 RDI: 0000000000000007 [ 674.242064][T13337] RBP: ffffc90005307a58 R08: 0000000000000007 R09: 0000000000000000 [ 674.242074][T13337] R10: 0000000000000014 R11: 0000000000000001 R12: 0000000000000014 [ 674.242084][T13337] R13: 0000000000000000 R14: 0000000000000014 R15: ffff8880554c3000 [ 674.242097][T13337] ? netlink_sendmsg+0x14c/0xdd0 [ 674.242120][T13337] netlink_sendmsg+0x15a/0xdd0 [ 674.242143][T13337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.242168][T13337] ____sys_sendmsg+0xa5d/0xc30 [ 674.242189][T13337] ? copy_msghdr_from_user+0x10a/0x160 [ 674.242207][T13337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.242234][T13337] ___sys_sendmsg+0x134/0x1d0 [ 674.242252][T13337] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.242270][T13337] ? lock_acquire+0x179/0x330 [ 674.242300][T13337] __sys_sendmsg+0x16d/0x220 [ 674.242317][T13337] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.242334][T13337] ? __pfx___schedule+0x10/0x10 [ 674.242357][T13337] ? rcu_is_watching+0x12/0xc0 [ 674.242375][T13337] do_syscall_64+0xcd/0xf80 [ 674.242397][T13337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.242413][T13337] RIP: 0033:0x7f457fb8f749 [ 674.242426][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.242442][T13337] RSP: 002b:00007f45809f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.242457][T13337] RAX: ffffffffffffffda RBX: 00007f457fde6090 RCX: 00007f457fb8f749 [ 674.242467][T13337] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 674.242476][T13337] RBP: 00007f45809f1090 R08: 0000000000000000 R09: 0000000000000000 [ 674.242486][T13337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.242495][T13337] R13: 00007f457fde6128 R14: 00007f457fde6090 R15: 00007ffd054c1fe8 [ 674.242512][T13337] [ 675.450874][T13337] CPU: 1 UID: 0 PID: 13337 Comm: syz.5.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.450890][T13337] Tainted: [L]=SOFTLOCKUP [ 675.450893][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.450899][T13337] Call Trace: [ 675.450904][T13337] [ 675.450908][T13337] dump_stack_lvl+0x116/0x1f0 [ 675.450925][T13337] should_fail_ex+0x512/0x640 [ 675.450935][T13337] strncpy_from_user+0x3b/0x2e0 [ 675.450953][T13337] ? lock_acquire+0x179/0x330 [ 675.450966][T13337] strncpy_from_user_nofault+0x7f/0x180 [ 675.450977][T13337] bpf_probe_read_user_str+0x26/0x70 [ 675.450994][T13337] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 675.451002][T13337] bpf_trace_run4+0x252/0x5e0 [ 675.451013][T13337] ? strncpy_from_user+0x1d2/0x2e0 [ 675.451027][T13337] ? __pfx_bpf_trace_run4+0x10/0x10 [ 675.451039][T13337] ? __lock_acquire+0x436/0x2890 [ 675.451051][T13337] ? __lock_acquire+0x436/0x2890 [ 675.451062][T13337] __bpf_trace_sched_switch+0x145/0x190 [ 675.451079][T13337] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 675.451094][T13337] ? psi_group_change+0x521/0xbe0 [ 675.451106][T13337] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 675.451120][T13337] __traceiter_sched_switch+0x6f/0xc0 [ 675.451135][T13337] __schedule+0x1a1b/0x5ee0 [ 675.451147][T13337] ? find_held_lock+0x2b/0x80 [ 675.451164][T13337] ? find_held_lock+0x2b/0x80 [ 675.451179][T13337] ? __pfx___schedule+0x10/0x10 [ 675.451191][T13337] ? avc_has_perm_noaudit+0x149/0x3b0 [ 675.451203][T13337] preempt_schedule_irq+0x51/0x90 [ 675.451216][T13337] irqentry_exit+0x1d8/0x8c0 [ 675.451229][T13337] ? rcu_is_watching+0x12/0xc0 [ 675.451239][T13337] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 675.451250][T13337] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 675.451263][T13337] Code: 48 89 df 5b e9 fd 1c 5e 00 be 03 00 00 00 5b e9 e2 11 ee 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 34 24 65 48 8b 15 78 f0 f3 11 65 8b 05 89 f0 f3 11 a9 00 01 [ 675.451272][T13337] RSP: 0018:ffffc900053079f0 EFLAGS: 00000206 [ 675.451281][T13337] RAX: 0000000000000000 RBX: ffffc90005307e30 RCX: ffffffff8988c40c [ 675.451286][T13337] RDX: ffff88802c564980 RSI: 0000000000000000 RDI: 0000000000000007 [ 675.451292][T13337] RBP: ffffc90005307a58 R08: 0000000000000007 R09: 0000000000000000 [ 675.451298][T13337] R10: 0000000000000014 R11: 0000000000000001 R12: 0000000000000014 [ 675.451303][T13337] R13: 0000000000000000 R14: 0000000000000014 R15: ffff8880554c3000 [ 675.451310][T13337] ? netlink_sendmsg+0x14c/0xdd0 [ 675.451325][T13337] netlink_sendmsg+0x15a/0xdd0 [ 675.451339][T13337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.451354][T13337] ____sys_sendmsg+0xa5d/0xc30 [ 675.451368][T13337] ? copy_msghdr_from_user+0x10a/0x160 [ 675.451379][T13337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.451395][T13337] ___sys_sendmsg+0x134/0x1d0 [ 675.451406][T13337] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.451417][T13337] ? lock_acquire+0x179/0x330 [ 675.451434][T13337] __sys_sendmsg+0x16d/0x220 [ 675.451445][T13337] ? __pfx___sys_sendmsg+0x10/0x10 [ 675.451455][T13337] ? __pfx___schedule+0x10/0x10 [ 675.451468][T13337] ? rcu_is_watching+0x12/0xc0 [ 675.451479][T13337] do_syscall_64+0xcd/0xf80 [ 675.451493][T13337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.451503][T13337] RIP: 0033:0x7f457fb8f749 [ 675.451510][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.451519][T13337] RSP: 002b:00007f45809f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.451527][T13337] RAX: ffffffffffffffda RBX: 00007f457fde6090 RCX: 00007f457fb8f749 [ 675.451533][T13337] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 675.451539][T13337] RBP: 00007f45809f1090 R08: 0000000000000000 R09: 0000000000000000 [ 675.451544][T13337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.451550][T13337] R13: 00007f457fde6128 R14: 00007f457fde6090 R15: 00007ffd054c1fe8 [ 675.451559][T13337]