last executing test programs: 6m25.185420191s ago: executing program 32 (id=164): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560f, &(0x7f00000002c0)={0xb, 0xfdfd, 0xfdfd}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x1, 0x3}) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) fsetxattr$security_capability(r5, &(0x7f0000000280), &(0x7f0000000400)=@v3={0x3000000, [{0x7fffffff, 0x3}, {0x8, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="000000000000006e0a54b75df81440d1392a43cd115f62ffe13657c6a601b8df248b12529a184128dac84ecdbdc8b55be9eee394d573bb026559851d3ac00cdbd00a0395d1cb4dc7825a521d239417cea0073cc58e2decbf4396e247fe4719054594c42f8bbb54926ff4ca7af6f18fe953c1280faef168a8933af48a2e7d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048851) socket$inet_sctp(0x2, 0x1, 0x84) 6m20.308187784s ago: executing program 33 (id=180): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 5m46.947769003s ago: executing program 6 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) syz_emit_ethernet(0x37f, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=@newtaction={0xc0, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xac, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x74, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7fff, 0x3, 0xea8, 0x6d74}, 0x28}}]}, {0x2a, 0x6, "59376f48c501b3f4a4b0db312ba9f50dc4bf368b53ed8ed3ed449c152bc4bcf0b1e80365207e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xc0}}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="14005500a1841300114e3c1a8cd7f76cf7b102b9"], 0x30}, 0x1, 0x0, 0x0, 0x200400c0}, 0x40000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2010200, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x6400) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xa000, 0x0, 0x0, 0x0, 0x3ff, 0x801}}}}, 0xa0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000006241a0000000905810300020000000900000000020d00000904010102020d"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) io_setup(0xeb0, &(0x7f0000000140)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x4, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x3}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m45.811838304s ago: executing program 34 (id=271): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc7fffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@deltaction={0x14, 0x31, 0x400, 0x70bd2a, 0x25dfdbff}, 0x3e}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000e40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x48}, &(0x7f00000004c0)=0x40) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xa2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[], 0xcc}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m45.660000976s ago: executing program 4 (id=274): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r4, 0xfffffff9}, 0xc) socket$inet6(0xa, 0x802, 0x0) syz_usb_connect(0x1, 0x3b, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x3, 0x28, 0xd, 0x8, 0x421, 0x99, 0xe0aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xba, 0x8, 0x0, 0x2, 0x2, 0xff, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x47a}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xff, 0x7f, 0x8}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="79a3c074d3f75a9af76501"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 5m44.315795582s ago: executing program 35 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) r4 = semget(0x0, 0x1, 0x200) getrlimit(0xd, &(0x7f0000000300)) semop(r4, &(0x7f0000000240)=[{0x2, 0x3, 0x800}, {0x3, 0x3, 0x1000}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x7, 0x5, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000003c0)={0x1, 0x2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x9, 0xd6fe2, 0x3d3b4e}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85, 0x7}, 0x3c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@in={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8800000000000000000000000000012000000000000000840000000800000020010000000000000000000000000000180000000000000084000000060000007f00000000000000180000000000000084000000000000000400b0e53176a03242da0c05000101ff0f180000000000000084000000000000"], 0x88, 0x1}, 0x4000010) 5m44.234438896s ago: executing program 6 (id=281): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0x1, 0x10, 0x4, 0x6, 0x7, 0x621, 0xa]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xb4a}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0xd, 0x4, 0x1, 0x9005, 0x8, 0x5, 0x2, 0x1, 0x4, 0x934, 0x6, 0x401, 0x2, 0x4, 0x7fffffffffffffff, 0x2], 0x80a0000, 0x246000}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000001800000002"]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40085}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 5m42.287296984s ago: executing program 6 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x59) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000780)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r11, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x4, 0x4, 0x16, 0x0, 0x12754f40, 0x0, {0x2, 0xfffffffffffffff8, 0xc, 0x2, 0x3, 0x2, 0xf2, 0x800, 0xff3, 0x1000, 0x7fffffff, r10, r11, 0x0, 0x49}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r11) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="a05ed29a9da97e68560100000000", @ANYRES16=r2, @ANYBLOB="010000dd70ddea", @ANYRES32=r12, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x54084) bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) 5m42.133004313s ago: executing program 4 (id=285): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000500)=""/102, 0x66}], 0x2}, 0xebea}], 0x1, 0x40000001, 0x0) (fail_nth: 2) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@gettaction={0xf4, 0x32, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffc0}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d}}]}]}, 0xf4}}, 0x0) 5m42.025924941s ago: executing program 6 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5m41.683734657s ago: executing program 6 (id=288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 5m41.012194797s ago: executing program 4 (id=289): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x20) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) 5m40.264102811s ago: executing program 6 (id=292): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "17a0f3f3"}]}}, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000004c0)={0x3, 0x200, 0x6}) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x87, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x94, 0x3, 0x2, 0x6, 0x0, 0xa0, {{0x8, 0x24, 0x6, 0x0, 0x0, "be58e2"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x47d, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x4f45e62308bd81dd, 0x7, 0x1, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x81, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x47ae381afe94b606, 0x1, 0x4, 0xfb}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x19, 0x5, 0x0, 0xfc}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2409}}, {0xb, &(0x7f00000001c0)=@string={0xb, 0x3, "5f66bc6d1b2c826fc7"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0xd3, &(0x7f00000002c0)=@string={0xd3, 0x3, "56e7df14e0889ee036fb2a23b97312a86264c7944dfe6217a7a5c8571fe22320b9a664bbf35739d66a544dafc2f16205f31214052e4ebbb0ff637c64eb13e90eaca62630ba9e3ffb0f4bff5c51094aa803f198e6b7dfb717239a6b275b5548c00f34635f16f3af06619a533705d0128218bb9b849460d6f3cfe6f1be60e6a909e8529a803d9d67b39c86bdb0c6c74573ccf6c84445c720378e98f8838ad8496c470bf24945868aaaae4917a159a7503cf7d50af79dd8c8149ce12eeae3ef6ea768de1ed3f0fa4a20865b4c079c30b19de4"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="77039648f48eac9b3220ad9b805b6fbcd2285eacf278ed60345ddb2bd97e9c793e6b588e9796b52884d72179ff7bfadde4f95069ee941d7c2cf438f601f23a7c61bb4378e8bcb6c31baa3a4d623c85d2e3903f05124d14910fe9688261c41a248d83daf2e221cd55a5506a7cc8d572ffa5e09f44a4474a"]}]}) 5m39.976548813s ago: executing program 36 (id=292): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "17a0f3f3"}]}}, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000004c0)={0x3, 0x200, 0x6}) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x87, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x94, 0x3, 0x2, 0x6, 0x0, 0xa0, {{0x8, 0x24, 0x6, 0x0, 0x0, "be58e2"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x47d, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x4f45e62308bd81dd, 0x7, 0x1, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x81, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x47ae381afe94b606, 0x1, 0x4, 0xfb}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x19, 0x5, 0x0, 0xfc}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2409}}, {0xb, &(0x7f00000001c0)=@string={0xb, 0x3, "5f66bc6d1b2c826fc7"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0xd3, &(0x7f00000002c0)=@string={0xd3, 0x3, "56e7df14e0889ee036fb2a23b97312a86264c7944dfe6217a7a5c8571fe22320b9a664bbf35739d66a544dafc2f16205f31214052e4ebbb0ff637c64eb13e90eaca62630ba9e3ffb0f4bff5c51094aa803f198e6b7dfb717239a6b275b5548c00f34635f16f3af06619a533705d0128218bb9b849460d6f3cfe6f1be60e6a909e8529a803d9d67b39c86bdb0c6c74573ccf6c84445c720378e98f8838ad8496c470bf24945868aaaae4917a159a7503cf7d50af79dd8c8149ce12eeae3ef6ea768de1ed3f0fa4a20865b4c079c30b19de4"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="77039648f48eac9b3220ad9b805b6fbcd2285eacf278ed60345ddb2bd97e9c793e6b588e9796b52884d72179ff7bfadde4f95069ee941d7c2cf438f601f23a7c61bb4378e8bcb6c31baa3a4d623c85d2e3903f05124d14910fe9688261c41a248d83daf2e221cd55a5506a7cc8d572ffa5e09f44a4474a"]}]}) 5m37.41753233s ago: executing program 4 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x101091, 0x0) 5m37.303191256s ago: executing program 4 (id=297): socket$inet6(0xa, 0x80001, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) socket(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x5752c1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x20a5c3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = syz_open_dev$radio(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x2}) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x4, 0x12, "bb40af00008000"}) clock_gettime(0x0, &(0x7f0000000140)) 5m36.996145583s ago: executing program 4 (id=298): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x3f00, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5m36.812336495s ago: executing program 37 (id=298): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x3f00, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5m34.622552989s ago: executing program 5 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x20000000000000e7, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0xfffffffffffffe9c) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00111300000064afffc1cc15da0d9735ac1c44c07702a2dbad043a41ca2f5e730b86161faf0c0e0c01a04cbf99a5586c60b54f04a5404ba82e9d438dac"], 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getrlimit(0xb, &(0x7f00000001c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) 5m32.204976361s ago: executing program 5 (id=302): socket$inet6(0xa, 0x80001, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) socket(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x5752c1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x20a5c3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = syz_open_dev$radio(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x2}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x4, 0x12, "bb40af00008000"}) clock_gettime(0x0, &(0x7f0000000140)) 5m30.983477577s ago: executing program 5 (id=303): syz_emit_ethernet(0x2a, &(0x7f0000001e00)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x7c}}}}}, 0x0) 5m30.88509548s ago: executing program 5 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x101091, 0x0) 5m30.721888593s ago: executing program 5 (id=305): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000003c0)) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x9497) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="e90c000000000d58d295b937a1017ed5299a38afb689b6912c516e9886e0b2b50afdfe63c51f86d2e3287acb4efb58120e0511f4f853712630dfbb7f3d4f7d3257a2d0c52e1dbf2ef49ab2a7e827a6cd013fbb400605738c85b993b984467e16a05ee5eba5eda98f87094f8f5d3d355907b02f3e7dd2b273864ca507b1308d47dce18ac1cfbd3ed12cced6e7de9585028e35beef856c3ec9425b13873260a0b4e529e16135600fea31bddcc1ae6c2e8bc3ba35cfeb4c783a19564ee66b973a554e72f71fddff4ca9c2bb6cc034a82173038d5175e53a2ebff0a2c7d55234f7ca40567e69bdf6d3"], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xffffffffffffffb1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500"/28], 0x2f) socket$inet(0x2, 0x3, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) 5m30.232074709s ago: executing program 5 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 5m29.951075998s ago: executing program 38 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 5m26.390400448s ago: executing program 8 (id=309): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x31435750, 0x0, @stepwise={0x5, 0x1, 0x7, 0x8, 0x4}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x400, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 5m25.391654447s ago: executing program 8 (id=311): syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x242}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22100}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r7) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x0, 0x0, 0x0}) 5m23.624438692s ago: executing program 8 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000001380)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000001240)=@ethtool_coalesce={0xe, 0x180, 0x9, 0x800, 0x8, 0x40, 0x8, 0x40f50, 0x9, 0xffffffff, 0xf, 0x5, 0x8, 0x6, 0xffff82ae, 0x2, 0xa62, 0x8, 0x6, 0x10e7, 0x200, 0x8, 0x9}}) recvfrom$inet_nvme(r1, &(0x7f0000000740)=""/221, 0xdd, 0x1, &(0x7f0000000840)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {0x0, r3, 0x3}}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x18, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4f}}], 0x1, 0x42, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r7 = syz_io_uring_setup(0x4dd0, &(0x7f00000000c0)={0x0, 0xd06b, 0x1, 0x2, 0x24d}, &(0x7f0000000200), &(0x7f0000000280)) syz_io_uring_setup(0x5fc6, &(0x7f0000000300)={0x0, 0xbe98, 0x10000, 0x1, 0x215, 0x0, r7}, &(0x7f0000000400), &(0x7f0000000440)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1}, 0x1fb}], 0x2, 0x0, 0x0) 5m22.469917664s ago: executing program 8 (id=316): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ec293598342b030000008000002400120002800500080001000000080001000100"/49], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x4048040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1aa841, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r2, &(0x7f00000001c0)='./file0/file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x7, 0x88140) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000040)=0x3, 0x0, 0x4) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r4) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0) 5m20.238880004s ago: executing program 8 (id=325): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="770a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}, "400088be5d2a0008"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a0200000000001801000020"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) socket(0x29, 0x80000, 0xfffffffd) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video4linux(&(0x7f0000000100), 0x9, 0x10202) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x1000000, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a"], 0x7c}}, 0x40480d4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000001d000000000000000a40000000060a0b060000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r4], 0x60}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1009, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) sendmmsg$inet(r8, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a30000000"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000080000004000000000000100000a140000001100010000000000000000000000000a"], 0x28}}, 0x4001) 5m19.327811316s ago: executing program 8 (id=328): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ipvlan1\x00', {0x3}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xb486b5b2533a373f, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_0\x00', {0x3, 0x0, 0x41, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) r1 = socket(0x26, 0x3, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3ae5151e455954a182a67500a510b48e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x3, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x60000040) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, &(0x7f0000000100)={0x14, &(0x7f0000000680)={0x0, 0x5, 0xee, {0xee, 0x21, "832c41a3c828b258e124b63c8129b2b1d4ec304eda2d94637c62837834340988f571953895f5c7929f457110673b5dbd7729726fb0d9cb768c8f90e9cd907c3023a62aa6ecb8fe499eb40771f38122c8cef1c353300d979d442b5888473a38f0fabcc544e2b062039873bfcf2a1181f25d595c9c10eb6da57de82be8a5ef489cfa2802af19509031efca6b2c105a10f39cb16f110613914bcc5a7e515dc88c2521b6bce82a3408fbda6490d0dff157780ff75b0c1a085f30946acccd44022dd62c9fa9e245f8be4b5e56f813646e0f75bff20e9aa4fa7c3aab7d1d1c83b3d29e84707ec94e9aba74cdafba54"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x20, 0x30, 0xa8, "d7c3c4c4bdfae05f4a61d7c9488fced09ab6332772b89e062097ff876c785f11da99fffdd212b46d6b53d4cb0e824137e7dc0c0a91edec10425dc34ecdba04cb98c38ff24ec40b816ff473816c032b090d677a77dc7d130fc44e6ea3bf7ab6d532f7e0720b9901ca99ee850c00665c2ff22f54ee042fe8109137ed3283adf0f98fb0dfe2b2b78016e6f1fb172c8998699c84020333d84ebb030c3e76366a9765b579aa184b004ded"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "cdb1"}, &(0x7f0000000900)={0x20, 0x82, 0x2, "c42f"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "b36285"}, &(0x7f0000000980)={0x20, 0x84, 0x1, 'F'}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "57cbe9"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xf, 0x9, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m18.513867904s ago: executing program 39 (id=328): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ipvlan1\x00', {0x3}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xb486b5b2533a373f, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_0\x00', {0x3, 0x0, 0x41, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) r1 = socket(0x26, 0x3, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3ae5151e455954a182a67500a510b48e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x3, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x60000040) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, &(0x7f0000000100)={0x14, &(0x7f0000000680)={0x0, 0x5, 0xee, {0xee, 0x21, "832c41a3c828b258e124b63c8129b2b1d4ec304eda2d94637c62837834340988f571953895f5c7929f457110673b5dbd7729726fb0d9cb768c8f90e9cd907c3023a62aa6ecb8fe499eb40771f38122c8cef1c353300d979d442b5888473a38f0fabcc544e2b062039873bfcf2a1181f25d595c9c10eb6da57de82be8a5ef489cfa2802af19509031efca6b2c105a10f39cb16f110613914bcc5a7e515dc88c2521b6bce82a3408fbda6490d0dff157780ff75b0c1a085f30946acccd44022dd62c9fa9e245f8be4b5e56f813646e0f75bff20e9aa4fa7c3aab7d1d1c83b3d29e84707ec94e9aba74cdafba54"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x20, 0x30, 0xa8, "d7c3c4c4bdfae05f4a61d7c9488fced09ab6332772b89e062097ff876c785f11da99fffdd212b46d6b53d4cb0e824137e7dc0c0a91edec10425dc34ecdba04cb98c38ff24ec40b816ff473816c032b090d677a77dc7d130fc44e6ea3bf7ab6d532f7e0720b9901ca99ee850c00665c2ff22f54ee042fe8109137ed3283adf0f98fb0dfe2b2b78016e6f1fb172c8998699c84020333d84ebb030c3e76366a9765b579aa184b004ded"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "cdb1"}, &(0x7f0000000900)={0x20, 0x82, 0x2, "c42f"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "b36285"}, &(0x7f0000000980)={0x20, 0x84, 0x1, 'F'}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "57cbe9"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xf, 0x9, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m48.733203443s ago: executing program 1 (id=588): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x2, 0x400, 'syz1\x00', &(0x7f00000004c0)=[':#,\x00', '$\x00'], 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x37000000, @empty, 0x3}}}, 0x88) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000009c0)={0x2, 0x0, @ioapic={0x100000, 0x1, 0x202, 0x0, 0x0, [{0x0, 0x3, 0x4, '\x00', 0x6}, {0x5, 0xfc, 0xc0}, {0x2, 0xec, 0x8, '\x00', 0x6}, {0xf7, 0xbb, 0x0, '\x00', 0xff}, {0xf, 0x5, 0x9}, {0xff, 0x5, 0x3b, '\x00', 0x7e}, {0x60, 0xc7, 0xaa, '\x00', 0x6}, {0x4, 0x0, 0xe9, '\x00', 0x8}, {0x85, 0x1, 0x4, '\x00', 0xff}, {0xfc, 0xf8, 0x8, '\x00', 0x2}, {0x7, 0xf, 0x7, '\x00', 0x3}, {0x6, 0x7, 0xea, '\x00', 0x99}, {0x2, 0x0, 0x7, '\x00', 0x2}, {0xd7, 0x8, 0x1, '\x00', 0x5}, {0x6a, 0x9, 0x0, '\x00', 0x7f}, {0x8, 0x8, 0x8, '\x00', 0x5}, {0xb, 0x41, 0xf, '\x00', 0x7}, {0x0, 0xfd, 0xff, '\x00', 0x3}, {0x0, 0x3, 0xf, '\x00', 0x7}, {0x5, 0x81, 0x6, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0x5}, {0x8, 0x7, 0xe6, '\x00', 0x8}, {0x7, 0x5, 0x5, '\x00', 0x6}, {0xb, 0x5, 0x7f, '\x00', 0x7}]}}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x8, 0xc4c}) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\'\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x18) timer_create(0x1, 0x0, &(0x7f0000000000)) timer_delete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r8) socket$inet6_tcp(0xa, 0x1, 0x0) 3m46.206936138s ago: executing program 1 (id=596): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)="15a9", 0x2}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001cc0)="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", 0xc00}, {&(0x7f0000001980)="44afd604b1a9d6a1b6aecdf220d89d6eba4e2f4c2f70be38edfa4bb65e66f04694f68ddb7bcee9b748", 0x29}, {&(0x7f00000019c0)="4b94269e21117cb86867a8eaabfaa2fac0e3c69044a3f435523fa9a8cc3d3f7fdbc2fcf33959176face566795805dc1794c8070cd49dd44749ee3b7cee67e4854b85bf6408438982555a745734e25acab250f661090788ed4d25782e3e252f217c90540dab3325cc3ba05623c1bfff8b1265a0c7f663a28a5f880af12fd442204530cfb1698d319b", 0x88}, {0x0}, {&(0x7f0000001b40)="254aeb9a077ea7fc84cadacb92814c0aef84dc8206c97def6a020653d604e06044261ddbd9691b4e82fbd7e262aa51620aa4d945d021a4164f682ed6", 0x3c}, {&(0x7f0000003cc0)="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", 0x7c0}], 0x8}}, {{0x0, 0x0, &(0x7f0000004e40)}}], 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xd0fb1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x90000001}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) syz_io_uring_setup(0x2ba, &(0x7f0000000640)={0x0, 0xb9b2, 0x10, 0x42, 0x3df}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="f3a1411774ceb54256ae9b1c6babb6ada39fcf8b9a644aa5bd8b4a2d89ed2af5362291527f1356f48a9440cc9409dabf7b6be352f332c0bce412e5a0fcf96de745daa9", 0x43}, {&(0x7f0000000180)="81fdb82e2fe9904642b38309cf91fabd5a8d982b6fb228fab1dc10e26758c74f639e5e8c59e1ce21cea0fb78d7f1261ea830a8dfc33a941a826e31cf26cbb0ef7950773de26804f67643cf626d3dd1849e9dc67263a17dee91349956573eed236f93076b", 0x64}, {&(0x7f0000000000)="057b0b14e813d2604e02e55656cc3a990c55a8f31f0876ef81e9", 0x1a}], 0x3, &(0x7f0000000240)=[{0x18, 0x115, 0x81, "d798"}, {0xc8, 0x103, 0x7, "79eef658bc104ea1573fc59cbf93c0bcf2c35b8d92361f6f9eb378d5e0c3a6eafa34f0da322fc33ca8fe723d2364a4dbd1b525832e3ae8dbcd4dcd606ce5f46dbc5c147dbaaf12b65a1248344413a522988f5c5e323f5e6dc9ba132a0d119a1e729e182ecffb794b779996e53df1b971a0e2647386ecc79df14bd11d17edf1207670be2b40347fdc65f0a741b639a6cd34a10045471a278601e61065e0e8cd1de500725d56ef54f9dc6b3b5ea2754914748b9679"}, {0x68, 0x104, 0x0, "c61157c34ee8656c8328c91d886bbe1be84ffadecd5f440b9c5361c385ded3035d9e156fe8501eb82a7662a937bd91026bc46d803eceb349219df260dc6077420ad50f21581c5bbd55828ff958cc40be346cb1b9"}, {0xe8, 0x88, 0x80, "33ab2a45cc399656ec18506bffbafc014fadaf70cfa7948423a7376260419c44debebb81ec2ddb74aac5dbad7818ebbef23dd05b2cdd99641a186d3a75985937a2b7026a8c0c0faf3cee4753184d46736903436fd20f500403725c3d6ff2283192fa8915b01ab6dd9b63b95df688cbba8dc0ab11d508d0fdc0ca09eeded136ec5c381fb4b5563ad1af675295efeb245b54b070d833331a3a01399ad964a945e84ff2d070f017773a75ae2cbbab9bbcd65d95a25181a876fd98f3daf1173947cefe4fa8c22d31fda398f63530e5547fce7c34"}], 0x230}, 0x4000000) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f0000000040)=0xfffffffa, 0x66) 3m41.613516647s ago: executing program 1 (id=605): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x800, 0x14800) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 3m37.578341626s ago: executing program 1 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000001380)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000001240)=@ethtool_coalesce={0xe, 0x180, 0x9, 0x800, 0x8, 0x40, 0x8, 0x40f50, 0x9, 0xffffffff, 0xf, 0x5, 0x8, 0x6, 0xffff82ae, 0x2, 0xa62, 0x8, 0x6, 0x10e7, 0x200, 0x8, 0x9}}) recvfrom$inet_nvme(r1, &(0x7f0000000740)=""/221, 0xdd, 0x1, &(0x7f0000000840)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {0x0, r3, 0x3}}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = syz_io_uring_setup(0x4dd0, &(0x7f00000000c0)={0x0, 0xd06b, 0x1, 0x2, 0x24d}, &(0x7f0000000200), &(0x7f0000000280)) syz_io_uring_setup(0x5fc6, &(0x7f0000000300)={0x0, 0xbe98, 0x10000, 0x1, 0x215, 0x0, r5}, &(0x7f0000000400), &(0x7f0000000440)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1}, 0x1fb}], 0x2, 0x0, 0x0) 3m35.196608628s ago: executing program 1 (id=624): semget(0x0, 0x3, 0xa1) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat(0xffffffffffffffff, 0x0, 0x40, 0x1fd) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_setup(0x2928, &(0x7f0000000180)={0x0, 0xf951, 0x400, 0x3, 0x38e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, r0, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84180, 0x23456}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 3m34.289854997s ago: executing program 1 (id=627): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x23d0, 0x7, 0x2, 0x8}, {0x2, 0x2, 0x2, 0x0, 0x3, 0x98}, 0x8, 0xca1e, 0x10f4}}, @TCA_TBF_RTAB={0x112, 0x2, [0x10000, 0x5, 0x39723a17, 0x1, 0x664d4621, 0x7f, 0xff, 0x7, 0xd, 0xee8, 0x5a2d, 0xe4, 0x6, 0x80000001, 0x7fffffff, 0x1, 0x4, 0x9de, 0x4, 0x6, 0x0, 0x1, 0x9, 0xffff8000, 0xfffffffd, 0x5, 0xd621, 0x7ff, 0x3, 0x0, 0xe7, 0x4, 0x9, 0x2, 0x6e96, 0x9, 0x80, 0x0, 0x80000000, 0x80000001, 0x2, 0x2, 0x5, 0xd0, 0xc, 0x1, 0x101, 0x5, 0xb, 0xc0, 0xeb5, 0x9, 0x4, 0x8, 0x1, 0x8, 0x2, 0x9, 0x1, 0x5, 0x2, 0x4, 0xeca, 0x1, 0x0, 0xc, 0x8, 0xf, 0x4, 0x1000, 0x6, 0x316b, 0x7, 0x10000, 0x8, 0x2, 0x6, 0x5, 0x8, 0x0, 0x4b0, 0x4, 0x6, 0x1, 0x1, 0x6, 0x2, 0x7, 0x6, 0x7, 0x0, 0x7, 0x3, 0x3, 0x7, 0x0, 0x5, 0x4, 0x7de, 0x12, 0x1, 0x4, 0x6b, 0x1, 0x5, 0x60, 0x0, 0x1, 0x700000, 0x7, 0x3, 0x0, 0xa, 0x0, 0x101, 0x5, 0x6, 0x509, 0x1, 0x9, 0x2, 0xa0000000, 0x0, 0xfff, 0x8, 0x2a, 0x2, 0x1, 0x7, 0x5, 0x9, 0x7, 0xfc3, 0xeda, 0x0, 0x7ff, 0x7, 0x8, 0x9, 0x81, 0x7, 0x9, 0xcb2b, 0x3, 0x4, 0x5d4a, 0x5, 0xffffff7f, 0x4, 0x3, 0xfffffffb, 0x9, 0x3, 0x200, 0x9, 0x9, 0x5, 0x1d1a, 0x5, 0x31400, 0x4001, 0x5, 0xd349, 0x6, 0x8001, 0x9, 0x6, 0x6, 0x6, 0x7a, 0x6, 0x80000000, 0x0, 0x169b, 0xd, 0x0, 0x9, 0x8000, 0x7fff, 0x5c, 0x7, 0x2, 0x2, 0x4, 0xffff, 0x0, 0x4, 0xf, 0x4, 0x1, 0x3, 0x4, 0x442, 0x6, 0xffff0001, 0x1, 0x3, 0x38, 0x81, 0xffffffff, 0x2, 0x3ff, 0x1, 0x7, 0x7, 0x800, 0x8a1b, 0x2, 0x1, 0x8, 0x0, 0xb461, 0x9, 0x0, 0x5, 0xfffffffe, 0x4, 0x7, 0x4, 0x1, 0x9, 0x0, 0x50d, 0xfffffff1, 0x2, 0x3, 0xa, 0x9, 0x2, 0x10001, 0xf, 0x0, 0x9, 0x9, 0x2, 0x1, 0xfffffff8, 0xd0, 0x7, 0x8, 0x2bb, 0x8, 0x1, 0x9, 0x8, 0x2, 0x5, 0x2, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6000000, 0x8000, 0x9]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22c02, 0x0) lseek(r4, 0x0, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r3, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) close_range(r9, 0xffffffffffffffff, 0x200000000000000) r11 = memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r11, 0x40045402, &(0x7f00000000c0)=0x1) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r12 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}}) bind$inet(r10, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 3m18.714324824s ago: executing program 40 (id=627): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x23d0, 0x7, 0x2, 0x8}, {0x2, 0x2, 0x2, 0x0, 0x3, 0x98}, 0x8, 0xca1e, 0x10f4}}, @TCA_TBF_RTAB={0x112, 0x2, [0x10000, 0x5, 0x39723a17, 0x1, 0x664d4621, 0x7f, 0xff, 0x7, 0xd, 0xee8, 0x5a2d, 0xe4, 0x6, 0x80000001, 0x7fffffff, 0x1, 0x4, 0x9de, 0x4, 0x6, 0x0, 0x1, 0x9, 0xffff8000, 0xfffffffd, 0x5, 0xd621, 0x7ff, 0x3, 0x0, 0xe7, 0x4, 0x9, 0x2, 0x6e96, 0x9, 0x80, 0x0, 0x80000000, 0x80000001, 0x2, 0x2, 0x5, 0xd0, 0xc, 0x1, 0x101, 0x5, 0xb, 0xc0, 0xeb5, 0x9, 0x4, 0x8, 0x1, 0x8, 0x2, 0x9, 0x1, 0x5, 0x2, 0x4, 0xeca, 0x1, 0x0, 0xc, 0x8, 0xf, 0x4, 0x1000, 0x6, 0x316b, 0x7, 0x10000, 0x8, 0x2, 0x6, 0x5, 0x8, 0x0, 0x4b0, 0x4, 0x6, 0x1, 0x1, 0x6, 0x2, 0x7, 0x6, 0x7, 0x0, 0x7, 0x3, 0x3, 0x7, 0x0, 0x5, 0x4, 0x7de, 0x12, 0x1, 0x4, 0x6b, 0x1, 0x5, 0x60, 0x0, 0x1, 0x700000, 0x7, 0x3, 0x0, 0xa, 0x0, 0x101, 0x5, 0x6, 0x509, 0x1, 0x9, 0x2, 0xa0000000, 0x0, 0xfff, 0x8, 0x2a, 0x2, 0x1, 0x7, 0x5, 0x9, 0x7, 0xfc3, 0xeda, 0x0, 0x7ff, 0x7, 0x8, 0x9, 0x81, 0x7, 0x9, 0xcb2b, 0x3, 0x4, 0x5d4a, 0x5, 0xffffff7f, 0x4, 0x3, 0xfffffffb, 0x9, 0x3, 0x200, 0x9, 0x9, 0x5, 0x1d1a, 0x5, 0x31400, 0x4001, 0x5, 0xd349, 0x6, 0x8001, 0x9, 0x6, 0x6, 0x6, 0x7a, 0x6, 0x80000000, 0x0, 0x169b, 0xd, 0x0, 0x9, 0x8000, 0x7fff, 0x5c, 0x7, 0x2, 0x2, 0x4, 0xffff, 0x0, 0x4, 0xf, 0x4, 0x1, 0x3, 0x4, 0x442, 0x6, 0xffff0001, 0x1, 0x3, 0x38, 0x81, 0xffffffff, 0x2, 0x3ff, 0x1, 0x7, 0x7, 0x800, 0x8a1b, 0x2, 0x1, 0x8, 0x0, 0xb461, 0x9, 0x0, 0x5, 0xfffffffe, 0x4, 0x7, 0x4, 0x1, 0x9, 0x0, 0x50d, 0xfffffff1, 0x2, 0x3, 0xa, 0x9, 0x2, 0x10001, 0xf, 0x0, 0x9, 0x9, 0x2, 0x1, 0xfffffff8, 0xd0, 0x7, 0x8, 0x2bb, 0x8, 0x1, 0x9, 0x8, 0x2, 0x5, 0x2, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6000000, 0x8000, 0x9]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22c02, 0x0) lseek(r4, 0x0, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r3, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) close_range(r9, 0xffffffffffffffff, 0x200000000000000) r11 = memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r11, 0x40045402, &(0x7f00000000c0)=0x1) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r12 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}}) bind$inet(r10, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 14.935545135s ago: executing program 0 (id=1224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400000000000000000006000000"], 0x14}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ff5f00000000000000581ea99407ae5db0b804814d3be8bea1361bc2ce5cbcbe18b4b9b13ad4d4e7df4176bdc4feccbb070e4432bc7753a404ab74c518be6eff56da235b3a822cebe57cb077897d555886b937b46a922ca9b11031d0952b09cf617efacbde68942c9748c9e8f42898e04db6c7f5de324fb2d5c32aecf9e423b98eeb6acc554825fc3cdbfe7ca0eb6611acd15ca164814df12a3cf850341397b1852e64266f90d5c2f21032", @ANYRES32=0x0, @ANYBLOB="4000330010000000080211000001080211000000080211000001000000000000f7ff01002d1a08001d00000000000000000000fb001300000000040400000034"], 0x5c}}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x5}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000f26c44204f080100b8e0010203010902120001010000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000040), 0x800000a7, 0x3aa2c1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r8, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) 14.073688025s ago: executing program 9 (id=1229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x2a, 0x0, 0x100001, 0x3}, 0x28) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ecc000d0400"], 0x45) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 12.501713129s ago: executing program 9 (id=1236): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) 11.318250957s ago: executing program 7 (id=1237): r0 = io_uring_setup(0x7f, &(0x7f00000002c0)={0x0, 0x2000000, 0x200}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0x139}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0104000069102200000000c810d0b1272e40aa00"], &(0x7f0000000480)='GPL\x00'}, 0x80) syslog(0x4, &(0x7f00000000c0)=""/250, 0xfa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) 11.241060555s ago: executing program 9 (id=1238): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) 10.384022769s ago: executing program 3 (id=1240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0xfffffffffffffd28}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x1, 0x6, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.38327061s ago: executing program 7 (id=1241): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9.976925975s ago: executing program 9 (id=1242): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000001000000080001", @ANYRES8=r7], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r8, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x4004011) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x1c, 0x0, 0xa52957411124feb5, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadd}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x81c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x113c}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x617}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044040}, 0x4020800) open(&(0x7f00000002c0)='./file0\x00', 0x2400, 0x1fe) socket$inet_udp(0x2, 0x2, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305a3e9ce102633b24135000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c0012800b00010062726964676500000c000280080005000100000008000a00", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) 9.653211061s ago: executing program 2 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x14) 9.48396138s ago: executing program 2 (id=1244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x71d241, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000240), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup3(r8, r9, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) 8.92733816s ago: executing program 3 (id=1245): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) socket(0x28, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x6000, 0x9, 0x4, 0x2, 0x0, [{0x8e, 0x3, 0x5, '\x00', 0x6}, {0x1, 0x3, 0x3, '\x00', 0x10}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x4, 0x3, 0x57, '\x00', 0x6}, {0x23, 0x9, 0xfc, '\x00', 0x8}, {0x8b, 0x80, 0x5, '\x00', 0x2f}, {0xda, 0x2, 0x9, '\x00', 0x3}, {0xc, 0x7, 0xda, '\x00', 0x7}, {0x9, 0x7, 0x0, '\x00', 0x6}, {0x1, 0x0, 0x3, '\x00', 0x7}, {0x40, 0x8, 0xe, '\x00', 0x4}, {0x5, 0xff, 0x0, '\x00', 0x80}, {0x5, 0x4, 0xbb}, {0x70, 0x10, 0x3, '\x00', 0x1}, {0x84, 0x1, 0xf4, '\x00', 0x2}, {0xfc, 0x4, 0xb, '\x00', 0x81}, {0x27, 0x5, 0x0, '\x00', 0x6}, {0x6, 0x9, 0x80, '\x00', 0x2}, {0x8, 0x3, 0x7}, {0x3, 0x6, 0xd0}, {0x7, 0xc3, 0x1, '\x00', 0xe}, {0x4, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x3, 0x9, '\x00', 0x3}, {0x40, 0x5, 0x0, '\x00', 0x3}]}}) 8.92560327s ago: executing program 7 (id=1246): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ecc000d0400"], 0x45) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 8.718967229s ago: executing program 2 (id=1247): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, 0x0, 0x4800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 8.140340247s ago: executing program 0 (id=1248): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@bridge_setlink={0x9c, 0x13, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x0, 0x4000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6476}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x64}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xb992}, {0x8, 0x14, 0x0, 0x0, 0x4}]}}]}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket(0x40000000015, 0x5, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000340), &(0x7f0000000440)=r0}, 0x20) 8.130821529s ago: executing program 9 (id=1249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x100) mq_timedsend(r2, 0x0, 0x0, 0x97, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x42) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040effff2820", @ANYRESDEC], 0x7) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x3f4}], 0x1) r5 = socket$kcm(0x2, 0x5, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x0, 0xfffe}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x3, 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x3) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000740)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000007c0)="c67f0d7df9", 0x5}], 0x2) 7.937510448s ago: executing program 2 (id=1250): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = eventfd(0x3) sync_file_range(r0, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1000007, 0x2, 0x80}, 0x50) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/110, 0x6e}], 0x5, &(0x7f0000000ec0), 0x2f, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000180)={&(0x7f0000000040)=[{0x2, 0x2200, 0x3e, &(0x7f00000001c0)="571967c8261cfdd3d9e67d6391c8b4a8b95fb08788d5506c840310f8803a410d21de6c8dd4bc34138e57a48ec2a31ecb672ffe7106ce9b8932bb7fe42f15"}], 0x1}) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r5, 0x22a781d9fa91d8f5) 7.759983875s ago: executing program 3 (id=1251): socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x20) fcntl$setlease(r3, 0x400, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) close(0x3) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.872502019s ago: executing program 0 (id=1252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000"], 0x80}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x3, 0x9, 0xfff8, 0x64, 0xa4e1, 0xd, 0x89, 0x8, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, {[@ssrr={0x89, 0x13, 0xe2, [@remote, @private=0xa010100, @private=0xa010101, @multicast1]}, @noop, @lsrr={0x83, 0x7, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x93, [@rand_addr=0x64010101, @local]}, @timestamp_prespec={0x44, 0xc, 0x8d, 0x3, 0x1, [{@local, 0xe6}]}, @end, @cipso={0x86, 0xa, 0x3, [{0x6, 0x4, "fad9"}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabe9689ce9f888100200008004502ff5800650000052f9078ffff79128edc2122ffffac1414aa0c20880b0000000305000800080086dd080088be000000041107460c0100000000000001090022eb0000000629060d000200000000000001007681190800"], 0x0) 4.096050699s ago: executing program 7 (id=1253): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="03c9008c8a7cfc942116783857cbbf94a48949bd944741ae963b551ab2316c2ea4e70cb07d718a94f57b99517e536c4a0f708656296dc71cd9fdf61a59460f7b7062af8be5a922179128352305220b51f9be433dcd62270b07cb8953862060780aba591ad1f7389b5d3d44cb2ed66c1e6d727e831220eb12acab8a8104000000fea2001297c0290208157591a5afd871"], 0x90) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x100, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x2}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) listen(r0, 0x8) 4.09532611s ago: executing program 3 (id=1254): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) socket(0x28, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x6000, 0x9, 0x4, 0x2, 0x0, [{0x8e, 0x3, 0x5, '\x00', 0x6}, {0x1, 0x3, 0x3, '\x00', 0x10}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x4, 0x3, 0x57, '\x00', 0x6}, {0x23, 0x9, 0xfc, '\x00', 0x8}, {0x8b, 0x80, 0x5, '\x00', 0x2f}, {0xda, 0x2, 0x9, '\x00', 0x3}, {0xc, 0x7, 0xda, '\x00', 0x7}, {0x9, 0x7, 0x0, '\x00', 0x6}, {0x1, 0x0, 0x3, '\x00', 0x7}, {0x40, 0x8, 0xe, '\x00', 0x4}, {0x5, 0xff, 0x0, '\x00', 0x80}, {0x5, 0x4, 0xbb}, {0x70, 0x10, 0x3, '\x00', 0x1}, {0x84, 0x1, 0xf4, '\x00', 0x2}, {0xfc, 0x4, 0xb, '\x00', 0x81}, {0x27, 0x5, 0x0, '\x00', 0x6}, {0x6, 0x9, 0x80, '\x00', 0x2}, {0x8, 0x3, 0x7}, {0x3, 0x6, 0xd0}, {0x7, 0xc3, 0x1, '\x00', 0xe}, {0x4, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x3, 0x9, '\x00', 0x3}, {0x40, 0x5, 0x0, '\x00', 0x3}]}}) 2.468310008s ago: executing program 7 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000001380)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000001240)=@ethtool_coalesce={0xe, 0x180, 0x9, 0x800, 0x8, 0x40, 0x8, 0x40f50, 0x9, 0xffffffff, 0xf, 0x5, 0x8, 0x6, 0xffff82ae, 0x2, 0xa62, 0x8, 0x6, 0x10e7, 0x200, 0x8, 0x9}}) recvfrom$inet_nvme(r1, &(0x7f0000000740)=""/221, 0xdd, 0x1, &(0x7f0000000840)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {0x0, r3, 0x3}}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = syz_io_uring_setup(0x4dd0, &(0x7f00000000c0)={0x0, 0xd06b, 0x1, 0x2, 0x24d}, &(0x7f0000000200), &(0x7f0000000280)) syz_io_uring_setup(0x5fc6, &(0x7f0000000300)={0x0, 0xbe98, 0x10000, 0x1, 0x215, 0x0, r5}, &(0x7f0000000400), &(0x7f0000000440)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1}, 0x1fb}], 0x2, 0x0, 0x0) 2.458940045s ago: executing program 0 (id=1256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0xfffffffffffffd28}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x1, 0x6, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.36427075s ago: executing program 2 (id=1257): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000012000100000000000000000010030200fffe4e2200f1fffffeffffff000000000000000000000000fcffffff000000e9000000005866d8f6c5", @ANYRES32=0x0, @ANYBLOB="018000"/16], 0x4c}}, 0x20004010) 2.299305492s ago: executing program 2 (id=1258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000000300000a004e2200000001ff020000000000000000000000000001f306000000000000000000000000000000000000000000000000000000000000000000000000000000c5121d44af7300000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000d40900000000000000000001"], 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x4, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x200, 0x7, 0x10000, 0x100, 0x400000000009004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0xa, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x6, 0xa3de, 0x20000000006, 0x2008, 0x7, 0x400, 0xffffffffffffffff, 0x942, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x5, 0x10, 0x7, 0xe53e, 0x2b, 0x8, 0x22933b2f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)={0x20, 0x2, 0x8, {0x8, 0x11, "6f3ccd75d90d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.272048453s ago: executing program 3 (id=1259): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r4 = epoll_create(0x6) r5 = dup3(r3, r4, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) 1.11389871s ago: executing program 3 (id=1260): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ipvlan1\x00', {0x3}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xb486b5b2533a373f, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_0\x00', {0x3, 0x0, 0x41, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) r1 = socket(0x26, 0x3, 0xffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3ae5151e455954a182a67500a510b48e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, &(0x7f0000000100)={0x14, &(0x7f0000000680)={0x0, 0x5, 0xee, {0xee, 0x21, "832c41a3c828b258e124b63c8129b2b1d4ec304eda2d94637c62837834340988f571953895f5c7929f457110673b5dbd7729726fb0d9cb768c8f90e9cd907c3023a62aa6ecb8fe499eb40771f38122c8cef1c353300d979d442b5888473a38f0fabcc544e2b062039873bfcf2a1181f25d595c9c10eb6da57de82be8a5ef489cfa2802af19509031efca6b2c105a10f39cb16f110613914bcc5a7e515dc88c2521b6bce82a3408fbda6490d0dff157780ff75b0c1a085f30946acccd44022dd62c9fa9e245f8be4b5e56f813646e0f75bff20e9aa4fa7c3aab7d1d1c83b3d29e84707ec94e9aba74cdafba54"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x20, 0x30, 0xa8, "d7c3c4c4bdfae05f4a61d7c9488fced09ab6332772b89e062097ff876c785f11da99fffdd212b46d6b53d4cb0e824137e7dc0c0a91edec10425dc34ecdba04cb98c38ff24ec40b816ff473816c032b090d677a77dc7d130fc44e6ea3bf7ab6d532f7e0720b9901ca99ee850c00665c2ff22f54ee042fe8109137ed3283adf0f98fb0dfe2b2b78016e6f1fb172c8998699c84020333d84ebb030c3e76366a9765b579aa184b004ded"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "cdb1"}, &(0x7f0000000900)={0x20, 0x82, 0x2, "c42f"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "b36285"}, &(0x7f0000000980)={0x20, 0x84, 0x1, 'F'}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "57cbe9"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xf, 0x9, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r7, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.110884638s ago: executing program 7 (id=1261): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x311, 0x8}, 0x10) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "c0756615"}, @local=@item_4={0x3, 0x2, 0x5, "42dd07f6"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27f, 0xfd, 0x1, {0x22, 0xdad}}}}, &(0x7f0000001700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f00000004c0)='P') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getsockname$llc(r0, 0x0, &(0x7f0000000100)) 980.093011ms ago: executing program 0 (id=1262): setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x0, &(0x7f0000000300)=""/173, &(0x7f0000000040)=0xad) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2520000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x36) socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4a22, 0x0, @mcast1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 961.505903ms ago: executing program 9 (id=1263): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ecc000d0400"], 0x45) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 0s ago: executing program 0 (id=1264): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@bridge_setlink={0x9c, 0x13, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x0, 0x4000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6476}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x64}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xb992}, {0x8, 0x14, 0x0, 0x0, 0x4}]}}]}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket(0x40000000015, 0x5, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000340), &(0x7f0000000440)=r0}, 0x20) kernel console output (not intermixed with test programs): mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.300723][ T30] audit: type=1400 audit(1751113023.811:671): avc: denied { write } for pid=9883 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 679.324545][ T24] usb 1-1: config 7 has an invalid interface number: 186 but max is 0 [ 679.404180][ T24] usb 1-1: config 7 has no interface number 0 [ 679.410312][ T24] usb 1-1: config 7 interface 186 has no altsetting 0 [ 679.457049][ T24] usb 1-1: string descriptor 0 read error: -22 [ 679.463747][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 680.052764][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.106521][ T24] usb 1-1: bad CDC descriptors [ 680.354894][ T9881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.380742][ T9881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.458062][ T10] usb 1-1: USB disconnect, device number 25 [ 680.606388][ T5865] Bluetooth: hci5: unexpected cc 0x040d length: 63 > 7 [ 681.078937][ T9907] syzkaller1: entered promiscuous mode [ 681.091334][ T9907] syzkaller1: entered allmulticast mode [ 681.106334][ T9907] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 681.496845][ T30] audit: type=1400 audit(1751113026.011:672): avc: denied { name_bind } for pid=9903 comm="syz.9.786" path="socket:[30278]" dev="sockfs" ino=30278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 682.746403][ T9929] tipc: Started in network mode [ 682.756081][ T9929] tipc: Node identity 367de956d5fb, cluster identity 4711 [ 682.763693][ T9929] tipc: Enabled bearer , priority 0 [ 682.780131][ T9929] syzkaller0: MTU too low for tipc bearer [ 682.786769][ T9929] tipc: Disabling bearer [ 682.991122][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 683.000386][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 683.550518][ T30] audit: type=1400 audit(1751113028.061:673): avc: denied { bind } for pid=9936 comm="syz.7.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 684.102124][ T9937] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 684.431239][ T5991] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 684.611264][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 684.621271][ T5991] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 684.630667][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.650102][ T5991] usb 1-1: config 0 descriptor?? [ 684.670246][ T5991] as10x_usb: device has been detected [ 684.671814][ T5865] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 684.685223][ T5865] Bluetooth: hci5: Injecting HCI hardware error event [ 684.693601][ T5872] Bluetooth: hci5: hardware error 0x00 [ 684.714314][ T5967] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 684.771509][ T5991] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 684.783064][ T9950] FAULT_INJECTION: forcing a failure. [ 684.783064][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.887188][ T9950] CPU: 1 UID: 0 PID: 9950 Comm: syz.7.798 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 684.887213][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 684.887224][ T9950] Call Trace: [ 684.887229][ T9950] [ 684.887236][ T9950] dump_stack_lvl+0x16c/0x1f0 [ 684.887265][ T9950] should_fail_ex+0x512/0x640 [ 684.887294][ T9950] _copy_to_user+0x32/0xd0 [ 684.887320][ T9950] simple_read_from_buffer+0xcb/0x170 [ 684.887344][ T9950] proc_fail_nth_read+0x197/0x270 [ 684.887366][ T9950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 684.887388][ T9950] ? rw_verify_area+0xcf/0x680 [ 684.887405][ T9950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 684.887426][ T9950] vfs_read+0x1e1/0xc60 [ 684.887449][ T9950] ? __pfx___mutex_lock+0x10/0x10 [ 684.887473][ T9950] ? __pfx_vfs_read+0x10/0x10 [ 684.887499][ T9950] ? __fget_files+0x20e/0x3c0 [ 684.887530][ T9950] ksys_read+0x12a/0x250 [ 684.887549][ T9950] ? __pfx_ksys_read+0x10/0x10 [ 684.887578][ T9950] do_syscall_64+0xcd/0x4c0 [ 684.887604][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.887621][ T9950] RIP: 0033:0x7f437dd8d33c [ 684.887635][ T9950] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 684.887649][ T9950] RSP: 002b:00007f437ec93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 684.887664][ T9950] RAX: ffffffffffffffda RBX: 00007f437dfb5fa0 RCX: 00007f437dd8d33c [ 684.887676][ T9950] RDX: 000000000000000f RSI: 00007f437ec930a0 RDI: 0000000000000005 [ 684.887686][ T9950] RBP: 00007f437ec93090 R08: 0000000000000000 R09: 0000000000000000 [ 684.887695][ T9950] R10: 0000000000003000 R11: 0000000000000246 R12: 0000000000000001 [ 684.887705][ T9950] R13: 0000000000000000 R14: 00007f437dfb5fa0 R15: 00007ffc92ead5b8 [ 684.887727][ T9950] [ 685.072076][ T5967] usb 4-1: config 7 has an invalid interface number: 186 but max is 0 [ 685.080264][ T5967] usb 4-1: config 7 has no interface number 0 [ 685.086400][ T5967] usb 4-1: config 7 interface 186 has no altsetting 0 [ 685.096308][ T5991] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 685.113060][ T5991] as10x_usb: error during firmware upload part1 [ 685.121524][ T9952] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 685.134772][ T5967] usb 4-1: string descriptor 0 read error: -22 [ 685.142266][ T5967] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 685.151475][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.161748][ T5991] Registered device nBox DVB-T Dongle [ 685.163706][ T5991] usb 1-1: USB disconnect, device number 26 [ 685.179726][ T5967] usb 4-1: bad CDC descriptors [ 685.288383][ T9952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.374085][ T9959] FAULT_INJECTION: forcing a failure. [ 685.374085][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 685.386786][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.7.800 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 685.386811][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.386821][ T9959] Call Trace: [ 685.386828][ T9959] [ 685.386835][ T9959] dump_stack_lvl+0x16c/0x1f0 [ 685.386865][ T9959] should_fail_ex+0x512/0x640 [ 685.386886][ T9959] ? fs_reclaim_acquire+0xae/0x150 [ 685.386905][ T9959] ? tomoyo_encode2+0x100/0x3e0 [ 685.386928][ T9959] should_failslab+0xc2/0x120 [ 685.386954][ T9959] __kmalloc_noprof+0xd2/0x510 [ 685.386982][ T9959] tomoyo_encode2+0x100/0x3e0 [ 685.387009][ T9959] tomoyo_encode+0x29/0x50 [ 685.387032][ T9959] tomoyo_mount_acl+0x144/0x850 [ 685.387052][ T9959] ? kernel_text_address+0x8d/0x100 [ 685.387070][ T9959] ? __lock_acquire+0xb8a/0x1c90 [ 685.387117][ T9959] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 685.387167][ T9959] ? tomoyo_domain+0xbb/0x150 [ 685.387182][ T9959] ? tomoyo_profile+0x47/0x60 [ 685.387211][ T9959] tomoyo_mount_permission+0x16d/0x420 [ 685.387232][ T9959] ? tomoyo_mount_permission+0x14f/0x420 [ 685.387255][ T9959] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 685.387293][ T9959] security_sb_mount+0x9b/0x260 [ 685.387316][ T9959] path_mount+0x128/0x2020 [ 685.387346][ T9959] ? __pfx_path_mount+0x10/0x10 [ 685.387380][ T9959] ? __x64_sys_mount+0x207/0x310 [ 685.387410][ T9959] __x64_sys_mount+0x28d/0x310 [ 685.387437][ T9959] ? __pfx___x64_sys_mount+0x10/0x10 [ 685.387466][ T9959] ? rcu_is_watching+0x12/0xc0 [ 685.387491][ T9959] do_syscall_64+0xcd/0x4c0 [ 685.387518][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.387537][ T9959] RIP: 0033:0x7f437dd8e929 [ 685.387551][ T9959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.387568][ T9959] RSP: 002b:00007f437ec51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 685.387586][ T9959] RAX: ffffffffffffffda RBX: 00007f437dfb6160 RCX: 00007f437dd8e929 [ 685.387597][ T9959] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00002000000000c0 [ 685.387608][ T9959] RBP: 00007f437ec51090 R08: 0000000000000000 R09: 0000000000000000 [ 685.387618][ T9959] R10: 0000000002000010 R11: 0000000000000246 R12: 0000000000000001 [ 685.387629][ T9959] R13: 0000000000000000 R14: 00007f437dfb6160 R15: 00007ffc92ead5b8 [ 685.387653][ T9959] [ 685.657627][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.666600][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.685917][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.692146][ T5991] Unregistered device nBox DVB-T Dongle [ 685.726905][ T5991] as10x_usb: device has been disconnected [ 685.808584][ T9953] bond1: (slave gretap1): making interface the new active one [ 685.836792][ T9953] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 685.854316][ T5984] usb 4-1: USB disconnect, device number 23 [ 687.196658][ T5872] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 687.700919][ T30] audit: type=1400 audit(1751113032.041:674): avc: denied { ioctl } for pid=9983 comm="syz.0.808" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 687.755266][ T5984] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 687.794885][ T9993] lo speed is unknown, defaulting to 1000 [ 687.950976][ T5984] usb 10-1: Using ep0 maxpacket: 16 [ 687.958118][ T5984] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.458320][ T5984] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 688.471496][ T5984] usb 10-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 688.480706][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.538213][ T5984] usb 10-1: config 0 descriptor?? [ 688.553387][ T5984] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 689.881088][ T5984] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 690.034747][ T5984] usb 1-1: config 7 has an invalid interface number: 186 but max is 0 [ 690.043837][ T5984] usb 1-1: config 7 has no interface number 0 [ 690.050013][ T5984] usb 1-1: config 7 interface 186 has no altsetting 0 [ 690.062190][ T5984] usb 1-1: string descriptor 0 read error: -22 [ 690.082928][ T10] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 690.090616][ T5984] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 690.101738][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.117826][ T5984] usb 1-1: bad CDC descriptors [ 690.735227][ T10] usb 3-1: config 7 has an invalid interface number: 186 but max is 0 [ 690.748298][ T10] usb 3-1: config 7 has no interface number 0 [ 690.760891][ T10] usb 3-1: config 7 interface 186 has no altsetting 0 [ 690.770371][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.790122][ T10] usb 3-1: string descriptor 0 read error: -22 [ 690.818607][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.828313][ T10] usb 3-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 690.837649][ T24] usb 10-1: USB disconnect, device number 21 [ 690.879522][T10012] bpq0: left promiscuous mode [ 690.886513][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.911772][ T5984] usb 1-1: USB disconnect, device number 27 [ 690.931123][ T10] usb 3-1: bad CDC descriptors [ 690.997052][T10029] netlink: 'syz.9.821': attribute type 4 has an invalid length. [ 691.061340][T10031] netlink: 'syz.9.821': attribute type 4 has an invalid length. [ 691.218862][ T24] lo speed is unknown, defaulting to 1000 [ 691.248834][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.274091][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.284620][ T24] lo speed is unknown, defaulting to 1000 [ 691.458261][T10019] bpq0: entered promiscuous mode [ 691.756062][ T5984] usb 3-1: USB disconnect, device number 22 [ 691.759865][ T5967] lo speed is unknown, defaulting to 1000 [ 692.676086][T10041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.694330][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.9.829'. [ 694.184521][T10069] FAULT_INJECTION: forcing a failure. [ 694.184521][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 694.197738][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.3.832 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 694.197762][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.197773][T10069] Call Trace: [ 694.197779][T10069] [ 694.197785][T10069] dump_stack_lvl+0x16c/0x1f0 [ 694.197819][T10069] should_fail_ex+0x512/0x640 [ 694.197841][T10069] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 694.197866][T10069] should_failslab+0xc2/0x120 [ 694.197890][T10069] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 694.197912][T10069] ? __alloc_skb+0x2b2/0x380 [ 694.197939][T10069] __alloc_skb+0x2b2/0x380 [ 694.197960][T10069] ? __pfx___alloc_skb+0x10/0x10 [ 694.197986][T10069] ? find_held_lock+0x2b/0x80 [ 694.198012][T10069] tcp_stream_alloc_skb+0x34/0x570 [ 694.198037][T10069] tcp_sendmsg_locked+0x130f/0x4300 [ 694.198066][T10069] ? __lock_acquire+0xb8a/0x1c90 [ 694.198099][T10069] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 694.198123][T10069] ? do_raw_spin_lock+0x12c/0x2b0 [ 694.198141][T10069] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 694.198164][T10069] ? __local_bh_enable_ip+0xa4/0x120 [ 694.198187][T10069] tcp_sendmsg+0x2e/0x50 [ 694.198205][T10069] ? __pfx_tcp_sendmsg+0x10/0x10 [ 694.198225][T10069] inet_sendmsg+0xb9/0x140 [ 694.198249][T10069] __sys_sendto+0x43c/0x520 [ 694.198271][T10069] ? __pfx___sys_sendto+0x10/0x10 [ 694.198311][T10069] ? ksys_write+0x1ac/0x250 [ 694.198332][T10069] ? __pfx_ksys_write+0x10/0x10 [ 694.198355][T10069] __x64_sys_sendto+0xe0/0x1c0 [ 694.198380][T10069] ? do_syscall_64+0x91/0x4c0 [ 694.198404][T10069] ? lockdep_hardirqs_on+0x7c/0x110 [ 694.198427][T10069] do_syscall_64+0xcd/0x4c0 [ 694.198454][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.198471][T10069] RIP: 0033:0x7f117978e929 [ 694.198486][T10069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.198503][T10069] RSP: 002b:00007f117a537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 694.198521][T10069] RAX: ffffffffffffffda RBX: 00007f11799b5fa0 RCX: 00007f117978e929 [ 694.198532][T10069] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 694.198541][T10069] RBP: 00007f117a537090 R08: 0000000000000000 R09: 0000000000000000 [ 694.198551][T10069] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 694.198561][T10069] R13: 0000000000000000 R14: 00007f11799b5fa0 R15: 00007ffd6b269dc8 [ 694.198583][T10069] [ 694.901228][ T5925] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 694.972780][T10082] bridge_slave_0: left allmulticast mode [ 695.114481][T10082] bridge_slave_0: left promiscuous mode [ 695.160540][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.190930][ T5925] usb 10-1: Using ep0 maxpacket: 8 [ 695.197809][ T5925] usb 10-1: unable to get BOS descriptor or descriptor too short [ 695.211921][ T5925] usb 10-1: config 4 has an invalid interface number: 143 but max is 0 [ 695.225659][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.246455][T10082] bridge_slave_1: left allmulticast mode [ 695.252960][ T5925] usb 10-1: config 4 has no interface number 0 [ 695.259177][ T5925] usb 10-1: config 4 interface 143 has no altsetting 0 [ 695.291067][T10082] bridge_slave_1: left promiscuous mode [ 695.306315][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.320781][ T5925] usb 10-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=c8.48 [ 695.456640][ T5925] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.465689][T10082] bond0: (slave bond_slave_0): Releasing backup interface [ 695.650393][ T5925] usb 10-1: Product: syz [ 695.655237][ T5925] usb 10-1: Manufacturer: syz [ 695.660131][ T5925] usb 10-1: SerialNumber: syz [ 695.725159][T10082] bond0: (slave bond_slave_1): Releasing backup interface [ 695.815008][T10082] team0: Port device team_slave_0 removed [ 695.852446][T10082] team0: Port device team_slave_1 removed [ 695.859279][T10082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.869389][T10082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.888965][T10082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.896605][T10082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.921677][ T5925] powermate 10-1:4.143: probe with driver powermate failed with error -5 [ 695.950053][ T5925] usb 10-1: USB disconnect, device number 22 [ 696.111200][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 696.120331][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 696.698777][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.843'. [ 696.708247][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.9.843'. [ 697.627509][T10117] bond1: (slave gretap1): Releasing active interface [ 697.887225][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 697.915536][T10128] netlink: 9180 bytes leftover after parsing attributes in process `syz.9.849'. [ 698.014440][ T30] audit: type=1400 audit(1751113042.531:675): avc: denied { ioctl } for pid=10124 comm="syz.3.847" path="socket:[30959]" dev="sockfs" ino=30959 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 701.506029][ T30] audit: type=1400 audit(1751113045.961:676): avc: denied { write } for pid=10157 comm="syz.7.858" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 701.530114][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.757148][T10170] mkiss: ax0: crc mode is auto. [ 701.811052][ T5991] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 701.971618][ T5991] usb 3-1: Using ep0 maxpacket: 32 [ 701.998959][ T5991] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 702.032661][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.052935][ T5991] usb 3-1: config 0 descriptor?? [ 702.082379][ T5991] as10x_usb: device has been detected [ 702.103797][ T5991] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 702.171707][ T5991] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 702.223772][ T5991] as10x_usb: error during firmware upload part1 [ 702.232524][ T5991] Registered device nBox DVB-T Dongle [ 702.358681][ T5925] usb 3-1: USB disconnect, device number 23 [ 702.422246][ T5925] Unregistered device nBox DVB-T Dongle [ 702.431386][ T5925] as10x_usb: device has been disconnected [ 702.631696][T10177] IPv6: NLM_F_CREATE should be specified when creating new route [ 702.891361][ T5925] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 703.001910][ T24] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 703.102890][ T5925] usb 1-1: config 7 has an invalid interface number: 186 but max is 0 [ 703.102919][ T5925] usb 1-1: config 7 has no interface number 0 [ 703.102944][ T5925] usb 1-1: config 7 interface 186 has no altsetting 0 [ 703.141914][ T5925] usb 1-1: string descriptor 0 read error: -22 [ 703.142716][ T5925] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 703.142779][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.199326][ T30] audit: type=1400 audit(1751113047.711:677): avc: denied { connect } for pid=10189 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 703.208569][ T30] audit: type=1400 audit(1751113047.721:678): avc: denied { read } for pid=10189 comm="syz.2.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 703.218148][ T24] usb 4-1: config 7 has an invalid interface number: 186 but max is 0 [ 703.297987][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.325294][ T5925] usb 1-1: bad CDC descriptors [ 703.439429][ T24] usb 4-1: config 7 has no interface number 0 [ 703.439468][ T24] usb 4-1: config 7 interface 186 has no altsetting 0 [ 703.556910][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.567833][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.660101][ T5991] usb 1-1: USB disconnect, device number 28 [ 703.784897][ T24] usb 4-1: string descriptor 0 read error: -22 [ 703.792075][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 703.805135][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.817989][ T24] usb 4-1: bad CDC descriptors [ 704.042662][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.061451][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.069441][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 704.083686][T10179] bpq0: left promiscuous mode [ 704.096419][ T24] usb 4-1: USB disconnect, device number 24 [ 704.342488][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.354029][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 704.370951][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.389497][ T10] usb 3-1: config 0 descriptor?? [ 704.904155][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 704.913531][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 704.943309][ T10] usb 3-1: USB disconnect, device number 24 [ 705.581793][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 706.111712][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 706.187579][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.219328][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 706.238763][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.891509][ T10] usb 3-1: config 0 descriptor?? [ 706.917787][ T10] usb 3-1: can't set config #0, error -71 [ 706.927137][ T10] usb 3-1: USB disconnect, device number 25 [ 707.229474][T10236] lo speed is unknown, defaulting to 1000 [ 709.650817][ T30] audit: type=1400 audit(1751113054.161:679): avc: denied { create } for pid=10230 comm="syz.7.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 709.674422][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.880'. [ 709.686412][ T30] audit: type=1400 audit(1751113054.161:680): avc: denied { bind } for pid=10230 comm="syz.7.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 709.707311][ T5925] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 710.358859][ T5925] usb 1-1: config 7 has an invalid interface number: 186 but max is 0 [ 710.374708][ T5925] usb 1-1: config 7 has no interface number 0 [ 710.390956][ T5925] usb 1-1: config 7 interface 186 has no altsetting 0 [ 710.403381][ T5925] usb 1-1: string descriptor 0 read error: -22 [ 710.409673][ T5925] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 710.427777][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.447229][ T5925] usb 1-1: bad CDC descriptors [ 710.931027][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.951441][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.013429][ T48] usb 1-1: USB disconnect, device number 29 [ 714.122694][T10297] FAULT_INJECTION: forcing a failure. [ 714.122694][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 714.137912][T10297] CPU: 0 UID: 0 PID: 10297 Comm: syz.0.899 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 714.137938][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.137948][T10297] Call Trace: [ 714.137954][T10297] [ 714.137960][T10297] dump_stack_lvl+0x16c/0x1f0 [ 714.137990][T10297] should_fail_ex+0x512/0x640 [ 714.138017][T10297] ? fs_reclaim_acquire+0xae/0x150 [ 714.138038][T10297] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 714.138070][T10297] should_failslab+0xc2/0x120 [ 714.138096][T10297] __kmalloc_noprof+0xd2/0x510 [ 714.138124][T10297] tomoyo_realpath_from_path+0xc2/0x6e0 [ 714.138151][T10297] ? tomoyo_profile+0x47/0x60 [ 714.138180][T10297] tomoyo_path_number_perm+0x245/0x580 [ 714.138199][T10297] ? tomoyo_path_number_perm+0x237/0x580 [ 714.138221][T10297] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 714.138244][T10297] ? find_held_lock+0x2b/0x80 [ 714.138288][T10297] ? find_held_lock+0x2b/0x80 [ 714.138307][T10297] ? hook_file_ioctl_common+0x145/0x410 [ 714.138340][T10297] ? __fget_files+0x20e/0x3c0 [ 714.138368][T10297] security_file_ioctl+0x9b/0x240 [ 714.138393][T10297] __x64_sys_ioctl+0xb7/0x210 [ 714.138415][T10297] do_syscall_64+0xcd/0x4c0 [ 714.138442][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.138459][T10297] RIP: 0033:0x7f62d658e929 [ 714.138474][T10297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.138490][T10297] RSP: 002b:00007f62d7371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.138507][T10297] RAX: ffffffffffffffda RBX: 00007f62d67b5fa0 RCX: 00007f62d658e929 [ 714.138519][T10297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 714.138529][T10297] RBP: 00007f62d7371090 R08: 0000000000000000 R09: 0000000000000000 [ 714.138539][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.138549][T10297] R13: 0000000000000000 R14: 00007f62d67b5fa0 R15: 00007fff2028b3c8 [ 714.138572][T10297] [ 714.138619][T10297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 714.540917][ T24] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 715.222814][ T24] usb 8-1: config 7 has an invalid interface number: 186 but max is 0 [ 715.232927][ T24] usb 8-1: config 7 has no interface number 0 [ 715.239072][ T24] usb 8-1: config 7 interface 186 has no altsetting 0 [ 715.259103][ T24] usb 8-1: string descriptor 0 read error: -22 [ 715.271123][ T24] usb 8-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 715.296120][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.311195][ T5991] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 715.314685][ T24] usb 8-1: bad CDC descriptors [ 715.407397][T10321] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 715.495376][ T5925] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 715.535942][T10299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.544828][T10299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.113942][T10299] bpq0: entered promiscuous mode [ 716.114133][ T5991] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 716.125238][ T24] usb 8-1: USB disconnect, device number 17 [ 716.162385][ T5991] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 716.173001][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.199749][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 716.202993][ T5991] usb 3-1: Product: syz [ 716.215502][ T5991] usb 3-1: Manufacturer: syz [ 716.268306][ T5991] usb 3-1: SerialNumber: syz [ 716.277124][ T5991] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 716.331349][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.345443][ T5925] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 716.356380][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.394047][ T5925] usb 1-1: config 0 descriptor?? [ 716.431517][ T5984] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 716.611167][ T5984] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 716.626592][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.678958][ T5984] usb 10-1: config 0 descriptor?? [ 716.718729][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 716.738203][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 716.776493][ T5925] usb 1-1: USB disconnect, device number 30 [ 716.862036][ T30] audit: type=1400 audit(1751113061.371:681): avc: denied { map } for pid=10331 comm="syz.0.910" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 716.912329][ T5984] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 716.945089][ T5991] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 717.043575][T10337] netlink: 'syz.7.911': attribute type 1 has an invalid length. [ 717.051386][T10337] netlink: 224 bytes leftover after parsing attributes in process `syz.7.911'. [ 717.187803][ T5984] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 717.203107][ T5991] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 717.218127][ T5984] [drm] Initialized udl on minor 2 [ 717.225260][ T5991] usb 3-1: media controller created [ 717.244789][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.939808][ T5984] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 717.946967][ T5984] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 718.077124][ T5991] usb 3-1: USB disconnect, device number 26 [ 718.493508][ T974] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 718.493842][ T24] usb 10-1: USB disconnect, device number 23 [ 718.505857][ T974] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 718.520024][ T974] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 718.615541][T10345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.680961][ T5991] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 718.832410][ T5991] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 718.841683][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.852212][ T5991] usb 3-1: config 0 descriptor?? [ 718.861385][ T5991] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 718.869440][ T5991] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 719.067220][ T5991] usb 3-1: USB disconnect, device number 27 [ 719.960485][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 719.969675][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 720.151055][ T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 720.392278][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.411177][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 720.440551][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 720.459869][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.500771][ T24] usb 8-1: Product: syz [ 720.506892][T10376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.923'. [ 720.549339][ T24] usb 8-1: Manufacturer: syz [ 720.578840][ T24] usb 8-1: SerialNumber: syz [ 720.603649][ T24] cdc_mbim 8-1:1.0: skipping garbage [ 721.067919][T10366] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 721.386444][T10382] vlan2: entered allmulticast mode [ 721.453917][T10382] veth1: entered allmulticast mode [ 721.677785][T10378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.047462][T10392] bridge0: entered allmulticast mode [ 722.196197][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.927'. [ 723.352731][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 723.359292][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 723.369766][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 723.381804][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 723.397002][T10366] ceph: No mds server is up or the cluster is laggy [ 723.743724][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 723.749756][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 724.477932][ T30] audit: type=1400 audit(1751113068.871:682): avc: denied { mount } for pid=10401 comm="syz.9.930" name="/" dev="autofs" ino=32710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 724.598190][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 724.613454][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 724.635009][ T30] audit: type=1400 audit(1751113068.991:683): avc: denied { bind } for pid=10401 comm="syz.9.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 724.665185][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 724.675329][T10420] FAULT_INJECTION: forcing a failure. [ 724.675329][T10420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.680415][ T24] cdc_mbim 8-1:1.0: bind() failure [ 724.694014][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 724.747299][ T24] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 724.770932][T10420] CPU: 1 UID: 0 PID: 10420 Comm: syz.3.933 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 724.770958][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 724.770968][T10420] Call Trace: [ 724.770974][T10420] [ 724.770981][T10420] dump_stack_lvl+0x16c/0x1f0 [ 724.771004][T10420] should_fail_ex+0x512/0x640 [ 724.771020][T10420] strncpy_from_user+0x3b/0x2e0 [ 724.771035][T10420] getname_flags.part.0+0x8f/0x550 [ 724.771049][T10420] getname_flags+0x93/0xf0 [ 724.771063][T10420] do_sys_openat2+0xb8/0x1d0 [ 724.771073][T10420] ? __pfx_do_sys_openat2+0x10/0x10 [ 724.771084][T10420] ? __fget_files+0x20e/0x3c0 [ 724.771101][T10420] __x64_sys_openat+0x174/0x210 [ 724.771111][T10420] ? __pfx___x64_sys_openat+0x10/0x10 [ 724.771121][T10420] ? ksys_write+0x1ac/0x250 [ 724.771139][T10420] do_syscall_64+0xcd/0x4c0 [ 724.771157][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.771168][T10420] RIP: 0033:0x7f117978d290 [ 724.771177][T10420] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 724.771189][T10420] RSP: 002b:00007f117a536f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 724.771200][T10420] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f117978d290 [ 724.771207][T10420] RDX: 0000000000000000 RSI: 00007f1179810c51 RDI: 00000000ffffff9c [ 724.771213][T10420] RBP: 00007f1179810c51 R08: 0000000000000000 R09: 0000000000000000 [ 724.771219][T10420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 724.771230][T10420] R13: 0000000000000000 R14: 00007f11799b5fa0 R15: 00007ffd6b269dc8 [ 724.771244][T10420] [ 724.951022][ T24] cdc_ncm 8-1:1.1: bind() failure [ 725.094870][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 725.104775][ T24] usb 8-1: USB disconnect, device number 18 [ 725.142698][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 725.224873][T10412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.285535][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.844460][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 725.873947][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 725.946756][ T30] audit: type=1400 audit(1751113070.461:684): avc: denied { bind } for pid=10423 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 726.014561][T10428] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 726.023656][T10428] netlink: 236 bytes leftover after parsing attributes in process `syz.3.937'. [ 726.032768][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 726.241089][T10402] ceph: No mds server is up or the cluster is laggy [ 726.314227][ T30] audit: type=1400 audit(1751113070.831:685): avc: denied { unmount } for pid=7260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 726.918775][T10441] FAULT_INJECTION: forcing a failure. [ 726.918775][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.932514][T10441] CPU: 0 UID: 0 PID: 10441 Comm: syz.9.940 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 726.932540][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 726.932550][T10441] Call Trace: [ 726.932556][T10441] [ 726.932563][T10441] dump_stack_lvl+0x16c/0x1f0 [ 726.932593][T10441] should_fail_ex+0x512/0x640 [ 726.932618][T10441] _copy_from_user+0x2e/0xd0 [ 726.932643][T10441] kstrtouint_from_user+0xd6/0x1d0 [ 726.932661][T10441] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 726.932679][T10441] ? __lock_acquire+0xb8a/0x1c90 [ 726.932717][T10441] proc_fail_nth_write+0x83/0x250 [ 726.932739][T10441] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 726.932767][T10441] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 726.932787][T10441] vfs_write+0x2a0/0x1150 [ 726.932813][T10441] ? __pfx___mutex_lock+0x10/0x10 [ 726.932839][T10441] ? __pfx_vfs_write+0x10/0x10 [ 726.932872][T10441] ? __fget_files+0x20e/0x3c0 [ 726.932894][T10441] ? __pfx_find_held_lock+0x10/0x10 [ 726.932922][T10441] ksys_write+0x12a/0x250 [ 726.932943][T10441] ? __pfx_ksys_write+0x10/0x10 [ 726.932972][T10441] do_syscall_64+0xcd/0x4c0 [ 726.933000][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.933022][T10441] RIP: 0033:0x7f17cd98d3df [ 726.933037][T10441] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 726.933054][T10441] RSP: 002b:00007f17ce851030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 726.933070][T10441] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17cd98d3df [ 726.933080][T10441] RDX: 0000000000000001 RSI: 00007f17ce8510a0 RDI: 0000000000000006 [ 726.933091][T10441] RBP: 00007f17ce851090 R08: 0000000000000000 R09: 0000000000000000 [ 726.933101][T10441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 726.933112][T10441] R13: 0000000000000000 R14: 00007f17cdbb6160 R15: 00007ffea9695d48 [ 726.933137][T10441] [ 727.215426][T10444] FAULT_INJECTION: forcing a failure. [ 727.215426][T10444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 727.247639][T10444] CPU: 0 UID: 0 PID: 10444 Comm: syz.2.942 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 727.247667][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.247678][T10444] Call Trace: [ 727.247684][T10444] [ 727.247691][T10444] dump_stack_lvl+0x16c/0x1f0 [ 727.247721][T10444] should_fail_ex+0x512/0x640 [ 727.247748][T10444] should_fail_alloc_page+0xe7/0x130 [ 727.247774][T10444] prepare_alloc_pages+0x3c2/0x610 [ 727.247792][T10444] ? rcu_is_watching+0x12/0xc0 [ 727.247817][T10444] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 727.247843][T10444] ? do_raw_spin_lock+0x12c/0x2b0 [ 727.247866][T10444] ? __bfs+0x148/0x290 [ 727.247894][T10444] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 727.247916][T10444] ? __lock_acquire+0x622/0x1c90 [ 727.247950][T10444] ? __lock_acquire+0x622/0x1c90 [ 727.247977][T10444] ? __lock_acquire+0x622/0x1c90 [ 727.248001][T10444] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 727.248029][T10444] ? policy_nodemask+0xea/0x4e0 [ 727.248055][T10444] alloc_pages_mpol+0x1fb/0x550 [ 727.248080][T10444] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 727.248108][T10444] folio_alloc_mpol_noprof+0x36/0x2f0 [ 727.248138][T10444] vma_alloc_folio_noprof+0xed/0x1e0 [ 727.248155][T10444] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 727.248171][T10444] ? rcu_read_unlock+0x2d/0xb0 [ 727.248197][T10444] do_wp_page+0x1136/0x4f20 [ 727.248229][T10444] ? __pfx_do_wp_page+0x10/0x10 [ 727.248257][T10444] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 727.248280][T10444] __handle_mm_fault+0x2223/0x5490 [ 727.248306][T10444] ? __pfx___handle_mm_fault+0x10/0x10 [ 727.248326][T10444] ? __pte_offset_map_lock+0x174/0x310 [ 727.248352][T10444] ? vm_normal_page+0x152/0x2e0 [ 727.248374][T10444] ? find_held_lock+0x2b/0x80 [ 727.248393][T10444] ? find_held_lock+0x2b/0x80 [ 727.248419][T10444] ? follow_page_pte+0x3af/0x14c0 [ 727.248441][T10444] handle_mm_fault+0x589/0xd10 [ 727.248466][T10444] __get_user_pages+0x589/0x3b80 [ 727.248493][T10444] ? __pfx___get_user_pages+0x10/0x10 [ 727.248508][T10444] ? check_path.constprop.0+0x24/0x50 [ 727.248531][T10444] ? __pfx_down_read_killable+0x10/0x10 [ 727.248558][T10444] __gup_longterm_locked+0x5e7/0x1840 [ 727.248583][T10444] ? __pfx___gup_longterm_locked+0x10/0x10 [ 727.248598][T10444] ? lock_acquire+0x62/0x350 [ 727.248625][T10444] ? sanity_check_pinned_pages+0x23/0x1200 [ 727.248657][T10444] gup_fast_fallback+0x1ab3/0x29e0 [ 727.248674][T10444] ? __video_do_ioctl+0xb3d/0xfc0 [ 727.248693][T10444] ? video_usercopy+0x4cd/0x1720 [ 727.248713][T10444] ? __x64_sys_ioctl+0x18b/0x210 [ 727.248744][T10444] ? __pfx_gup_fast_fallback+0x10/0x10 [ 727.248775][T10444] pin_user_pages_fast+0xa7/0xf0 [ 727.248791][T10444] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 727.248809][T10444] ? frame_vector_create+0x5c/0x100 [ 727.248831][T10444] get_vaddr_frames+0x89/0x1a0 [ 727.248849][T10444] vb2_create_framevec+0x64/0xd0 [ 727.248872][T10444] vb2_vmalloc_get_userptr+0x13b/0x540 [ 727.248889][T10444] ? kernel_text_address+0x8d/0x100 [ 727.248910][T10444] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 727.248926][T10444] __prepare_userptr.constprop.0+0x741/0x1680 [ 727.248956][T10444] ? __pfx___prepare_userptr.constprop.0+0x10/0x10 [ 727.249013][T10444] ? __pfx___might_resched+0x10/0x10 [ 727.249043][T10444] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 727.249064][T10444] ? vb2_queue_or_prepare_buf+0x5c7/0x29f0 [ 727.249094][T10444] __buf_prepare+0x63a/0x820 [ 727.249117][T10444] ? __video_do_ioctl+0x440/0xfc0 [ 727.249141][T10444] vb2_core_prepare_buf+0xa9/0x2e0 [ 727.249168][T10444] vb2_prepare_buf+0x269/0x330 [ 727.249196][T10444] vb2_ioctl_prepare_buf+0x10a/0x150 [ 727.249225][T10444] v4l_prepare_buf+0x99/0xc0 [ 727.249248][T10444] __video_do_ioctl+0xb3d/0xfc0 [ 727.249270][T10444] ? __might_fault+0xe3/0x190 [ 727.249289][T10444] ? __pfx___video_do_ioctl+0x10/0x10 [ 727.249318][T10444] video_usercopy+0x4cd/0x1720 [ 727.249340][T10444] ? __pfx___video_do_ioctl+0x10/0x10 [ 727.249359][T10444] ? selinux_kernel_read_file+0xc0/0x130 [ 727.249381][T10444] ? __pfx_video_usercopy+0x10/0x10 [ 727.249419][T10444] v4l2_ioctl+0x1bd/0x250 [ 727.249438][T10444] ? __pfx_v4l2_ioctl+0x10/0x10 [ 727.249459][T10444] __x64_sys_ioctl+0x18b/0x210 [ 727.249479][T10444] do_syscall_64+0xcd/0x4c0 [ 727.249504][T10444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.249519][T10444] RIP: 0033:0x7f9884b8e929 [ 727.249534][T10444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.249550][T10444] RSP: 002b:00007f9885a8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.249567][T10444] RAX: ffffffffffffffda RBX: 00007f9884db5fa0 RCX: 00007f9884b8e929 [ 727.249578][T10444] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 727.249588][T10444] RBP: 00007f9885a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 727.249598][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 727.249607][T10444] R13: 0000000000000000 R14: 00007f9884db5fa0 R15: 00007ffd9e5de2d8 [ 727.249628][T10444] [ 728.381046][ T5967] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 728.405310][T10459] all: renamed from lo (while UP) [ 728.428445][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.9.948'. [ 728.437785][T10463] netlink: set zone limit has 8 unknown bytes [ 728.869747][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 728.939288][T10474] netlink: 'syz.2.952': attribute type 30 has an invalid length. [ 728.959755][T10474] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.968755][T10474] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.977446][T10474] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.986195][T10474] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.019659][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 729.029268][T10474] netlink: 'syz.2.952': attribute type 30 has an invalid length. [ 729.077584][T10470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.498651][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.955'. [ 729.508705][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.9.955'. [ 731.138776][T10509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.012784][T10525] vcan0: MTU too low for tipc bearer [ 732.027579][T10525] tipc: Enabling of bearer rejected, failed to enable media [ 732.846983][T10537] can0: slcan on ttyS3. [ 732.982849][T10540] can0 (unregistered): slcan off ttyS3. [ 733.161731][ T5918] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 733.203993][ T30] audit: type=1400 audit(1751113077.721:686): avc: denied { read write } for pid=10545 comm="syz.2.977" dev="sockfs" ino=33062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 733.321043][ T5918] usb 8-1: Using ep0 maxpacket: 16 [ 733.334348][ T5918] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 733.346037][ T5918] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 733.358879][ T5918] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.393331][ T5918] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.409140][ T5918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.417818][ T5918] usb 8-1: Product: syz [ 733.426600][ T5918] usb 8-1: Manufacturer: syz [ 733.476478][ T5918] usb 8-1: SerialNumber: syz [ 733.932648][ T5918] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 734.569997][ T30] audit: type=1400 audit(1751113079.061:687): avc: denied { associate } for pid=10538 comm="syz.7.974" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 734.868695][ T5918] usb 8-1: 2:1: cannot get freq at ep 0x82 [ 736.350975][ T974] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 736.364687][ T5984] usb 8-1: USB disconnect, device number 19 [ 736.845318][T10595] FAULT_INJECTION: forcing a failure. [ 736.845318][T10595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.858681][T10595] CPU: 0 UID: 0 PID: 10595 Comm: syz.9.989 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 736.858704][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 736.858717][T10595] Call Trace: [ 736.858723][T10595] [ 736.858727][T10595] dump_stack_lvl+0x16c/0x1f0 [ 736.858747][T10595] should_fail_ex+0x512/0x640 [ 736.858765][T10595] strncpy_from_user+0x3b/0x2e0 [ 736.858779][T10595] getname_flags.part.0+0x8f/0x550 [ 736.858794][T10595] getname_flags+0x93/0xf0 [ 736.858807][T10595] __x64_sys_symlink+0x58/0x90 [ 736.858823][T10595] do_syscall_64+0xcd/0x4c0 [ 736.858840][T10595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.858852][T10595] RIP: 0033:0x7f17cd98e929 [ 736.858861][T10595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.858871][T10595] RSP: 002b:00007f17ce851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 736.858882][T10595] RAX: ffffffffffffffda RBX: 00007f17cdbb6160 RCX: 00007f17cd98e929 [ 736.858889][T10595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000002040 [ 736.858895][T10595] RBP: 00007f17ce851090 R08: 0000000000000000 R09: 0000000000000000 [ 736.858901][T10595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.858907][T10595] R13: 0000000000000000 R14: 00007f17cdbb6160 R15: 00007ffea9695d48 [ 736.858920][T10595] [ 737.002901][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.211095][ T974] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 737.220217][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.230318][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.241292][ T974] usb 3-1: config 0 descriptor?? [ 737.821040][T10606] FAULT_INJECTION: forcing a failure. [ 737.821040][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.834517][T10606] CPU: 1 UID: 0 PID: 10606 Comm: syz.9.993 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 737.834541][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.834551][T10606] Call Trace: [ 737.834559][T10606] [ 737.834567][T10606] dump_stack_lvl+0x16c/0x1f0 [ 737.834596][T10606] should_fail_ex+0x512/0x640 [ 737.834623][T10606] _copy_from_user+0x2e/0xd0 [ 737.834648][T10606] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 737.834670][T10606] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 737.834689][T10606] ? trace_kmalloc+0x2b/0xd0 [ 737.834716][T10606] ? __local_bh_enable_ip+0x41/0x120 [ 737.834735][T10606] ? ipv6_setsockopt+0xcb/0x170 [ 737.834758][T10606] do_ipv6_setsockopt+0x254b/0x4400 [ 737.834783][T10606] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 737.834801][T10606] ? avc_has_perm_noaudit+0x117/0x3b0 [ 737.834822][T10606] ? avc_has_perm_noaudit+0x149/0x3b0 [ 737.834842][T10606] ? avc_has_perm+0x11a/0x1c0 [ 737.834858][T10606] ? __pfx_avc_has_perm+0x10/0x10 [ 737.834884][T10606] ? sock_has_perm+0x259/0x2f0 [ 737.834904][T10606] ? __pfx_sock_has_perm+0x10/0x10 [ 737.834923][T10606] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 737.834948][T10606] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 737.834970][T10606] ? proc_fail_nth_write+0x9f/0x250 [ 737.835000][T10606] ? ipv6_setsockopt+0xcb/0x170 [ 737.835016][T10606] ipv6_setsockopt+0xcb/0x170 [ 737.835038][T10606] tcp_setsockopt+0xa4/0x100 [ 737.835065][T10606] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 737.835083][T10606] do_sock_setsockopt+0x224/0x470 [ 737.835100][T10606] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 737.835132][T10606] __sys_setsockopt+0x1a0/0x230 [ 737.835159][T10606] __x64_sys_setsockopt+0xbd/0x160 [ 737.835180][T10606] ? do_syscall_64+0x91/0x4c0 [ 737.835210][T10606] ? lockdep_hardirqs_on+0x7c/0x110 [ 737.835234][T10606] do_syscall_64+0xcd/0x4c0 [ 737.835260][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.835277][T10606] RIP: 0033:0x7f17cd98e929 [ 737.835292][T10606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.835308][T10606] RSP: 002b:00007f17ce851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 737.835325][T10606] RAX: ffffffffffffffda RBX: 00007f17cdbb6160 RCX: 00007f17cd98e929 [ 737.835336][T10606] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000005 [ 737.835347][T10606] RBP: 00007f17ce851090 R08: 0000000000000090 R09: 0000000000000000 [ 737.835357][T10606] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 737.835367][T10606] R13: 0000000000000000 R14: 00007f17cdbb6160 R15: 00007ffea9695d48 [ 737.835392][T10606] [ 738.110475][ T974] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 738.130261][ T974] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 738.141314][ T974] asix 3-1:0.0: probe with driver asix failed with error -71 [ 738.159558][ T974] usb 3-1: USB disconnect, device number 28 [ 738.855612][ T30] audit: type=1400 audit(1751113083.361:688): avc: denied { write } for pid=10613 comm="syz.7.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 740.114255][T10629] FAULT_INJECTION: forcing a failure. [ 740.114255][T10629] name failslab, interval 1, probability 0, space 0, times 0 [ 740.127248][T10629] CPU: 1 UID: 0 PID: 10629 Comm: syz.0.1000 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 740.127275][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.127286][T10629] Call Trace: [ 740.127295][T10629] [ 740.127303][T10629] dump_stack_lvl+0x16c/0x1f0 [ 740.127333][T10629] should_fail_ex+0x512/0x640 [ 740.127356][T10629] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 740.127384][T10629] should_failslab+0xc2/0x120 [ 740.127410][T10629] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 740.127433][T10629] ? security_file_alloc+0x34/0x2b0 [ 740.127464][T10629] security_file_alloc+0x34/0x2b0 [ 740.127489][T10629] init_file+0x93/0x4c0 [ 740.127517][T10629] alloc_empty_file+0x73/0x1e0 [ 740.127536][T10629] dentry_open+0x46/0xd0 [ 740.127552][T10629] ovl_path_open+0x198/0x1f0 [ 740.127581][T10629] ovl_dir_read_merged+0x349/0x5c0 [ 740.127606][T10629] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 740.127633][T10629] ? do_raw_spin_lock+0x12c/0x2b0 [ 740.127653][T10629] ? find_held_lock+0x2b/0x80 [ 740.127672][T10629] ? __pfx_ovl_fill_merge+0x10/0x10 [ 740.127703][T10629] ? dput.part.0+0xd8/0x9b0 [ 740.127722][T10629] ? ovl_revert_creds+0x13/0x50 [ 740.127746][T10629] ovl_check_empty_dir+0xaf/0x4c0 [ 740.127774][T10629] ? __pfx_ovl_check_empty_dir+0x10/0x10 [ 740.127808][T10629] ovl_do_remove+0xc7/0xf40 [ 740.127837][T10629] ? may_link+0x3a4/0x520 [ 740.127861][T10629] ? __pfx_may_link+0x10/0x10 [ 740.127886][T10629] ? __pfx_ovl_do_remove+0x10/0x10 [ 740.127919][T10629] vfs_rmdir+0x206/0x690 [ 740.127941][T10629] do_rmdir+0x2e8/0x3c0 [ 740.127971][T10629] ? irqentry_exit+0x3b/0x90 [ 740.127996][T10629] ? __pfx_do_rmdir+0x10/0x10 [ 740.128027][T10629] ? getname_flags.part.0+0x123/0x550 [ 740.128050][T10629] __x64_sys_rmdir+0xc5/0x110 [ 740.128074][T10629] do_syscall_64+0xcd/0x4c0 [ 740.128102][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.128120][T10629] RIP: 0033:0x7f62d658e929 [ 740.128136][T10629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.128153][T10629] RSP: 002b:00007f62d732f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 740.128170][T10629] RAX: ffffffffffffffda RBX: 00007f62d67b6160 RCX: 00007f62d658e929 [ 740.128182][T10629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 740.128193][T10629] RBP: 00007f62d732f090 R08: 0000000000000000 R09: 0000000000000000 [ 740.128204][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.128215][T10629] R13: 0000000000000000 R14: 00007f62d67b6160 R15: 00007fff2028b3c8 [ 740.128241][T10629] [ 740.731416][T10634] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 740.737973][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 740.773388][T10634] vhci_hcd vhci_hcd.0: Device attached [ 740.841489][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1002'. [ 741.041084][ T5984] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 741.543565][T10637] vhci_hcd: connection reset by peer [ 741.626539][ T6000] vhci_hcd: stop threads [ 741.693147][ T6000] vhci_hcd: release socket [ 741.779150][ T6000] vhci_hcd: disconnect device [ 742.269370][ T30] audit: type=1400 audit(1751113086.781:689): avc: denied { bind } for pid=10643 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 742.303813][T10645] FAULT_INJECTION: forcing a failure. [ 742.303813][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 742.316938][T10645] CPU: 0 UID: 0 PID: 10645 Comm: syz.2.1005 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 742.316960][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 742.316967][T10645] Call Trace: [ 742.316971][T10645] [ 742.316975][T10645] dump_stack_lvl+0x16c/0x1f0 [ 742.316995][T10645] should_fail_ex+0x512/0x640 [ 742.317010][T10645] ? __kmalloc_noprof+0xbf/0x510 [ 742.317025][T10645] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 742.317040][T10645] should_failslab+0xc2/0x120 [ 742.317056][T10645] __kmalloc_noprof+0xd2/0x510 [ 742.317069][T10645] ? __pfx___mutex_lock+0x10/0x10 [ 742.317087][T10645] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 742.317104][T10645] genl_start+0x18f/0x980 [ 742.317118][T10645] __netlink_dump_start+0x60b/0x990 [ 742.317131][T10645] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 742.317145][T10645] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 742.317161][T10645] ? __pfx_genl_get_cmd+0x10/0x10 [ 742.317174][T10645] ? __pfx_genl_start+0x10/0x10 [ 742.317189][T10645] ? __pfx_genl_dumpit+0x10/0x10 [ 742.317200][T10645] ? __pfx_genl_done+0x10/0x10 [ 742.317214][T10645] ? __radix_tree_lookup+0x21f/0x2c0 [ 742.317230][T10645] genl_rcv_msg+0x46e/0x800 [ 742.317245][T10645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.317257][T10645] ? __pfx_ethnl_default_start+0x10/0x10 [ 742.317272][T10645] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 742.317289][T10645] ? __pfx_ethnl_default_done+0x10/0x10 [ 742.317309][T10645] netlink_rcv_skb+0x155/0x420 [ 742.317319][T10645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.317332][T10645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.317349][T10645] ? netlink_deliver_tap+0x1ae/0xd30 [ 742.317368][T10645] genl_rcv+0x28/0x40 [ 742.317379][T10645] netlink_unicast+0x53a/0x7f0 [ 742.317391][T10645] ? __pfx_netlink_unicast+0x10/0x10 [ 742.317406][T10645] netlink_sendmsg+0x8d1/0xdd0 [ 742.317419][T10645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.317435][T10645] ____sys_sendmsg+0xa98/0xc70 [ 742.317447][T10645] ? copy_msghdr_from_user+0x10a/0x160 [ 742.317462][T10645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.317480][T10645] ___sys_sendmsg+0x134/0x1d0 [ 742.317495][T10645] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.317509][T10645] ? __lock_acquire+0x622/0x1c90 [ 742.317543][T10645] __sys_sendmsg+0x16d/0x220 [ 742.317558][T10645] ? __pfx___sys_sendmsg+0x10/0x10 [ 742.317582][T10645] do_syscall_64+0xcd/0x4c0 [ 742.317598][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.317609][T10645] RIP: 0033:0x7f9884b8e929 [ 742.317618][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.317629][T10645] RSP: 002b:00007f9885a6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.317639][T10645] RAX: ffffffffffffffda RBX: 00007f9884db6080 RCX: 00007f9884b8e929 [ 742.317646][T10645] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000007 [ 742.317652][T10645] RBP: 00007f9885a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 742.317658][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.317664][T10645] R13: 0000000000000000 R14: 00007f9884db6080 R15: 00007ffd9e5de2d8 [ 742.317678][T10645] [ 744.482158][ T30] audit: type=1804 audit(1751113088.991:690): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1011" name="/newroot/138/file0" dev="tmpfs" ino=746 res=1 errno=0 [ 746.120977][ T974] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 746.301104][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 746.312877][ T974] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 746.327944][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.336115][ T974] usb 1-1: Product: syz [ 746.340489][ T974] usb 1-1: Manufacturer: syz [ 746.345465][ T5984] vhci_hcd: vhci_device speed not set [ 746.355072][ T974] usb 1-1: SerialNumber: syz [ 746.362172][ T974] usb 1-1: config 0 descriptor?? [ 746.372845][ T974] gspca_main: se401-2.14.0 probing 047d:5003 [ 746.825111][ T974] gspca_se401: ExtraFeatures: 255 [ 746.836261][ T974] gspca_se401: Too many frame sizes [ 747.548165][ T30] audit: type=1400 audit(1751113092.041:691): avc: denied { ioctl } for pid=10705 comm="syz.7.1023" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 747.792131][ T974] usb 1-1: USB disconnect, device number 31 [ 750.549188][ T30] audit: type=1400 audit(1751113095.041:692): avc: denied { name_bind } for pid=10731 comm="syz.2.1029" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 752.273745][ T974] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 752.571246][ T974] usb 4-1: config 7 has an invalid interface number: 186 but max is 0 [ 752.579490][ T974] usb 4-1: config 7 has no interface number 0 [ 752.585807][ T974] usb 4-1: config 7 interface 186 has no altsetting 0 [ 752.606502][ T974] usb 4-1: string descriptor 0 read error: -22 [ 752.613044][ T974] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 752.747509][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.867841][ T974] usb 4-1: bad CDC descriptors [ 753.429382][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.472308][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.644651][ T3075] usb 4-1: USB disconnect, device number 26 [ 754.676063][ T30] audit: type=1400 audit(1751113099.181:693): avc: denied { append } for pid=10788 comm="syz.7.1043" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 755.314479][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 755.325038][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 756.884822][T10811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.027315][T10822] FAULT_INJECTION: forcing a failure. [ 757.027315][T10822] name failslab, interval 1, probability 0, space 0, times 0 [ 757.040363][T10822] CPU: 0 UID: 0 PID: 10822 Comm: syz.2.1052 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 757.040388][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.040399][T10822] Call Trace: [ 757.040405][T10822] [ 757.040412][T10822] dump_stack_lvl+0x16c/0x1f0 [ 757.040442][T10822] should_fail_ex+0x512/0x640 [ 757.040464][T10822] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 757.040491][T10822] should_failslab+0xc2/0x120 [ 757.040516][T10822] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 757.040538][T10822] ? kasan_save_stack+0x33/0x60 [ 757.040558][T10822] ? kasan_save_track+0x14/0x30 [ 757.040578][T10822] ? __kasan_kmalloc+0x11/0xb0 [ 757.040596][T10822] ? v9fs_session_init+0xf4/0x1a80 [ 757.040628][T10822] kstrdup+0x53/0x100 [ 757.040652][T10822] v9fs_session_init+0xf4/0x1a80 [ 757.040690][T10822] ? __pfx_v9fs_session_init+0x10/0x10 [ 757.040732][T10822] v9fs_mount+0xc5/0xa30 [ 757.040751][T10822] ? __pfx_v9fs_mount+0x10/0x10 [ 757.040772][T10822] ? cap_capable+0xb3/0x250 [ 757.040792][T10822] ? __pfx_v9fs_mount+0x10/0x10 [ 757.040813][T10822] legacy_get_tree+0x109/0x220 [ 757.040839][T10822] vfs_get_tree+0x8b/0x340 [ 757.040857][T10822] path_mount+0x1414/0x2020 [ 757.040884][T10822] ? kmem_cache_free+0x2d1/0x4d0 [ 757.040902][T10822] ? __pfx_path_mount+0x10/0x10 [ 757.040930][T10822] ? putname+0x154/0x1a0 [ 757.040959][T10822] __x64_sys_mount+0x28d/0x310 [ 757.040985][T10822] ? __pfx___x64_sys_mount+0x10/0x10 [ 757.041019][T10822] do_syscall_64+0xcd/0x4c0 [ 757.041046][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.041064][T10822] RIP: 0033:0x7f9884b8e929 [ 757.041079][T10822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.041096][T10822] RSP: 002b:00007f9885a8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 757.041113][T10822] RAX: ffffffffffffffda RBX: 00007f9884db5fa0 RCX: 00007f9884b8e929 [ 757.041124][T10822] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 757.041140][T10822] RBP: 00007f9885a8e090 R08: 0000200000000500 R09: 0000000000000000 [ 757.041150][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.041160][T10822] R13: 0000000000000000 R14: 00007f9884db5fa0 R15: 00007ffd9e5de2d8 [ 757.041184][T10822] [ 757.641580][ T5991] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 757.946882][ T30] audit: type=1400 audit(1751113102.461:694): avc: denied { setopt } for pid=10821 comm="syz.7.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 758.234920][ T5991] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 758.260917][ T5991] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 758.285487][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.294316][ T5991] usb 4-1: Product: syz [ 758.298612][ T5991] usb 4-1: Manufacturer: syz [ 758.307065][ T5991] usb 4-1: SerialNumber: syz [ 758.329449][ T5991] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 758.664857][ T5967] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 758.699304][T10847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1059'. [ 758.894256][ T5967] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 758.921580][ T5967] usb 8-1: config 0 has no interface number 0 [ 758.953331][ T5991] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 758.954099][ T5967] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 758.965429][ T30] audit: type=1400 audit(1751113103.481:695): avc: denied { read } for pid=10852 comm="syz.9.1062" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 758.976982][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.998224][ T5991] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 759.059659][ T5991] usb 4-1: media controller created [ 759.081767][ T5967] usb 8-1: config 0 descriptor?? [ 759.089779][ T30] audit: type=1400 audit(1751113103.481:696): avc: denied { open } for pid=10852 comm="syz.9.1062" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 759.093649][ T5967] cp210x 8-1:0.1: cp210x converter detected [ 759.124069][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 759.147582][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.164532][ T30] audit: type=1400 audit(1751113103.591:697): avc: denied { ioctl } for pid=10852 comm="syz.9.1062" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 759.312498][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 759.325156][ T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 759.342189][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.350560][ T10] usb 3-1: Product: syz [ 759.369009][ T10] usb 3-1: Manufacturer: syz [ 759.384198][ T10] usb 3-1: SerialNumber: syz [ 759.419803][ T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 759.441932][ T5991] usb 4-1: USB disconnect, device number 27 [ 759.498867][ T5967] cp210x 8-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 759.520183][ T5967] cp210x 8-1:0.1: failed to get vendor val 0x3711 size 2: -121 [ 759.638926][ T5967] cp210x 8-1:0.1: GPIO initialisation failed: -121 [ 759.834635][ T5967] usb 8-1: cp210x converter now attached to ttyUSB0 [ 759.918603][T10861] FAULT_INJECTION: forcing a failure. [ 759.918603][T10861] name failslab, interval 1, probability 0, space 0, times 0 [ 759.938250][T10861] CPU: 1 UID: 0 PID: 10861 Comm: syz.0.1063 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 759.938277][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.938288][T10861] Call Trace: [ 759.938295][T10861] [ 759.938301][T10861] dump_stack_lvl+0x16c/0x1f0 [ 759.938330][T10861] should_fail_ex+0x512/0x640 [ 759.938352][T10861] ? fs_reclaim_acquire+0xae/0x150 [ 759.938370][T10861] ? tomoyo_encode2+0x100/0x3e0 [ 759.938393][T10861] should_failslab+0xc2/0x120 [ 759.938419][T10861] __kmalloc_noprof+0xd2/0x510 [ 759.938447][T10861] tomoyo_encode2+0x100/0x3e0 [ 759.938474][T10861] tomoyo_encode+0x29/0x50 [ 759.938495][T10861] tomoyo_realpath_from_path+0x18f/0x6e0 [ 759.938521][T10861] ? tomoyo_profile+0x47/0x60 [ 759.938549][T10861] tomoyo_path_number_perm+0x245/0x580 [ 759.938569][T10861] ? tomoyo_path_number_perm+0x237/0x580 [ 759.938592][T10861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 759.938611][T10861] ? find_held_lock+0x2b/0x80 [ 759.938653][T10861] ? find_held_lock+0x2b/0x80 [ 759.938672][T10861] ? hook_file_ioctl_common+0x145/0x410 [ 759.938705][T10861] ? __fget_files+0x20e/0x3c0 [ 759.938733][T10861] security_file_ioctl+0x9b/0x240 [ 759.938758][T10861] __x64_sys_ioctl+0xb7/0x210 [ 759.938778][T10861] do_syscall_64+0xcd/0x4c0 [ 759.938804][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.938822][T10861] RIP: 0033:0x7f62d658e929 [ 759.938837][T10861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.938852][T10861] RSP: 002b:00007f62d7350038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.938869][T10861] RAX: ffffffffffffffda RBX: 00007f62d67b6080 RCX: 00007f62d658e929 [ 759.938880][T10861] RDX: 0000200000000000 RSI: 000000004008ae61 RDI: 0000000000000004 [ 759.938890][T10861] RBP: 00007f62d7350090 R08: 0000000000000000 R09: 0000000000000000 [ 759.938900][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.938925][T10861] R13: 0000000000000000 R14: 00007f62d67b6080 R15: 00007fff2028b3c8 [ 759.938949][T10861] [ 759.938965][T10861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 760.269889][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 760.777583][T10867] Invalid ELF header type: 3 != 1 [ 761.705118][ T30] audit: type=1400 audit(1751113105.291:698): avc: denied { module_load } for pid=10844 comm="syz.7.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 762.404114][ T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 762.603188][ T10] usb 3-1: media controller created [ 762.626394][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 762.813696][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 762.823007][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 763.400471][ T10] usb 3-1: USB disconnect, device number 29 [ 763.402060][T10874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.430363][ T5991] usb 8-1: USB disconnect, device number 20 [ 763.448883][ T5991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 763.488289][ T5991] cp210x 8-1:0.1: device disconnected [ 764.424136][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1072'. [ 765.611072][ T5991] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 766.209721][ T5991] usb 1-1: device descriptor read/64, error -71 [ 766.480041][ T5991] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 766.655106][ T5991] usb 1-1: device descriptor read/64, error -71 [ 766.786267][ T5991] usb usb1-port1: attempt power cycle [ 767.141139][ T5991] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 767.161676][ T5991] usb 1-1: device descriptor read/8, error -71 [ 767.443757][ T5991] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 767.525902][ T5991] usb 1-1: device descriptor read/8, error -71 [ 767.641115][ T5991] usb usb1-port1: unable to enumerate USB device [ 767.837995][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'. [ 767.848274][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1082'. [ 770.212818][T10951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.907761][ T7610] Bluetooth: hci4: Frame reassembly failed (-84) [ 779.210525][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 779.951061][ T5865] Bluetooth: hci4: command 0xfc11 tx timeout [ 779.961845][ T5872] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 781.106439][ T30] audit: type=1400 audit(1751113125.621:699): avc: denied { ioctl } for pid=10998 comm="syz.9.1095" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.363339][ T30] audit: type=1400 audit(1751113125.651:700): avc: denied { prog_load } for pid=11005 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 781.705057][ T30] audit: type=1400 audit(1751113125.651:701): avc: denied { bpf } for pid=11005 comm="syz.2.1096" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 781.781757][ T30] audit: type=1400 audit(1751113125.651:702): avc: denied { perfmon } for pid=11005 comm="syz.2.1096" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 782.169276][ T30] audit: type=1400 audit(1751113125.741:703): avc: denied { read write } for pid=7179 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.330755][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.467652][ T30] audit: type=1400 audit(1751113125.741:704): avc: denied { open } for pid=7179 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.075603][ T30] audit: type=1400 audit(1751113125.741:705): avc: denied { ioctl } for pid=7179 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.169015][ T30] audit: type=1400 audit(1751113125.851:706): avc: denied { create } for pid=11005 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 783.247596][ T30] audit: type=1400 audit(1751113125.851:707): avc: denied { map } for pid=11005 comm="syz.2.1096" path="socket:[35284]" dev="sockfs" ino=35284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 783.473863][ T30] audit: type=1400 audit(1751113125.851:708): avc: denied { create } for pid=11005 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.725658][T11033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.293251][T11058] FAULT_INJECTION: forcing a failure. [ 785.293251][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 785.353207][T11058] CPU: 1 UID: 0 PID: 11058 Comm: syz.0.1111 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 785.353233][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.353243][T11058] Call Trace: [ 785.353249][T11058] [ 785.353255][T11058] dump_stack_lvl+0x16c/0x1f0 [ 785.353285][T11058] should_fail_ex+0x512/0x640 [ 785.353306][T11058] ? fs_reclaim_acquire+0xae/0x150 [ 785.353324][T11058] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 785.353347][T11058] should_failslab+0xc2/0x120 [ 785.353370][T11058] __kmalloc_noprof+0xd2/0x510 [ 785.353397][T11058] tomoyo_realpath_from_path+0xc2/0x6e0 [ 785.353421][T11058] ? tomoyo_profile+0x47/0x60 [ 785.353448][T11058] tomoyo_path_number_perm+0x245/0x580 [ 785.353466][T11058] ? tomoyo_path_number_perm+0x237/0x580 [ 785.353488][T11058] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 785.353508][T11058] ? find_held_lock+0x2b/0x80 [ 785.353553][T11058] ? find_held_lock+0x2b/0x80 [ 785.353570][T11058] ? hook_file_ioctl_common+0x145/0x410 [ 785.353601][T11058] ? __fget_files+0x20e/0x3c0 [ 785.353627][T11058] security_file_ioctl+0x9b/0x240 [ 785.353650][T11058] __x64_sys_ioctl+0xb7/0x210 [ 785.353671][T11058] do_syscall_64+0xcd/0x4c0 [ 785.353697][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.353714][T11058] RIP: 0033:0x7f62d658e929 [ 785.353727][T11058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.353743][T11058] RSP: 002b:00007f62d7371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.353760][T11058] RAX: ffffffffffffffda RBX: 00007f62d67b5fa0 RCX: 00007f62d658e929 [ 785.353771][T11058] RDX: 0000200000000080 RSI: 00000000800448d5 RDI: 0000000000000004 [ 785.353781][T11058] RBP: 00007f62d7371090 R08: 0000000000000000 R09: 0000000000000000 [ 785.353791][T11058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.353800][T11058] R13: 0000000000000000 R14: 00007f62d67b5fa0 R15: 00007fff2028b3c8 [ 785.353823][T11058] [ 785.354399][T11058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 786.299832][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 786.299847][ T30] audit: type=1400 audit(1751113130.301:767): avc: denied { create } for pid=11047 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 786.342931][ T30] audit: type=1400 audit(1751113130.301:768): avc: denied { bind } for pid=11047 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 786.365617][ T30] audit: type=1400 audit(1751113130.471:769): avc: denied { setopt } for pid=11047 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 786.388245][ T30] audit: type=1400 audit(1751113130.501:770): avc: denied { accept } for pid=11047 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 786.660111][ T30] audit: type=1400 audit(1751113130.511:771): avc: denied { write } for pid=11047 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 786.696072][ T30] audit: type=1400 audit(1751113130.511:772): avc: denied { read } for pid=11047 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 786.804097][ T30] audit: type=1400 audit(1751113131.211:773): avc: denied { create } for pid=11064 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 786.850349][ T30] audit: type=1400 audit(1751113131.251:774): avc: denied { read } for pid=11067 comm="syz.2.1114" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 786.965235][ T30] audit: type=1400 audit(1751113131.261:775): avc: denied { open } for pid=11067 comm="syz.2.1114" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 786.990990][ T5991] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 786.998723][ T30] audit: type=1400 audit(1751113131.261:776): avc: denied { create } for pid=11067 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 787.538823][ T5991] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 787.652887][ T5991] usb 3-1: config 160 has no interface number 0 [ 787.659593][ T5991] usb 3-1: config 160 interface 200 has no altsetting 0 [ 787.695411][ T5991] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 787.705544][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.197643][ T5991] usb 3-1: Product: syz [ 788.206466][ T5991] usb 3-1: Manufacturer: syz [ 788.211633][ T5991] usb 3-1: SerialNumber: syz [ 788.444299][T11079] use of bytesused == 0 is deprecated and will be removed in the future, [ 788.453181][T11079] use the actual size instead. [ 788.584475][ T5991] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.608248][ T5991] usb 3-1: MIDIStreaming interface descriptor not found [ 788.684284][ T5991] usb 3-1: USB disconnect, device number 30 [ 789.066077][ T5918] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 789.293736][T11089] udevd[11089]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.557086][T11094] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 790.283729][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 791.214198][ T5918] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 791.222675][ T5918] usb 4-1: config 0 has no interface number 0 [ 791.228787][ T5918] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 791.240991][ T5918] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 791.260358][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.268602][ T5918] usb 4-1: Product: syz [ 791.282291][ T5918] usb 4-1: Manufacturer: syz [ 791.296898][ T5918] usb 4-1: SerialNumber: syz [ 791.327329][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 791.327343][ T30] audit: type=1400 audit(1751113135.841:794): avc: denied { mounton } for pid=11101 comm="syz.7.1124" path="/191/bus" dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 791.362988][ T5918] usb 4-1: config 0 descriptor?? [ 791.368829][T11104] FAULT_INJECTION: forcing a failure. [ 791.368829][T11104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.372213][ T974] kernel write not supported for file [eventfd] (pid: 974 comm: kworker/0:2) [ 791.385283][ T5918] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 791.415849][ T5918] em28xx 4-1:0.132: Video interface 132 found: [ 791.424389][T11104] CPU: 1 UID: 0 PID: 11104 Comm: syz.2.1123 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 791.424413][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.424424][T11104] Call Trace: [ 791.424430][T11104] [ 791.424436][T11104] dump_stack_lvl+0x16c/0x1f0 [ 791.424466][T11104] should_fail_ex+0x512/0x640 [ 791.424493][T11104] _copy_from_user+0x2e/0xd0 [ 791.424519][T11104] load_msg+0x19e/0x4a0 [ 791.424547][T11104] do_mq_timedsend+0x3d7/0xc40 [ 791.424569][T11104] ? __pfx_do_mq_timedsend+0x10/0x10 [ 791.424586][T11104] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 791.424613][T11104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 791.424643][T11104] ? __fget_files+0x20e/0x3c0 [ 791.424674][T11104] __x64_sys_mq_timedsend+0x1cd/0x260 [ 791.424693][T11104] ? ksys_write+0x1ac/0x250 [ 791.424715][T11104] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 791.424743][T11104] do_syscall_64+0xcd/0x4c0 [ 791.424777][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.424794][T11104] RIP: 0033:0x7f9884b8e929 [ 791.424808][T11104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.424825][T11104] RSP: 002b:00007f9885a6d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 791.424841][T11104] RAX: ffffffffffffffda RBX: 00007f9884db6080 RCX: 00007f9884b8e929 [ 791.424852][T11104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 791.424862][T11104] RBP: 00007f9885a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 791.424872][T11104] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 791.424881][T11104] R13: 0000000000000001 R14: 00007f9884db6080 R15: 00007ffd9e5de2d8 [ 791.424907][T11104] [ 791.748686][ T30] audit: type=1400 audit(1751113136.261:795): avc: denied { create } for pid=11110 comm="syz.7.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 791.771419][ T30] audit: type=1400 audit(1751113136.261:796): avc: denied { setopt } for pid=11110 comm="syz.7.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 791.790857][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.797375][ T30] audit: type=1400 audit(1751113136.291:797): avc: denied { write } for pid=11109 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 791.965577][ T5918] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 792.002183][ T5991] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 792.247746][ T5991] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 792.463885][ T5991] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 792.500367][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.508542][ T5991] usb 8-1: Product: syz [ 792.516736][ T5991] usb 8-1: Manufacturer: syz [ 792.521498][ T5991] usb 8-1: SerialNumber: syz [ 792.534181][ T5991] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 792.858211][ T5918] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 792.874532][ T30] audit: type=1400 audit(1751113137.371:798): avc: denied { read write } for pid=11081 comm="syz.3.1119" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 792.908217][ T5918] em28xx 4-1:0.132: board has no eeprom [ 792.915811][ T30] audit: type=1400 audit(1751113137.371:799): avc: denied { open } for pid=11081 comm="syz.3.1119" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 792.939525][ T30] audit: type=1400 audit(1751113137.371:800): avc: denied { map } for pid=11081 comm="syz.3.1119" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 792.973814][ T30] audit: type=1400 audit(1751113137.371:801): avc: denied { execute } for pid=11081 comm="syz.3.1119" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 793.121782][ T30] audit: type=1400 audit(1751113137.641:802): avc: denied { create } for pid=11124 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 793.144378][T11129] trusted_key: encrypted_key: insufficient parameters specified [ 793.166728][ T30] audit: type=1400 audit(1751113137.671:803): avc: denied { read } for pid=11110 comm="syz.7.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 793.194612][ T5991] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 793.208348][ T5991] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 793.238954][ T5991] usb 8-1: media controller created [ 793.240922][ T5918] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 793.252207][ T5918] em28xx 4-1:0.132: analog set to bulk mode. [ 793.258603][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 793.270260][ T5918] usb 4-1: USB disconnect, device number 28 [ 793.282691][ T5918] em28xx 4-1:0.132: Disconnecting em28xx [ 793.377772][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 793.428042][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 793.445875][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 793.457337][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 793.490218][ T24] usb 4-1: Decoder not found [ 793.502652][ T24] em28xx 4-1:0.132: failed to create media graph [ 793.519231][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 793.568294][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 793.579616][ T5918] em28xx 4-1:0.132: Closing input extension [ 793.601786][ T5918] em28xx 4-1:0.132: Freeing device [ 793.648707][ T5991] usb 8-1: USB disconnect, device number 21 [ 794.095733][T11138] @ÿ: renamed from veth0_vlan (while UP) [ 794.561959][T11143] openvswitch: netlink: Key type 771 is out of range max 32 [ 794.786515][T11144] netlink: 'syz.7.1134': attribute type 1 has an invalid length. [ 794.794360][T11144] netlink: 'syz.7.1134': attribute type 1 has an invalid length. [ 795.142148][T11147] netlink: 724 bytes leftover after parsing attributes in process `syz.2.1135'. [ 795.565198][T11154] siw: device registration error -23 [ 796.431197][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 796.431214][ T30] audit: type=1400 audit(1751113140.921:824): avc: denied { create } for pid=11155 comm="syz.7.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 796.492608][ T5918] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 797.614862][ T30] audit: type=1400 audit(1751113141.291:825): avc: denied { read } for pid=11171 comm="syz.0.1143" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 797.654655][ T30] audit: type=1400 audit(1751113141.301:826): avc: denied { open } for pid=11171 comm="syz.0.1143" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 797.657594][ T5918] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.686403][ T5918] usb 3-1: config 0 has no interface number 0 [ 797.693431][ T5918] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 797.798876][ T30] audit: type=1400 audit(1751113141.691:827): avc: denied { write } for pid=11171 comm="syz.0.1143" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 797.831221][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.861555][ T5918] usb 3-1: config 0 descriptor?? [ 797.878875][ T5918] usb 3-1: bad CDC descriptors [ 797.886635][ T30] audit: type=1400 audit(1751113141.811:828): avc: denied { ioctl } for pid=11171 comm="syz.0.1143" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 797.926344][ T30] audit: type=1400 audit(1751113142.441:829): avc: denied { read } for pid=11177 comm="syz.0.1146" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 797.965772][ T30] audit: type=1400 audit(1751113142.441:830): avc: denied { open } for pid=11177 comm="syz.0.1146" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 797.993016][ T30] audit: type=1400 audit(1751113142.441:831): avc: denied { create } for pid=11175 comm="syz.7.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 798.019849][T11179] mkiss: ax0: crc mode is auto. [ 798.037118][ T30] audit: type=1400 audit(1751113142.481:832): avc: denied { getopt } for pid=11178 comm="syz.9.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 798.057074][ T30] audit: type=1400 audit(1751113142.481:833): avc: denied { setopt } for pid=11178 comm="syz.9.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 798.104143][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.146123][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.240573][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.277109][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.298722][ T974] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 798.299087][ T5925] usb 3-1: USB disconnect, device number 31 [ 798.552514][ T974] usb 10-1: config 7 has an invalid interface number: 186 but max is 0 [ 798.561248][ T974] usb 10-1: config 7 has no interface number 0 [ 798.578193][T11182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 798.597797][ T974] usb 10-1: config 7 interface 186 has no altsetting 0 [ 798.610482][ T974] usb 10-1: string descriptor 0 read error: -22 [ 798.618503][ T974] usb 10-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 798.628038][ T974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.644697][ T974] usb 10-1: bad CDC descriptors [ 799.216789][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1150'. [ 799.216876][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1150'. [ 799.274261][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.287333][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.312161][ T10] usb 10-1: USB disconnect, device number 24 [ 799.331369][ T5925] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 799.511066][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 799.540090][ T5925] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 799.574147][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.613005][ T5925] usb 1-1: config 0 descriptor?? [ 799.638437][T11202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11202 comm=syz.3.1153 [ 799.652324][T11202] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 799.709706][T11202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.827677][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 799.836978][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 799.849564][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 799.862750][ T5925] usb 1-1: media controller created [ 799.890249][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.030178][ T5925] az6027: usb out operation failed. (-71) [ 800.052051][ T5925] az6027: usb out operation failed. (-71) [ 800.140458][ T5925] stb0899_attach: Driver disabled by Kconfig [ 800.165011][ T5925] az6027: no front-end attached [ 800.165011][ T5925] [ 800.397552][ T5925] az6027: usb out operation failed. (-71) [ 800.700877][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 800.718276][T11209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.742125][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 800.894976][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 801.049672][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 801.082918][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 801.127115][ T5925] usb 1-1: USB disconnect, device number 36 [ 801.315176][T11233] batadv_slave_1: entered promiscuous mode [ 801.672857][T11235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.691156][ T3075] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 801.733509][ T5925] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 801.851105][ T3075] usb 4-1: device descriptor read/64, error -71 [ 801.945989][T11231] batadv_slave_1: left promiscuous mode [ 802.184189][ T3075] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 802.395995][T11240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.503895][ T3075] usb 4-1: device descriptor read/64, error -71 [ 802.802500][ T3075] usb usb4-port1: attempt power cycle [ 803.080543][T11243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.321233][ T3075] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 803.585029][ T3075] usb 4-1: device descriptor read/8, error -71 [ 804.259502][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 804.259518][ T30] audit: type=1400 audit(1751113148.771:853): avc: denied { write } for pid=11262 comm="syz.3.1172" dev="sockfs" ino=35819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 804.260218][T11263] 9pnet_fd: Insufficient options for proto=fd [ 804.265974][ T3075] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 804.443025][T11271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11271 comm=syz.0.1173 [ 804.696828][ T3075] usb 4-1: device not accepting address 32, error -71 [ 804.700906][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 804.711085][ T3075] usb usb4-port1: unable to enumerate USB device [ 804.753369][ T30] audit: type=1400 audit(1751113149.141:854): avc: denied { execute_no_trans } for pid=11276 comm="syz.0.1176" path="/185/file1" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 804.926826][T11272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.953865][ T30] audit: type=1400 audit(1751113149.471:855): avc: denied { mount } for pid=11281 comm="syz.0.1178" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 804.983249][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.012485][ T30] audit: type=1400 audit(1751113149.521:856): avc: denied { bind } for pid=11281 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 805.041540][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.053381][ T30] audit: type=1400 audit(1751113149.571:857): avc: denied { bind } for pid=11281 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.072792][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 805.072854][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.072875][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.107720][ T10] usb 8-1: config 0 descriptor?? [ 805.152317][ T30] audit: type=1400 audit(1751113149.571:858): avc: denied { listen } for pid=11281 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.175027][ T30] audit: type=1400 audit(1751113149.571:859): avc: denied { connect } for pid=11281 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.197699][ T30] audit: type=1400 audit(1751113149.571:860): avc: denied { setopt } for pid=11281 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.221769][ T30] audit: type=1400 audit(1751113149.571:861): avc: denied { getopt } for pid=11281 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 805.258234][ T30] audit: type=1400 audit(1751113149.591:862): avc: denied { write } for pid=11284 comm="syz.9.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 805.723319][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 806.294994][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 806.515870][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 807.597739][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 807.609411][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25647, setting to 64 [ 807.620919][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.637546][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 807.646939][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.655665][ T974] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 807.666248][ T10] usb 3-1: Product: syz [ 807.671769][ T10] usb 3-1: Manufacturer: syz [ 807.676462][ T10] usb 3-1: SerialNumber: syz [ 807.701813][ T10] usb 3-1: config 0 descriptor?? [ 807.709259][T11304] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 807.721432][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 807.791028][ T974] usb 8-1: device descriptor read/64, error -32 [ 807.972773][T11313] netlink: 4220 bytes leftover after parsing attributes in process `syz.9.1186'. [ 808.071254][ T974] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 808.341132][ T974] usb 8-1: device descriptor read/64, error -32 [ 809.558101][ T5932] usb 8-1: USB disconnect, device number 22 [ 810.385030][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 810.385046][ T30] audit: type=1400 audit(1751113154.891:889): avc: denied { ioctl } for pid=11331 comm="syz.0.1190" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 810.593384][ T30] audit: type=1400 audit(1751113154.951:890): avc: denied { bind } for pid=11331 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 810.714367][T11337] FAULT_INJECTION: forcing a failure. [ 810.714367][T11337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.736007][T11337] CPU: 0 UID: 0 PID: 11337 Comm: syz.3.1191 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 810.736035][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 810.736045][T11337] Call Trace: [ 810.736051][T11337] [ 810.736058][T11337] dump_stack_lvl+0x16c/0x1f0 [ 810.736090][T11337] should_fail_ex+0x512/0x640 [ 810.736118][T11337] _copy_from_user+0x2e/0xd0 [ 810.736143][T11337] move_addr_to_kernel+0x65/0x170 [ 810.736165][T11337] __copy_msghdr+0x386/0x470 [ 810.736188][T11337] copy_msghdr_from_user+0xc1/0x160 [ 810.736212][T11337] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 810.736248][T11337] ___sys_sendmsg+0xfe/0x1d0 [ 810.736273][T11337] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.736295][T11337] ? __lock_acquire+0x622/0x1c90 [ 810.736352][T11337] __sys_sendmsg+0x16d/0x220 [ 810.736376][T11337] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.736416][T11337] do_syscall_64+0xcd/0x4c0 [ 810.736443][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.736461][T11337] RIP: 0033:0x7f117978e929 [ 810.736475][T11337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.736491][T11337] RSP: 002b:00007f117a537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.736508][T11337] RAX: ffffffffffffffda RBX: 00007f11799b5fa0 RCX: 00007f117978e929 [ 810.736519][T11337] RDX: 0000000000004b10 RSI: 0000200000000080 RDI: 0000000000000003 [ 810.736529][T11337] RBP: 00007f117a537090 R08: 0000000000000000 R09: 0000000000000000 [ 810.736539][T11337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.736550][T11337] R13: 0000000000000000 R14: 00007f11799b5fa0 R15: 00007ffd6b269dc8 [ 810.736573][T11337] [ 811.268509][T11338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.340132][ T5932] usb 3-1: USB disconnect, device number 32 [ 813.501019][ T5932] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 813.712814][ T5932] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 813.734765][ T5932] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.761604][ T5932] usb 10-1: config 0 descriptor?? [ 814.200326][ T30] audit: type=1400 audit(1751113158.711:891): avc: denied { create } for pid=11380 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 814.262527][ T30] audit: type=1400 audit(1751113158.711:892): avc: denied { write } for pid=11380 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 816.075294][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1210'. [ 816.267483][ T5932] usb 10-1: string descriptor 0 read error: -71 [ 816.276193][ T5932] hackrf 10-1:0.0: usb_control_msg() failed -71 request 0e [ 816.314041][ T5932] hackrf 10-1:0.0: Could not detect board [ 816.319893][ T5932] hackrf 10-1:0.0: probe with driver hackrf failed with error -71 [ 816.430174][ T5932] usb 10-1: USB disconnect, device number 25 [ 816.744345][T11411] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 816.992971][ T3075] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 817.233810][ T30] audit: type=1400 audit(1751113161.751:893): avc: denied { read } for pid=11410 comm="syz.7.1211" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 817.270583][ T30] audit: type=1400 audit(1751113161.781:894): avc: denied { open } for pid=11410 comm="syz.7.1211" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 817.401079][ T30] audit: type=1400 audit(1751113161.831:895): avc: denied { ioctl } for pid=11410 comm="syz.7.1211" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 817.492887][ T3075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 817.544291][ T3075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 817.575407][ T30] audit: type=1400 audit(1751113161.851:896): avc: denied { write } for pid=11410 comm="syz.7.1211" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 817.760886][ T3075] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 817.779460][ T3075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.795494][ T3075] usb 1-1: config 0 descriptor?? [ 817.871805][T11422] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 818.339545][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 818.380340][T11414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 818.572354][ T10] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 818.603976][ T30] audit: type=1400 audit(1751113163.111:897): avc: denied { create } for pid=11412 comm="syz.0.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 818.628324][ T3075] ath6kl: Failed to submit usb control message: -71 [ 818.644170][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.683442][ T3075] ath6kl: unable to send the bmi data to the device: -71 [ 818.687134][ T10] usb 8-1: config 0 descriptor?? [ 818.720267][ T3075] ath6kl: Unable to send get target info: -71 [ 818.728753][ T30] audit: type=1400 audit(1751113163.111:898): avc: denied { write } for pid=11412 comm="syz.0.1212" path="socket:[36696]" dev="sockfs" ino=36696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 818.789104][ T3075] ath6kl: Failed to init ath6kl core: -71 [ 818.799713][T11430] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 818.834021][ T3075] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 818.952102][ T10] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 818.959265][ T3075] usb 1-1: USB disconnect, device number 37 [ 819.561369][ T30] audit: type=1400 audit(1751113164.081:899): avc: denied { setopt } for pid=11435 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 819.603876][ T10] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 819.622892][ T10] [drm] Initialized udl on minor 2 [ 819.716877][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 819.731039][ T3075] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 819.733075][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 819.875766][ T30] audit: type=1400 audit(1751113164.391:900): avc: denied { ioctl } for pid=11435 comm="syz.0.1218" path="socket:[37190]" dev="sockfs" ino=37190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 819.908899][ T30] audit: type=1400 audit(1751113164.421:901): avc: denied { bind } for pid=11435 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 819.979215][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 820.026568][ T3075] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 820.048043][ T3075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.094126][ T3075] usb 3-1: config 0 descriptor?? [ 820.101055][ T10] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 820.197355][T11325] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 820.205721][ T5932] usb 8-1: USB disconnect, device number 23 [ 820.213961][T11325] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 820.294526][ T10] usb 4-1: config 7 has an invalid interface number: 186 but max is 0 [ 820.318126][ T10] usb 4-1: config 7 has no interface number 0 [ 820.346681][ T3075] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 820.348616][ T10] usb 4-1: config 7 interface 186 has no altsetting 0 [ 820.376591][ T10] usb 4-1: string descriptor 0 read error: -22 [ 820.383333][ T10] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 820.398248][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.414889][ T10] usb 4-1: bad CDC descriptors [ 820.632727][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.641622][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.677480][ T5932] usb 4-1: USB disconnect, device number 33 [ 820.712854][ T30] audit: type=1400 audit(1751113165.231:902): avc: denied { create } for pid=11451 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 820.733973][ T3075] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3 [ 820.740673][ T3075] [drm] Initialized udl on minor 3 [ 821.006012][ T3075] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 821.036332][ T3075] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 821.471367][ T3075] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 821.661844][T11462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.734175][ T5918] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 821.735211][ T5932] usb 3-1: USB disconnect, device number 33 [ 821.763745][ T5918] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 821.861846][ T3075] usb 1-1: Using ep0 maxpacket: 32 [ 821.875167][ T3075] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 821.888203][ T3075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.902253][ T3075] usb 1-1: Product: syz [ 821.906448][ T3075] usb 1-1: Manufacturer: syz [ 821.911536][ T3075] usb 1-1: SerialNumber: syz [ 821.922084][ T3075] empeg 1-1:1.0: empeg converter detected [ 822.130174][ T3075] usb 1-1: empeg converter now attached to ttyUSB0 [ 822.163718][ T5918] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 822.357489][ T5918] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 822.365994][ T5918] usb 4-1: config 0 has no interface number 0 [ 822.374935][ T5918] usb 4-1: config 0 interface 41 has no altsetting 0 [ 822.375047][T11478] FAULT_INJECTION: forcing a failure. [ 822.375047][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 822.396812][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.7.1233 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 822.396840][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.396849][T11478] Call Trace: [ 822.396855][T11478] [ 822.396861][T11478] dump_stack_lvl+0x16c/0x1f0 [ 822.396891][T11478] should_fail_ex+0x512/0x640 [ 822.396911][T11478] ? __kvmalloc_node_noprof+0x124/0x620 [ 822.396935][T11478] should_failslab+0xc2/0x120 [ 822.396958][T11478] __kvmalloc_node_noprof+0x137/0x620 [ 822.396980][T11478] ? nf_hook_entries_grow+0x285/0x860 [ 822.397008][T11478] ? nf_hook_entries_grow+0x285/0x860 [ 822.397029][T11478] nf_hook_entries_grow+0x285/0x860 [ 822.397052][T11478] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 822.397077][T11478] __nf_register_net_hook+0x1cd/0x730 [ 822.397105][T11478] nf_register_net_hook+0x109/0x160 [ 822.397131][T11478] nf_register_net_hooks+0x5d/0xd0 [ 822.397158][T11478] ip_vs_register_hooks+0xe7/0x150 [ 822.397178][T11478] ip_vs_add_service+0xd58/0x1550 [ 822.397202][T11478] ? find_held_lock+0x2b/0x80 [ 822.397223][T11478] ? do_ip_vs_set_ctl+0xbff/0x11d0 [ 822.397248][T11478] do_ip_vs_set_ctl+0xee3/0x11d0 [ 822.397269][T11478] ? kasan_check_range+0x15c/0x1b0 [ 822.397289][T11478] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 822.397310][T11478] ? preempt_schedule_common+0x44/0xc0 [ 822.397343][T11478] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 822.397367][T11478] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 822.397413][T11478] ? nf_setsockopt+0x8a/0xf0 [ 822.397427][T11478] nf_setsockopt+0x8a/0xf0 [ 822.397446][T11478] ip_setsockopt+0xcb/0xf0 [ 822.397470][T11478] raw_setsockopt+0xb7/0x2a0 [ 822.397494][T11478] ? __pfx_raw_setsockopt+0x10/0x10 [ 822.397518][T11478] ? raw_setsockopt+0x20/0x2a0 [ 822.397542][T11478] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 822.397560][T11478] do_sock_setsockopt+0x224/0x470 [ 822.397578][T11478] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 822.397609][T11478] __sys_setsockopt+0x1a0/0x230 [ 822.397637][T11478] __x64_sys_setsockopt+0xbd/0x160 [ 822.397659][T11478] ? x64_sys_call+0xd06/0x1730 [ 822.397684][T11478] do_syscall_64+0xcd/0x4c0 [ 822.397709][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.397727][T11478] RIP: 0033:0x7f437dd8e929 [ 822.397742][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.397759][T11478] RSP: 002b:00007f437ec72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 822.397776][T11478] RAX: ffffffffffffffda RBX: 00007f437dfb6080 RCX: 00007f437dd8e929 [ 822.397788][T11478] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000006 [ 822.397797][T11478] RBP: 00007f437ec72090 R08: 000000000000002c R09: 0000000000000000 [ 822.397807][T11478] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 822.397817][T11478] R13: 0000000000000000 R14: 00007f437dfb6080 R15: 00007ffc92ead5b8 [ 822.397840][T11478] [ 822.400296][ T5918] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 822.886884][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.895221][ T5918] usb 4-1: Product: syz [ 822.899400][ T5918] usb 4-1: Manufacturer: syz [ 822.910298][ T5918] usb 4-1: SerialNumber: syz [ 822.919472][ T5918] usb 4-1: config 0 descriptor?? [ 823.143494][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 823.143510][ T30] audit: type=1400 audit(1751113167.651:908): avc: denied { mounton } for pid=11483 comm="syz.7.1235" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 823.948026][ T30] audit: type=1400 audit(1751113168.461:909): avc: denied { create } for pid=11456 comm="syz.0.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 824.488845][ T30] audit: type=1400 audit(1751113168.831:910): avc: denied { bind } for pid=11456 comm="syz.0.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 824.553757][T11500] netlink: 'syz.7.1237': attribute type 20 has an invalid length. [ 824.644822][ T5918] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 824.662058][ T5918] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 824.863759][ T5918] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 825.239692][ T5918] usb 4-1: USB disconnect, device number 34 [ 826.289262][T11522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11522 comm=syz.9.1242 [ 826.343503][ T30] audit: type=1400 audit(1751113170.861:911): avc: denied { create } for pid=11515 comm="syz.9.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 826.366942][T11516] netlink: 'syz.9.1242': attribute type 1 has an invalid length. [ 826.375112][ T30] audit: type=1400 audit(1751113170.881:912): avc: denied { ioctl } for pid=11515 comm="syz.9.1242" path="socket:[36856]" dev="sockfs" ino=36856 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 826.595504][ T5918] usb 1-1: USB disconnect, device number 38 [ 826.750468][ T5918] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 826.811520][T11516] bond1: entered promiscuous mode [ 826.813826][ T5918] empeg 1-1:1.0: device disconnected [ 826.831353][T11516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 827.703526][ T30] audit: type=1400 audit(1751113172.211:913): avc: denied { create } for pid=11545 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 828.411643][T11553] xt_l2tp: missing protocol rule (udp|l2tpip) [ 830.861090][T11325] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 831.513266][ T30] audit: type=1400 audit(1751113175.481:914): avc: denied { write } for pid=11558 comm="syz.3.1251" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 831.567156][ T30] audit: type=1400 audit(1751113175.481:915): avc: denied { connect } for pid=11558 comm="syz.3.1251" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 831.650927][T11325] usb 3-1: Using ep0 maxpacket: 8 [ 831.651249][ T30] audit: type=1400 audit(1751113175.481:916): avc: denied { name_connect } for pid=11558 comm="syz.3.1251" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 831.681641][T11551] syz.2.1250(11551): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 831.712327][T11325] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 831.838980][T11325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.313278][T11325] usb 3-1: can't set config #252, error -71 [ 833.347425][T11325] usb 3-1: USB disconnect, device number 34 [ 833.981185][T11325] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 834.236329][T11325] usb 3-1: Using ep0 maxpacket: 32 [ 834.247355][T11325] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.260722][T11325] usb 3-1: config 0 interface 0 has no altsetting 0 [ 834.273336][T11325] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 834.319216][T11325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.344849][T11325] usb 3-1: config 0 descriptor?? [ 834.655493][T11599] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 834.664974][ T30] audit: type=1400 audit(1751113179.181:917): avc: denied { create } for pid=11597 comm="syz.7.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 835.125821][T11602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.230900][ T3075] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 835.315930][T11325] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x1 [ 835.333606][T11325] corsair-cpro 0003:1B1C:0C10.0003: item fetching failed at offset 4/5 [ 835.360979][ T974] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 835.392420][T11325] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -22 [ 835.410925][ T3075] usb 8-1: Using ep0 maxpacket: 16 [ 835.418132][ T3075] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.453491][ T3075] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 835.474448][ T3075] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.519567][ T3075] usb 8-1: config 0 descriptor?? [ 835.563179][ T974] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 835.597887][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.624954][ T974] usb 4-1: config 0 descriptor?? [ 835.868624][ T974] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 836.394252][ T3075] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 836.405759][ T974] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 836.443499][ T974] [drm] Initialized udl on minor 2 [ 836.444206][ T5918] usb 3-1: USB disconnect, device number 35 [ 836.504047][ C1] ================================================================== [ 836.512146][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xf94/0x1030 [ 836.520072][ C1] Read of size 1 at addr ffff888035127fff by task syz.3.1260/11599 [ 836.527972][ C1] [ 836.530312][ C1] CPU: 1 UID: 0 PID: 11599 Comm: syz.3.1260 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 836.530340][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 836.530352][ C1] Call Trace: [ 836.530360][ C1] [ 836.530368][ C1] dump_stack_lvl+0x116/0x1f0 [ 836.530401][ C1] print_report+0xcd/0x680 [ 836.530432][ C1] ? __virt_addr_valid+0x81/0x610 [ 836.530455][ C1] ? __phys_addr+0xe8/0x180 [ 836.530479][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 836.530509][ C1] kasan_report+0xe0/0x110 [ 836.530539][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 836.530573][ C1] mcp2221_raw_event+0xf94/0x1030 [ 836.530604][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 836.530633][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 836.530656][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 836.530694][ C1] hid_irq_in+0x35e/0x870 [ 836.530726][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 836.530758][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 836.530786][ C1] dummy_timer+0x180e/0x3a20 [ 836.530826][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 836.530855][ C1] ? rcu_is_watching+0x12/0xc0 [ 836.530879][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 836.530907][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 836.530933][ C1] __hrtimer_run_queues+0x202/0xad0 [ 836.530959][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 836.530981][ C1] ? read_tsc+0x9/0x20 [ 836.531007][ C1] hrtimer_run_softirq+0x17d/0x350 [ 836.531029][ C1] handle_softirqs+0x216/0x8e0 [ 836.531054][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 836.531080][ C1] __irq_exit_rcu+0x109/0x170 [ 836.531103][ C1] irq_exit_rcu+0x9/0x30 [ 836.531125][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 836.531152][ C1] [ 836.531159][ C1] [ 836.531167][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 836.531190][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 836.531219][ C1] Code: fb 09 00 00 44 8b 05 a9 6a 1e 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 6f 13 3a 00 fb 65 48 8b 1d 5e 02 43 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 836.531239][ C1] RSP: 0018:ffffc9000bcb76f8 EFLAGS: 00000202 [ 836.531258][ C1] RAX: 000000000001280d RBX: ffff88803080c880 RCX: ffffffff81c3f01f [ 836.531272][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a526 RDI: ffffffff8c157ee0 [ 836.531285][ C1] RBP: ffffc9000bcb7740 R08: 0000000000000001 R09: 0000000000000001 [ 836.531298][ C1] R10: ffffffff90a81657 R11: 0000000000000001 R12: ffff8880b853a2c0 [ 836.531312][ C1] R13: ffff88801e294880 R14: 0000000000000001 R15: ffff8880b853b130 [ 836.531330][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 836.531358][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 836.531383][ C1] ? __switch_to+0x783/0x1170 [ 836.531405][ C1] __schedule+0x1172/0x5de0 [ 836.531436][ C1] ? __pfx___schedule+0x10/0x10 [ 836.531466][ C1] ? find_held_lock+0x2b/0x80 [ 836.531490][ C1] ? schedule+0x2d7/0x3a0 [ 836.531517][ C1] schedule+0xe7/0x3a0 [ 836.531543][ C1] schedule_timeout+0x257/0x290 [ 836.531564][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 836.531588][ C1] ? rcu_is_watching+0x12/0xc0 [ 836.531610][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 836.531634][ C1] __wait_for_common+0x2fc/0x4e0 [ 836.531662][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 836.531691][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 836.531720][ C1] ? generic_exec_single+0xbb/0x390 [ 836.531748][ C1] rdmsr_safe_on_cpu+0x1dc/0x210 [ 836.531774][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 836.531800][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 836.531834][ C1] msr_read+0x19d/0x250 [ 836.531856][ C1] ? __pfx_msr_read+0x10/0x10 [ 836.531877][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 836.531908][ C1] ? security_file_permission+0x71/0x210 [ 836.531935][ C1] ? rw_verify_area+0xcf/0x680 [ 836.531957][ C1] ? __pfx_msr_read+0x10/0x10 [ 836.531977][ C1] vfs_read+0x1e1/0xc60 [ 836.532004][ C1] ? __pfx_vfs_read+0x10/0x10 [ 836.532026][ C1] ? find_held_lock+0x2b/0x80 [ 836.532049][ C1] ? __fget_files+0x204/0x3c0 [ 836.532073][ C1] ? __fget_files+0x20e/0x3c0 [ 836.532104][ C1] ksys_read+0x12a/0x250 [ 836.532125][ C1] ? __pfx_ksys_read+0x10/0x10 [ 836.532153][ C1] do_syscall_64+0xcd/0x4c0 [ 836.532183][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.532203][ C1] RIP: 0033:0x7f117978e929 [ 836.532221][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.532241][ C1] RSP: 002b:00007f117a537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.532258][ C1] RAX: ffffffffffffffda RBX: 00007f11799b5fa0 RCX: 00007f117978e929 [ 836.532273][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000006 [ 836.532285][ C1] RBP: 00007f1179810b39 R08: 0000000000000000 R09: 0000000000000000 [ 836.532298][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.532311][ C1] R13: 0000000000000000 R14: 00007f11799b5fa0 R15: 00007ffd6b269dc8 [ 836.532331][ C1] [ 836.532338][ C1] [ 837.028279][ C1] Allocated by task 8659: [ 837.032600][ C1] kasan_save_stack+0x33/0x60 [ 837.037274][ C1] kasan_save_track+0x14/0x30 [ 837.041940][ C1] __kasan_slab_alloc+0x89/0x90 [ 837.046793][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 837.052243][ C1] __kernfs_new_node+0xd2/0x8e0 [ 837.057179][ C1] kernfs_new_node+0x13c/0x1e0 [ 837.061926][ C1] __kernfs_create_file+0x53/0x350 [ 837.067026][ C1] sysfs_add_file_mode_ns+0x207/0x3c0 [ 837.072392][ C1] internal_create_group+0x578/0xf30 [ 837.077670][ C1] internal_create_groups+0x9d/0x150 [ 837.082946][ C1] ib_setup_port_attrs+0x41f/0x600 [ 837.088047][ C1] add_one_compat_dev+0x558/0x7d0 [ 837.093068][ C1] enable_device_and_get+0x336/0x3f0 [ 837.098347][ C1] ib_register_device+0x87f/0xe00 [ 837.103362][ C1] rxe_register_device+0x275/0x320 [ 837.108475][ C1] rxe_net_add+0x8e/0xe0 [ 837.112713][ C1] rxe_newlink+0x70/0x190 [ 837.117033][ C1] nldev_newlink+0x3a6/0x680 [ 837.121623][ C1] rdma_nl_rcv_msg+0x38a/0x6e0 [ 837.126495][ C1] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 837.132915][ C1] netlink_unicast+0x53a/0x7f0 [ 837.137675][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 837.142425][ C1] ____sys_sendmsg+0xa98/0xc70 [ 837.147181][ C1] ___sys_sendmsg+0x134/0x1d0 [ 837.151864][ C1] __sys_sendmsg+0x16d/0x220 [ 837.156480][ C1] do_syscall_64+0xcd/0x4c0 [ 837.160998][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.166890][ C1] [ 837.169228][ C1] The buggy address belongs to the object at ffff888035127f00 [ 837.169228][ C1] which belongs to the cache kernfs_node_cache of size 176 [ 837.183788][ C1] The buggy address is located 79 bytes to the right of [ 837.183788][ C1] allocated 176-byte region [ffff888035127f00, ffff888035127fb0) [ 837.198354][ C1] [ 837.200664][ C1] The buggy address belongs to the physical page: [ 837.207057][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35127 [ 837.215807][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 837.222901][ C1] page_type: f5(slab) [ 837.226869][ C1] raw: 00fff00000000000 ffff88801ce8f8c0 dead000000000122 0000000000000000 [ 837.235454][ C1] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000 [ 837.244020][ C1] page dumped because: kasan: bad access detected [ 837.250410][ C1] page_owner tracks the page as allocated [ 837.256104][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8659, tgid 8650 (syz.9.519), ts 585818199903, free_ts 585635011922 [ 837.275282][ C1] post_alloc_hook+0x1c0/0x230 [ 837.280054][ C1] get_page_from_freelist+0x1321/0x3890 [ 837.285589][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 837.291468][ C1] alloc_pages_mpol+0x1fb/0x550 [ 837.296311][ C1] new_slab+0x23b/0x330 [ 837.300452][ C1] ___slab_alloc+0xd9c/0x1940 [ 837.305217][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 837.310575][ C1] kmem_cache_alloc_noprof+0xef/0x3b0 [ 837.315939][ C1] __kernfs_new_node+0xd2/0x8e0 [ 837.320810][ C1] kernfs_new_node+0x13c/0x1e0 [ 837.325577][ C1] __kernfs_create_file+0x53/0x350 [ 837.330676][ C1] sysfs_add_file_mode_ns+0x207/0x3c0 [ 837.336051][ C1] internal_create_group+0x578/0xf30 [ 837.341330][ C1] internal_create_groups+0x9d/0x150 [ 837.346613][ C1] ib_setup_port_attrs+0x41f/0x600 [ 837.351730][ C1] add_one_compat_dev+0x558/0x7d0 [ 837.356746][ C1] page last free pid 15 tgid 15 stack trace: [ 837.362704][ C1] __free_frozen_pages+0x7fe/0x1180 [ 837.367903][ C1] tlb_remove_table_rcu+0x116/0x1a0 [ 837.373094][ C1] rcu_core+0x799/0x14e0 [ 837.377322][ C1] handle_softirqs+0x216/0x8e0 [ 837.382087][ C1] run_ksoftirqd+0x3a/0x60 [ 837.386491][ C1] smpboot_thread_fn+0x3f4/0xae0 [ 837.391417][ C1] kthread+0x3c2/0x780 [ 837.395468][ C1] ret_from_fork+0x5d4/0x6f0 [ 837.400062][ C1] ret_from_fork_asm+0x1a/0x30 [ 837.404821][ C1] [ 837.407131][ C1] Memory state around the buggy address: [ 837.412742][ C1] ffff888035127e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 837.420801][ C1] ffff888035127f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 837.428849][ C1] >ffff888035127f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 837.437245][ C1] ^ [ 837.445201][ C1] ffff888035128000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 837.453247][ C1] ffff888035128080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 837.461290][ C1] ================================================================== [ 837.469338][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 837.476516][ C1] CPU: 1 UID: 0 PID: 11599 Comm: syz.3.1260 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 837.488565][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.498609][ C1] Call Trace: [ 837.501872][ C1] [ 837.504703][ C1] dump_stack_lvl+0x3d/0x1f0 [ 837.509289][ C1] panic+0x71c/0x800 [ 837.513180][ C1] ? __pfx_panic+0x10/0x10 [ 837.517594][ C1] ? __pfx__printk+0x10/0x10 [ 837.522172][ C1] ? end_report+0x4c/0x170 [ 837.526583][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 837.531783][ C1] check_panic_on_warn+0xab/0xb0 [ 837.536715][ C1] end_report+0x107/0x170 [ 837.541035][ C1] kasan_report+0xee/0x110 [ 837.545442][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 837.550639][ C1] mcp2221_raw_event+0xf94/0x1030 [ 837.555659][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 837.561509][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 837.567582][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 837.573038][ C1] hid_irq_in+0x35e/0x870 [ 837.577369][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 837.582737][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 837.587936][ C1] dummy_timer+0x180e/0x3a20 [ 837.592532][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 837.597464][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.602218][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 837.608018][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 837.612957][ C1] __hrtimer_run_queues+0x202/0xad0 [ 837.618143][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 837.623848][ C1] ? read_tsc+0x9/0x20 [ 837.627913][ C1] hrtimer_run_softirq+0x17d/0x350 [ 837.633019][ C1] handle_softirqs+0x216/0x8e0 [ 837.637777][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 837.643058][ C1] __irq_exit_rcu+0x109/0x170 [ 837.647724][ C1] irq_exit_rcu+0x9/0x30 [ 837.651954][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 837.657590][ C1] [ 837.660516][ C1] [ 837.663434][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 837.669404][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 837.675813][ C1] Code: fb 09 00 00 44 8b 05 a9 6a 1e 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 6f 13 3a 00 fb 65 48 8b 1d 5e 02 43 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 837.695423][ C1] RSP: 0018:ffffc9000bcb76f8 EFLAGS: 00000202 [ 837.701495][ C1] RAX: 000000000001280d RBX: ffff88803080c880 RCX: ffffffff81c3f01f [ 837.709460][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a526 RDI: ffffffff8c157ee0 [ 837.717418][ C1] RBP: ffffc9000bcb7740 R08: 0000000000000001 R09: 0000000000000001 [ 837.725376][ C1] R10: ffffffff90a81657 R11: 0000000000000001 R12: ffff8880b853a2c0 [ 837.733334][ C1] R13: ffff88801e294880 R14: 0000000000000001 R15: ffff8880b853b130 [ 837.741293][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 837.747277][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 837.753081][ C1] ? __switch_to+0x783/0x1170 [ 837.757746][ C1] __schedule+0x1172/0x5de0 [ 837.762244][ C1] ? __pfx___schedule+0x10/0x10 [ 837.767089][ C1] ? find_held_lock+0x2b/0x80 [ 837.771757][ C1] ? schedule+0x2d7/0x3a0 [ 837.776080][ C1] schedule+0xe7/0x3a0 [ 837.780139][ C1] schedule_timeout+0x257/0x290 [ 837.784976][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 837.790342][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.795099][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 837.800289][ C1] __wait_for_common+0x2fc/0x4e0 [ 837.805238][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 837.810603][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 837.816058][ C1] ? generic_exec_single+0xbb/0x390 [ 837.821248][ C1] rdmsr_safe_on_cpu+0x1dc/0x210 [ 837.826178][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 837.831629][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 837.837259][ C1] msr_read+0x19d/0x250 [ 837.841407][ C1] ? __pfx_msr_read+0x10/0x10 [ 837.846072][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 837.851439][ C1] ? security_file_permission+0x71/0x210 [ 837.857079][ C1] ? rw_verify_area+0xcf/0x680 [ 837.861832][ C1] ? __pfx_msr_read+0x10/0x10 [ 837.866497][ C1] vfs_read+0x1e1/0xc60 [ 837.870647][ C1] ? __pfx_vfs_read+0x10/0x10 [ 837.875319][ C1] ? find_held_lock+0x2b/0x80 [ 837.879997][ C1] ? __fget_files+0x204/0x3c0 [ 837.884676][ C1] ? __fget_files+0x20e/0x3c0 [ 837.889345][ C1] ksys_read+0x12a/0x250 [ 837.893579][ C1] ? __pfx_ksys_read+0x10/0x10 [ 837.898334][ C1] do_syscall_64+0xcd/0x4c0 [ 837.902836][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.908718][ C1] RIP: 0033:0x7f117978e929 [ 837.913120][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.932716][ C1] RSP: 002b:00007f117a537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 837.941130][ C1] RAX: ffffffffffffffda RBX: 00007f11799b5fa0 RCX: 00007f117978e929 [ 837.949108][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000006 [ 837.957075][ C1] RBP: 00007f1179810b39 R08: 0000000000000000 R09: 0000000000000000 [ 837.965032][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.972995][ C1] R13: 0000000000000000 R14: 00007f11799b5fa0 R15: 00007ffd6b269dc8 [ 837.980956][ C1] [ 837.984152][ C1] Kernel Offset: disabled [ 837.988456][ C1] Rebooting in 86400 seconds..