last executing test programs: 7m29.394558502s ago: executing program 32 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000790, 0x80000000002, 0x180, 0x400000004, 0x0, 0xee, 0x3, 0xa89, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m17.508400775s ago: executing program 33 (id=1029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200"], 0x6c}, 0x1, 0x0, 0x0, 0x20008815}, 0x4880) 7m15.545210031s ago: executing program 34 (id=1040): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) pwritev2(r0, &(0x7f0000000600)=[{0x0}], 0x1, 0x1, 0x5, 0x12) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 6m56.74700785s ago: executing program 35 (id=1107): r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003000000086d042d4040000102030109022d00010112a000090400030103010306092100003e01224b0d09058103000405ef800905020300040b00ff"], &(0x7f0000000c00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x3, 0x4, 0x8, 0xff, 0xca}, 0x3b, &(0x7f0000000740)={0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x15, 0x0, 0x85, 0xff, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "a300"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6d1efcceae5bc54f9f82beb69b63a677"}]}, 0x7, [{0x83, &(0x7f0000000900)=@string={0x83, 0x3, "b0a72b00a073ae2c307f2cfcb924b6086bdf711fee28e2261e5164b92cfd95f083749e0b1e615e48ae975af9673b7b3bfdcc666d0e3305009e63e3acec5aed842edd302c8c1c5077967c79cede3b4893c3a9d8d1191c8442f2112a03608ec75d23d9a31714582c854c537929bf30ff47704010a987524789cdb1dcebf1477c69dc"}}, {0xd7, &(0x7f00000009c0)=@string={0xd7, 0x3, "ee9019d7e00585c9bab0e4080557f1cdba74256c41ca6cc0b92f4b3c1a42c50d62e85d579b0c9fd40fa0e5b98278280de0d09b90dbdea4d03251aa860416a3ecddc0c40018c4f90ed6438b039ca3b3762cebac826923a717f4806ba5bd41aa65d8fef1191a139df0aa3d6b0ddcabb3a7e5438c9a68200aba5bbbe950633d77ef3feedf2e260f7107073025fbccfdb5b4df5320be7ef5d238c82d56a826725b259342ca5be70e1d9279f3e8c2314d48e2ddad08daf6cfec0047521699279f5ed87537c7aa6d8e963cc5d6dbc709a70f58eeb1f72d4e"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, &(0x7f0000000c80)={0x0, 0x31, 0xd9, {0xd9, 0xc, "5a487675494fb7bc5a015c12569609e4c4c322c0e4bc55cae91f9c948840356b5c7aaa4d81f601cb04d79bd1546ba87c58a9d6a5e13e2f78d08d8bd0be8a5fd5434891bed9fc445f92f398fd31fb9144501048a9596e8ce3eced146a1ed9fc52dd377024544894dc645c2463a37b4cec775c16b5474cad259dc8460646abe18da4dc2921f0c081637c66e5433df75f81bb1c0af19b7c8a87168b759eae17c765cdbd27735cb272080bb93f314c9f375e19df5f4dd1381e94d9175b45150d7fd5fd4120bda163eee8cff5aedbe9c6221d8f109a6d22587a"}}, &(0x7f0000000d80)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "f20a4882071be176594ab34f1d5246c980f1c0f9b794bf866163e9391a6856e6c5f1d2e0c951a43bdbe16b70a7253570b2c836bf305be6da59f53b11a9df303a43822326353b599e3ab39a90127ce2466c595951f09f6dbb788556909262fb74746b8000a8def5291f0bfd607718fecbe06711b21dcd15439ac5ee8bdcfbcfcacedd177fd56ae828aedf374794d1f519c10fa7b7c702a4b1eec1084e0caf993fa56889aed4d5b4b2c2e621bdc5"}}, &(0x7f0000000e40)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x1, "009591b3"}, @global, @global=@item_012={0x1, 0x1, 0xa, "8d"}, @local=@item_4={0x3, 0x2, 0x4, "89765efc"}, @local=@item_012={0x2, 0x2, 0x2, 'n)'}]}}, &(0x7f0000000e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x56d, 0xd, 0x1, {0x22, 0xc14}}}}, &(0x7f0000001080)={0x2c, &(0x7f0000000f00)={0x40, 0x14, 0x3a, "5280a7bf27d627d9606b2c837c7d73fb6c3bdb17533b81f0a6957ff6632c032b87340ed4af8dd22c9a0ac7e2b3c3bdbf5d1010a0abf7f7055468"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000fc0)={0x20, 0x1, 0x59, "6519e46cfd8bb4183d2ec8f2249c1778b40ace630488e128f3d789f74c5fdd2e5437e8971c6359f36c926bfb94435e925281498d380e2560d7c1db42f82acce404a9216630667e5af77b0332715025a7f08c0d26a780edaa4d"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x13}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) semget$private(0x0, 0x0, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0x0, 0xfffffffe}, 0x1f) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 6m14.1155758s ago: executing program 36 (id=1254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000001baaaaaaaaaabbaaaaaaaaaabb080045090077972f4d17e3ea7b78ac1e0101e00000010900000000000000"], 0x2e) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3940400a}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f727400000000050005000200000005000100070000000000000000000000000000002855b9c185ee74d061dd25358499cc1838"], 0x58}}, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x4080) chdir(&(0x7f0000000100)='./file0\x00') 5m48.088856035s ago: executing program 8 (id=1350): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 5m46.958078488s ago: executing program 8 (id=1353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m46.004345255s ago: executing program 8 (id=1359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) open_by_handle_at(r0, &(0x7f0000000800)=@raw={0xf4, 0x61, {"b2c9ec54e7b00698fff06bf41551b53bf015f9fc2d6486bcc665d4ab13c11ec0830cc5bb291c7c2d3304c5a9b085d346ef455ea9e0d60c68d99ddc75c7dfde03ebd90dfd3d9fd8efa2423049c56e85773d36399148299f3ef840397e56831a5b39d864b56927abcbcc54713db5eaab4c668d2e2f195fc44b346024b05da2fb6b8cdcf0e8309baa47d207013375bf4da67ef1391a109a5c29457187944326171f5a46e195a73d8d8ede8b1c16b40de0fc6fad89a67cfc6e26734a9dcac2422e17f3e6965b4185ab1f0fc95ff05098715ba4851a3eed4a7bebc985c87ac4b8b46f80262480c777b4d875a5ea9d513db25306"}}, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/228, 0xe4}], 0x1}, 0x0) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x24008000) 5m44.571925673s ago: executing program 8 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) 5m44.397135917s ago: executing program 8 (id=1366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0xfe33) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r7, 0x1000000, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r8, &(0x7f0000000180)={{0x3, @default, 0x8}, [@null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), 0x0}, 0x20) fcntl$dupfd(r9, 0x0, r10) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000000140)={0x14}) socket$nl_generic(0x10, 0x3, 0x10) 5m43.283979187s ago: executing program 8 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000006c0)={@vsock={0x28, 0x0, 0x2710, @hyper}, {&(0x7f0000000640)=""/62, 0x3e}, &(0x7f0000000680), 0x1}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 5m42.792313162s ago: executing program 37 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000006c0)={@vsock={0x28, 0x0, 0x2710, @hyper}, {&(0x7f0000000640)=""/62, 0x3e}, &(0x7f0000000680), 0x1}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 5m39.334072031s ago: executing program 2 (id=1381): mkdir(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 5m38.315367641s ago: executing program 2 (id=1384): r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000080)={0x0, &(0x7f0000001e80)}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45"], 0x1c}}, 0x4080) chdir(&(0x7f0000000100)='./file0\x00') 5m37.90063785s ago: executing program 2 (id=1386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 5m37.840210964s ago: executing program 2 (id=1387): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) 5m37.708295725s ago: executing program 2 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001dc00)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002"], 0xec}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x40000) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x80) getegid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56741, 0x30bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0xfe4c}, 0x1, 0x0, 0x0, 0x105}, 0x0) socket$unix(0x1, 0x1, 0x0) 5m34.123697178s ago: executing program 2 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000006c0)={@vsock={0x28, 0x0, 0x2710, @hyper}, {&(0x7f0000000640)=""/62, 0x3e}, &(0x7f0000000680), 0x1}, 0xa0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 5m33.620519701s ago: executing program 38 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000006c0)={@vsock={0x28, 0x0, 0x2710, @hyper}, {&(0x7f0000000640)=""/62, 0x3e}, &(0x7f0000000680), 0x1}, 0xa0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 4m7.05950596s ago: executing program 6 (id=1615): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2, {0x0, 0xf0}, 0x1}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m6.432137603s ago: executing program 6 (id=1616): fsopen(&(0x7f0000000100)='cifs\x00', 0x0) listen(0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000240)=0x7, 0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 4m3.762748446s ago: executing program 6 (id=1623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x9, 0x0}}}}}, 0x108) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa5aaaaaaa9baaaaac1414bbaaaaaaac1414bb00"/42], 0x0) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1900, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000140)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000480)={{0x0, 0x5, 0x5, 0x6, 'syz0\x00', 0x7}, 0x3, 0x10, 0xbeba, r11, 0x4, 0x6, 'syz0\x00', &(0x7f0000000280)=['\'\x00', '}\'\x89)\x00', '/dev/hwrng\x00', '\x00'], 0x13}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) get_mempolicy(0x0, &(0x7f0000000140), 0x8001, &(0x7f0000ffa000/0x3000)=nil, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4m0.637948428s ago: executing program 6 (id=1634): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x30, 0x20, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa658}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x24040014) dup3(r0, r1, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m59.527602343s ago: executing program 6 (id=1639): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x149a82, 0x44) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r4, 0x36, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xdddd0000, 0x1}}, "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", "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"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3m58.10963726s ago: executing program 6 (id=1643): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000"]) (fail_nth: 2) 3m57.235372723s ago: executing program 39 (id=1643): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000"]) (fail_nth: 2) 3m33.348004694s ago: executing program 4 (id=1699): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) io_setup(0x800, 0x0) r0 = syz_open_procfs(0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x22) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x80041285, &(0x7f0000001080)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) pread64(r0, 0x0, 0x0, 0x40000000000009) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x8080) (async, rerun: 64) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) (async) r3 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 3m32.775903993s ago: executing program 4 (id=1703): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c00)={0x1c, &(0x7f0000000b00)={0x20, 0x11, 0x2, "c0ff"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m27.490545274s ago: executing program 4 (id=1718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mprotect(&(0x7f00004ac000/0x4000)=nil, 0x4000, 0x2000000) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000540)={0x203, 0x8, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f0000001900)={0x2020}, 0xfffffffffffffc5c) 3m26.883547824s ago: executing program 4 (id=1721): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x9, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r5 = dup2(r0, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x7, 0x0}, 0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000186600000900000000000000030000"], &(0x7f0000000500)='GPL\x00', 0x39000000, 0xec, &(0x7f0000000540)=""/236, 0x100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x0, 0xb, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x4, 0x3, 0xb, 0x8}, {0x3, 0x1, 0x7, 0x9}, {0x0, 0x3, 0x3, 0x2}, {0x5, 0x2, 0x9, 0xc}], 0x10, 0x3}, 0x94) r8 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') readlinkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x2, 0x0, 0x6, 0x5, 0x80, 0x10}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x7ff, 0xe7, &(0x7f0000000380)=""/231, 0x1e00, 0x20, '\x00', r3, @sk_skb=0x5, r5, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0xa92, 0x8}, 0x10, r6, r7, 0x0, &(0x7f00000007c0)=[r9], 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 3m26.179182011s ago: executing program 4 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0xa, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x401, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m25.680009474s ago: executing program 4 (id=1726): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m10.489616029s ago: executing program 40 (id=1726): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m0.525869197s ago: executing program 1 (id=1801): syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f0000000040)=[{0x5, 0xa830, 0x0, 0x0}, {0x26b, 0xc00, 0x0, 0x0}], 0x2}) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008100) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0xcd}}, 0x44) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(r9, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) 2m58.824513698s ago: executing program 1 (id=1802): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c00)={0x10, &(0x7f0000000b00)={0x20, 0x11, 0x1, "c0"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m55.847604577s ago: executing program 1 (id=1813): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 2m54.090070287s ago: executing program 1 (id=1816): syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@dellinkprop={0x124, 0x6d, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x23010, 0x41}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffff8}, @IFLA_NET_NS_FD={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'pimreg1\x00'}, @IFLA_VF_PORTS={0xd8, 0x18, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b001fbb0cee18c9a0cb58ba0ec86d8a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7b60b88ec6c3591d0870d05a5226b040"}, @IFLA_PORT_PROFILE={0x6, 0x2, '\v\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0xd, 0x2, '!8.-\'^//\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "245d052e419047593900dc8390f89735"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2738a41d7285b70d32f5c163adec2141"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '}+\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, ',%!):$$\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cabbe1b22cf034c89537e567aa0ddd01"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7404e4f504d3305b9c16721e9c492bbe"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x124}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000) 2m51.17573411s ago: executing program 1 (id=1825): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000080), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x26, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000200000034ad331f0200000018110000650935d40d4b5ce620d114dad130466cd7d5cee9fcea5b00000000a496fd775ec912433568d8b2a0278912618c351f92532d5199e73680efcebaed606bbd5991e292ab57b1852f4f9cdc346e0cc0e5b6d6d6d5f2f19fb4afb3b97bcbca92149ad210e8c15c26d2141d9b270a5e774bbef40ab9aeda0e1a3abcba7b0e18161399cd0f173b320f7adc15b75563ce1843ae26160e759a62b91286cfca38ee", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000186100000d000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000d10000000000000006000000185b000008000000000000000000000085200000040000000448f4ff020000008500000028000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x8000, 0x7e, &(0x7f0000000780)=""/126, 0x41100, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xb, 0xa, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1, 0x1], 0x0, 0x10, 0x80000001}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1e0000000b00000004000000d500000000100000", @ANYRES32=0x1, @ANYBLOB="0600000000000000000000000000000000000000f111bc30fd0bc51b6b6c8503215459f10996f3cf3330e8fba9a13265dbc4f914d225ea2ddb4466e82f081e47a14e622ad76470e33b56cb5d43f3236682aa612d3fbe03338e086d9c6d704ed541eb1a4e62cd2f4932bb26a9d451bb4011cc37c89992f2637b9b9fb4aea07e038edc25547d1a679d1ba82e34eb4bf22db733e29293d4b4b2e8c15a776973341eeb6b3391ed1627ae8c964f1f5de1236a8a74e994bbe60556e123d9b8fda7048be4344c138fe3c0ee11038b98301f9d53aa554e82be99dd13e362db195d6f67036a2293b2123671275a1f5ab15b7468c4ecd930fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000000400"/28], 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r9, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) r10 = open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r10, 0x400, 0x1) r11 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000e40)={r11, &(0x7f0000000c80)="078b3a288b330a2adbbf7922918ecb2d155d49dd2ac212d7888c30db9ff026993ce01f893bd9c90957df4355eccfea4eb28d6732f76757406878ef41505e224455ef45041b1309c1d78d46d32bb59e2bc327a967e7ae4d7a0a78a84f027b80a5e511565e471d870447827bcec954cd6756842f66da71cd617d67c4e5509f230f65e12f014483fee0c25184ec045c160173da72377d43f265b6ae030acb3627be87546681862d552d8771202b5c41b057f54fe24bc0ebce43a77d2d23940cee77c9f6b5b8aaa48cc7487bbef610607340f4604507218b29414d4f2a2fc5e1b83463bbd3982c7620dc9480e3e2d210fc9aa278a360", &(0x7f0000000d80)=""/160}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setlease(r10, 0x400, 0x0) r12 = gettid() r13 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r13, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7080000000000020000000000000000b70800006ee6090000007b8af0ff00000001bfa100000000000007010000f8ffffffbfa400000000000007040300f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000000000000182b0000", @ANYRES32=r2, @ANYBLOB="0000000076060000"], &(0x7f00000000c0)='GPL\x00', 0x658, 0xfb, &(0x7f0000000200)=""/251, 0x41100, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0xffffffff, 0x7}, 0x10, r3, r4, 0x1, &(0x7f0000000ac0)=[r5, r6, r7, r8, r9], &(0x7f0000000b00)=[{0x1, 0x5, 0x0, 0x1}], 0x10, 0x11}, 0x94) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpeername(r14, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="180000002f0001002bbd7000ffdbdf250800e900", @ANYRES32=0x0, @ANYBLOB="dc115abd1958865fa05963948a87cc0597929de5daf24a5c148d240ccbb1e7bca58e533a5f89a248d404c9535bce590405256a39f953770ffa675d94d554407695e0572cced0bc7b8acd97f1983b0477d1276ef93cb2adc129974962ca"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) getpid() 2m49.859896782s ago: executing program 1 (id=1828): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x88060a872c0a00e3, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$kcm(0x29, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1) 2m34.834565786s ago: executing program 41 (id=1828): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x88060a872c0a00e3, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$kcm(0x29, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1) 11.090776577s ago: executing program 9 (id=2330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140b, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffffa1, 0x3, 0x8, 0x8, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x34, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4844}, 0x40c0080) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r6 = socket(0x1d, 0x2, 0x6) r7 = socket(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x784, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x114, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, "a1cc6e7c4a963c50988c601e61c77c6be844cc35872ac8fee3372d8188d1a22bfb0d5eed3c69195fa3e8b774650a2523865e3ef58f4f0c4e"}, @NL80211_BAND_2GHZ={0xaf, 0x0, "46d1e4e9e5a98a29c1c3f221a93f26ce03813d6c2e73ab5f5f24b76a7914e67302e017946c9d304dcfd16e967d182d96eacb03872b5afe05080768601c0dfcc2621ed2b5b4bd52b65812bb2be3cea886b907533a1a2d993ec801d8ce941677cc7b081d5e5a08a7219b03660ba88b772e021a9f8415dfcfe89f5572d9cea39022b7e223088f3565adb22717a1c718a52d7e0e011e3f57f9dfbffe83b00aca58fa14fb314cfd39521bd02c75"}, @NL80211_BAND_2GHZ={0x22, 0x0, "5d58b9426b5ea2f5c663be137a10be54dc7c123fc35a2c1cbd0d4057e8d3"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x278, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5a, 0x2, "9fea6345e0d937cdd7393c82d6054a4b0ee6d12d49dfe6622cc4b1f83015e60447e64edf679201b5020eeb2c292c3d4cf08319bfe6741ab552a9f39aa68455d8b610da389e1d5162a1b8268d0791211aadb24c7f8a15"}, @NL80211_BAND_60GHZ={0xd1, 0x2, "23a47993a215c63a474bc7b8cbc32afe749f41852ecf00f294adfbff8e51b8b971faca9bc8b235c656f29fff2680c83b6490b3aaded0f088abe2bb7beab696eb0de950215755f8d2ac931a3977b84f3df117b76f5c88796187cd380b02cdc4569f250888f95f273964c82d1d6339685d03e05d288b2dc3cbbe96d3ddd0c65a5e556a1838fa33395165dd140d543b4ec4c3af6faa5af615957b5f2dce13d89cf60add7e82a76b4476e43a2d4f2c95ca835aa26dc91a3181e928767b1aaaa4b79ad3bcaed7c72431626afadfa7e9"}, @NL80211_BAND_60GHZ={0x3d, 0x2, "4004980b1c4971f3f2f7594140539e61694c686a5fc959adbb81c1263d31e3d4ed65162f3bff1b883aa76deeadb7cf8f0552db33d4512d40cb"}, @NL80211_BAND_60GHZ={0x40, 0x2, "031c7b59892c446d6f4e170ab8b94d81eebbecc1632b9eda7fdfe873fb43e333bdbdbd72f15b945974dd6c54f3739bc4b56b1458e4d7fcaec2d31057"}, @NL80211_BAND_2GHZ={0xc2, 0x0, "b7d46d2569965f1dc1a2124e42f91f20cf79957623e9eb0bc1b78a160df837c3b3dc2ecfc01dcf80587e67019bcce136f720443b98399ff13b2acf0280f06d7f43a3beb08067f8b492691a1dac6205e1842999a5b7334150d7a30e01a4bc0595236f83e9a362492e6d6cedc36219a1f17924fcdae43d72ad66a8dd09b6a3e924f5ec673118895737612b35dcb4bf049dfe17131bdb9e4e6f05361d9c6d705b6eaaa4513dbb6f7b93a3fe7fb5ab933973d8c95c0f1537e86073e3f0c5b301"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x3ac, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, "1c1c632b1e414b03c939f1bf4522715c0236e2e68bcdde3e06814aa0b88fd289db0da2c7380b74ce97aa9079e6bc159692e1fb05bddf621d61d76feccc0c8819e924776ab2705dd47e0eb571314f2ae0eba187ee837f4eefd06c2a241fe97a5c7a70fc11d8940076e9a284c25f1df60121b9cb924f76c006e7a9f01d54b589a8d115dcebd011c4d43c756a449aa16f6c"}, @NL80211_BAND_5GHZ={0xd5, 0x1, "616afd8a2072f03e441d9cfaad27ac44fef54aa8e7b1d17fac67d5c9f1a4c0412d1e3defba71b81a4274c0063273cedbe4572e3ecc0f2d96ab72b0eff88c236a5e9313ac8e7b086c6248a12d2879ebf203daee1a3577e8bfa8296d81d958185d54a55ab28585915192042b7ec38162d8e2c21d86727792e078370d2ee6a1655e45e30ee58362b2381acb9e438a8047f41a47a8654aa34d731093b0193f859b26708bfdd3aaab02206383844098cb94c3313d5135299d2c9877ac4cff5cb36ecfebb65eaa5322e17f663499a5ef09dc3f6b"}, @NL80211_BAND_60GHZ={0xa7, 0x2, "ffd1ed58bd532fce965172674537de363d8a4bf495559047ba8b18ebbea59ee027c6e0fc984eb9a68fc9994261de01a3b762127f2fe8065484a1db0074ae0a5efb00fba8b308a65e70f8da231a69058151d82bced765bd85f7384d637888f410a9556c44c38723e14e1f8716debe3408e128158dce9c5b9105ef882cb864c1bc58440556a3d1e47e8016735dd7bd98c1172c141730e4f3f909d778a13497c2f73eb83b"}, @NL80211_BAND_6GHZ={0x8b, 0x3, "cdce294f9ffbcfca42a46ceae2a6a5025d5cf62ac121b1223e50e93ab0fadcb69ebf98e621ba1fe1170f1265c5d2bf0ffe39e70ce8e293629446744af49ae631af5645cee9612d9a2894c9b02b7af5b9d2b5f04f6a994553db686b7b8b7ad6ba7d71909d9cc3947588adfbfa848c3b4264e81df7be1d9a4cd31d2cf09a126fa9d8ecf05baa71ab"}, @NL80211_BAND_5GHZ={0x7, 0x1, "002903"}, @NL80211_BAND_6GHZ={0x13, 0x3, "50cd984eb4061d6c85a27471472a98"}, @NL80211_BAND_2GHZ={0x70, 0x0, "a5c4e03a5fe6e27da7dcc8227752f9e59a69b43446fd20f65395dcaa9a51278121af5735a6225bfc802258d5774e0abb9903002df370ec134d2b54000176e0ff04ca7e297d75601c45898f186e7e02dd08d4a535272814685ca650dc3ab3784215a903434fdefb0cf65fcd92"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "06110495700985a5c98e136be07e11b49bede0908cd9ce5e0a79c70a8591ecbdde3013b459ec6d9279332667bfc437cb5772c8f4cdddb8467b41a6d136c2b05291d93a9de19b74b11cd15f1e79abf5fcd26ef10226d6db41e936a50938c73a8020b2abcd62bbc7a2c03dfdd0585dc5bb2ed5a1e72921"}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}]}, 0x784}, 0x1, 0x0, 0x0, 0x8}, 0x84) ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) r8 = syz_open_procfs(0x0, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r8, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 10.777338841s ago: executing program 7 (id=2332): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@delqdisc={0x124, 0x25, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {0xfff2, 0x5}, {0x5, 0x9}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9f, 0x7f, 0x3, 0x0, 0x2, 0x5, 0x2}}, {0x8, 0x2, [0x2, 0x4]}}, {{0x1c, 0x1, {0x1, 0x8, 0x9, 0x3, 0x1, 0x5, 0xfffffffa, 0x7}}, {0x12, 0x2, [0x1, 0xca4, 0x2, 0x200, 0x1, 0x5, 0x9]}}, {{0x1c, 0x1, {0x10, 0x3, 0x5, 0x6, 0x2, 0x2b2, 0x7, 0x7}}, {0x12, 0x2, [0x2, 0x8, 0x8, 0x7, 0x676, 0x1, 0x0]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1ff}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x8001}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1b91}]}}, @TCA_RATE={0x6, 0x5, {0xf4, 0x63}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd8, 0x3, 0x3, 0xce69, 0x1, 0x2, 0x4, 0x3}}, {0xa, 0x2, [0x107, 0x2, 0x4]}}]}]}, 0x124}}, 0x4008084) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x13, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x10000030, 0x8004, 0xfffffffd, 0x6, 0x10000, 0xfffffe0000000004, 0xfa19, 0xc65}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r2, 0x0, 0x0, 0x20000044) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0884123, &(0x7f0000000380)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) connect$netrom(r3, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r8 = accept4(r5, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x8, 0x4) shutdown(r5, 0x0) 10.179239127s ago: executing program 3 (id=2333): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv_slave_0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) 9.485368694s ago: executing program 0 (id=2335): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x28, 0x3, 0x7}}, 0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x6, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000200)) 9.367750815s ago: executing program 7 (id=2336): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x200040b4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x9) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x3ff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000bd6311b60627ee000000000000000b73eaacd351817de39500a5050000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 9.282301714s ago: executing program 9 (id=2338): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x149a82, 0x44) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r4, 0x36, 0x1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xdddd0000, 0x1}}, "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", "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"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) capset(&(0x7f0000000000)={0x19980330}, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 8.134366333s ago: executing program 7 (id=2339): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0xfffffffffffffe72) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'bond0\x00'}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x0, 0x5001) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 8.051909023s ago: executing program 0 (id=2340): syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x4008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec010000500712919c05f6ade61920eb1cbdff4c572286273212f21837a4a61beaa21ac2d974f976a3fb80afc2e985f943a827d3f454ebae7cc4bcd79190ee342ed354206e3f41736a191c15e5bdcf24e74781179ebf94e5e0581a8dfcc9b2094adf242bb6a261133f5906870a9fa83d06f377c8f696308e7bf14c13b9ef5c016990602133fd", @ANYRES16=r2, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a"], 0x7c}}, 0x40004) syz_emit_ethernet(0x36, &(0x7f0000002540)=ANY=[@ANYBLOB="aaaaaa55861a22e5ad77d26e2fcb3884000f06907864010101ac7c1c6e3a29043a7caada1b8d06444c7268cf4f0c53e7cf43fbd4aea85a2f4a5c495cbc7b30b06841a41db673a3eb9758cadfa11e921251936405ee9f33e4f6e7c76c74ec61406bff9ae8fa0cebd456fe8134d9106a55d436813b75429b9831c8e92eb49f8c436b09525affc7786c2201e0f831dfe39c4ea1e9a90a0910823166c1781ef01faee2b4c3faa62686b1caad216d3e64ace054f410a88a1c3b3b82ef7d62cc16cf5aa71e4e59c61456e7220696689e4953d42e20fb153451f1296570d70b3ae32507b6506b1a3f75a1baefab31c8be8e88c217c2dc13", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="5c02ffff90780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200ec90781000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000280), 0x4b3, 0x20004010) r9 = socket$key(0xf, 0x3, 0x2) recvmmsg(r9, &(0x7f0000002300)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long}, 0xffffffffffffff88, &(0x7f0000000280)=[{&(0x7f0000002440)=""/253, 0xfd}, {&(0x7f0000000180)}, {&(0x7f0000000780)=""/177, 0xb1}], 0x3, &(0x7f0000000300)=""/20, 0x14}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/169, 0xa9}], 0x1}, 0x101}, {{&(0x7f0000000bc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000d40)=""/144, 0x90}, {&(0x7f0000000480)=""/98, 0x62}], 0x3, &(0x7f0000000ec0)=""/132, 0x84}, 0x5}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/24, 0x18}, {&(0x7f0000000fc0)=""/167, 0xa7}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000010c0)}], 0x4}, 0x3}, {{&(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)=""/4096, 0x346}], 0x1, &(0x7f0000002200)=""/242, 0xf2}, 0x5}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 8.022131965s ago: executing program 3 (id=2341): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000100)="b9ff0331fcc0750aa4bc8df0f3e78b0000e2ff002b105ce9000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ff"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb08001e006907000008000700ac1e010108000b00ffffffff0800", @ANYRES8=r1], 0x60}}, 0x44000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x400a0c1}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) 7.32128198s ago: executing program 9 (id=2342): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd48}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) fchdir(r3) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) lseek(r5, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0000040000000000000000000000000000000000baf4a4bb04a7ca9f4a57400db99fa827b88179b6fd6b5c9306832e85ed3a34b1363e5b4bd6c4c13091cddcd57e35de98969aa7d0e9100400379bb8dd45554de3fd1261e4d949521906a89870a99d7bf7de9e513aa04be22ecb5978", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r7}, 0x38) 6.884187352s ago: executing program 5 (id=2343): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfff9}, 0x7, 0x6, 0x4, 0x1200, r4, 0xffffffffffffffff, 0x9}) sched_setscheduler(r4, 0x3, &(0x7f0000000100)=0x9) 6.832021575s ago: executing program 0 (id=2344): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, 0x0) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000680)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r1, 0x0}]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 6.43099308s ago: executing program 9 (id=2345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000100)={0x3f, 0x2}) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400080, 0x22) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000100)={0x3f, 0x2}) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400080, 0x22) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) 6.206343385s ago: executing program 5 (id=2346): socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x804) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) (fail_nth: 1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') 5.691833848s ago: executing program 5 (id=2347): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x14, 0x1, 0x0, 0x1, 0x75b, 0x8, 0x10000, 0x1}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1b, 0x2, 0x4}) (async) sendmmsg$inet6(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 5.612071461s ago: executing program 0 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x1, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x5}}, 0x80, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000001) bind$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e) 4.979425271s ago: executing program 9 (id=2349): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x40000009, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0xfffffe46, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x38}}, 0x2) write$FUSE_INIT(r2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) getdents64(r8, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x8c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x14) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 4.596032598s ago: executing program 5 (id=2350): socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x633a, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.925561336s ago: executing program 5 (id=2351): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(0xffffffffffffffff, 0x0, 0xffffffffffffffc7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0x38) (fail_nth: 1) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 3.260133373s ago: executing program 0 (id=2352): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000340)) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x8000000) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) close(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$addseals(r0, 0x409, 0xc) 3.153953857s ago: executing program 3 (id=2353): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x171000, 0x80) connect$unix(r1, &(0x7f0000001240)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x81, 'syz0\x00'}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) (fail_nth: 1) 3.153546993s ago: executing program 7 (id=2354): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x200) syz_usb_disconnect(r0) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) 2.735848812s ago: executing program 9 (id=2355): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x200) syz_usb_disconnect(r0) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 2.228033213s ago: executing program 3 (id=2356): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) connect$x25(r1, &(0x7f00000004c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x8002, 0x6, 0x8000001}}, 0x50) connect$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r7, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.594542208s ago: executing program 7 (id=2357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000001baaaaaaaaaabbaaaaaaaaaabb080045090077972f4d17e3ea7b78ac1e0101e00000010900000000000000"], 0x2e) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3940400a}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f727400000000050005000200000005000100070000000000000000000000000000002855b9c185ee74d061dd25358499cc1838"], 0x58}}, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 1.33652615s ago: executing program 3 (id=2358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000001baaaaaaaaaabbaaaaaaaaaabb080045090077972f4d17e3ea7b78ac1e0101e00000010900000000000000"], 0x2e) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3940400a}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f727400000000050005000200000005000100070000000000000000000000000000002855b9c185ee74d061dd25358499cc18"], 0x58}}, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x4080) chdir(&(0x7f0000000100)='./file0\x00') 1.151409486s ago: executing program 5 (id=2359): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000136725c8d6ddcb49ff30f6c417cb1109ed1ab583eb0404cfcf013cbc03cbb1e1d6f662fd4c1d2861c13da26de7d497a6d86406dee47a4ef78f5db2076f7a0ffe37fac06105a91c04e3dae8aa8da05a7f56878b3c8d659e6933812b4bde0a460af9c4d854274b11a745b2bbdd86b5b1e9124373b9d21a656bea504f7b9d6c74231b29e7d7d1e9e210707720e62ada7e2f1340874101339703cfa07df92fcfe77b94fad3c105ad0ca1ffde22d6558b6fbfa8da7a23f364a9a1b9adbe120978"], 0x50) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x1) pipe(0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/79, 0x4f, 0x7f) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 557.122154ms ago: executing program 3 (id=2360): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x200040b4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x9) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x3ff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000bd6311b60627ee000000000000000b73eaacd351817de39500a5050000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 146.829407ms ago: executing program 7 (id=2361): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000014000180050002"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 0s ago: executing program 0 (id=2362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x9, 0x1, 0x7, 0x4, 0xccb, 0x8, 0xab, 0xd, 0x100, 0xffffffff, 0x1, 0x5, 0x800001, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x1000, 0x20001e58, 0x115, 0x8, 0x3c, 0xa, 0xc, 0x4, 0xd]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x84}}, 0x10) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0x0, 0x1ff, 0x81, r3, 0x0, &(0x7f0000000140)={0xa2093d, 0x0, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) kernel console output (not intermixed with test programs): new full-speed USB device number 23 using dummy_hcd [ 663.502267][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.511998][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 663.527191][ T5875] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 663.556640][ T5875] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 663.581532][ T5875] usb 6-1: Manufacturer: syz [ 663.595827][ T5875] usb 6-1: config 0 descriptor?? [ 663.623151][ T5869] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.633753][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 663.650253][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.661001][ T5869] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 663.683834][ T5869] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 663.711574][ T5869] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 663.735364][ T5869] usb 10-1: Manufacturer: syz [ 663.762251][ T5869] usb 10-1: config 0 descriptor?? [ 663.831751][ T43] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 664.153220][T15077] siw: device registration error -23 [ 664.280691][ T5875] rc_core: IR keymap rc-hauppauge not found [ 664.294684][ T5875] Registered IR keymap rc-empty [ 664.299689][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.321566][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.342319][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 664.357260][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54 [ 664.369957][ T43] usb 8-1: unable to get BOS descriptor or descriptor too short [ 664.392060][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.410080][ T43] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.421872][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.442250][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.459675][ T30] audit: type=1400 audit(1761186876.916:1265): avc: denied { ioctl } for pid=15083 comm="syz.9.1994" path="socket:[55489]" dev="sockfs" ino=55489 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 664.489582][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.496805][ T43] usb 8-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.512162][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.541555][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.561637][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.672761][ T43] usb 8-1: config 1 interface 0 has no altsetting 0 [ 664.683500][ T5869] rc_core: IR keymap rc-hauppauge not found [ 664.688498][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.689402][ T5869] Registered IR keymap rc-empty [ 664.689487][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 664.729202][ T43] usb 8-1: string descriptor 0 read error: -22 [ 664.742408][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.820429][ T43] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.850786][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.862157][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 664.863129][ T5875] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 664.896507][ T5869] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc1 [ 664.911149][ T43] usb 8-1: bad CDC descriptors [ 664.942892][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc1/input55 [ 665.001789][ T5875] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 665.016779][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.061949][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.091124][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.108365][ T5875] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 665.117230][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.131688][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.137362][ T5875] usb 6-1: USB disconnect, device number 31 [ 665.172761][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.251804][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.287999][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.366104][ T43] IPVS: starting estimator thread 0... [ 665.384860][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.441794][ T5869] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 665.483583][ T5869] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 665.504165][T15101] IPVS: using max 75 ests per chain, 180000 per kthread [ 665.526059][ T5869] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 665.578093][ T5869] usb 10-1: USB disconnect, device number 23 [ 665.942646][ T43] usb 8-1: USB disconnect, device number 4 [ 666.231870][ T5869] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 666.391609][ T5869] usb 10-1: Using ep0 maxpacket: 8 [ 666.530585][ T5869] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 666.563866][ T5869] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 666.654088][ T5869] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 666.841504][ T5869] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 666.873645][ T5869] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 666.884012][ T5869] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.897653][ T5869] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 666.907238][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.981912][ T5869] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 667.298979][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2005'. [ 667.421486][ T5869] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 667.493980][ T30] audit: type=1400 audit(1761186879.946:1266): avc: denied { map } for pid=15152 comm="syz.3.2006" path="socket:[56446]" dev="sockfs" ino=56446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 667.590844][ T30] audit: type=1400 audit(1761186879.946:1267): avc: denied { read accept } for pid=15152 comm="syz.3.2006" path="socket:[56446]" dev="sockfs" ino=56446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 667.630313][ T5869] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.662035][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 667.726471][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.751488][ T5869] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 667.785655][ T5869] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.801857][ T5869] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.830178][ T5869] usb 8-1: Manufacturer: syz [ 667.856579][ T5869] usb 8-1: config 0 descriptor?? [ 667.894968][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 668.164320][ T5869] rc_core: IR keymap rc-hauppauge not found [ 668.189072][ T5869] Registered IR keymap rc-empty [ 668.233925][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 668.271562][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 668.382332][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 668.431768][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input56 [ 668.966939][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.012969][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.437319][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.457202][ T5875] usb 10-1: USB disconnect, device number 24 [ 669.533249][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.571548][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.661805][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.711713][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.751706][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.821685][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 669.900883][ T5869] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 670.167445][ T5869] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 670.209416][ T5869] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 670.463069][T15207] vlan0: entered promiscuous mode [ 670.473580][T15207] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 670.611545][ T30] audit: type=1400 audit(1761186883.036:1268): avc: denied { read } for pid=15197 comm="syz.5.2012" lport=35453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 670.967785][ T5869] usb 8-1: USB disconnect, device number 5 [ 671.927738][T15231] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 673.069402][T15254] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 673.571558][ T5853] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 673.851476][ T5853] usb 6-1: Using ep0 maxpacket: 8 [ 673.870015][ T5853] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 673.913599][ T5853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.959907][ T5853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 674.049233][ T5853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 674.131480][ T5853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 674.213831][ T5853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.244244][ T5853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 674.277171][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.394575][ T5853] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 674.471025][ T30] audit: type=1400 audit(1761186886.916:1269): avc: denied { write } for pid=15268 comm="syz.3.2026" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 674.518303][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'. [ 674.649483][T12755] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 674.812900][T12755] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.831521][T12755] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 674.855570][T12755] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 674.866246][T12755] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 674.889742][T12755] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 674.901014][T12755] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 674.910988][T12755] usb 8-1: Manufacturer: syz [ 674.926256][T12755] usb 8-1: config 0 descriptor?? [ 674.955482][ T5875] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 675.115450][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 675.135211][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.168222][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.186235][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 675.207142][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 675.223356][ T5875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 675.231376][ T5875] usb 1-1: Manufacturer: syz [ 675.246627][ T5875] usb 1-1: config 0 descriptor?? [ 675.281590][T12755] rc_core: IR keymap rc-hauppauge not found [ 675.307041][T12755] Registered IR keymap rc-empty [ 675.324906][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.362937][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.394367][T12755] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 675.418317][T12755] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input57 [ 675.456440][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.470639][ T5875] usb 1-1: USB disconnect, device number 36 [ 675.524106][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.554130][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.574344][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.601526][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.621949][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.645593][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.674052][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.692867][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.711902][T12755] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 675.745168][T12755] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 675.751498][ T43] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 675.754397][T12755] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 675.775555][T12755] usb 8-1: USB disconnect, device number 6 [ 675.918521][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 675.929220][ T43] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 675.937491][ T43] usb 4-1: config 95 has no interface number 0 [ 675.943945][ T43] usb 4-1: config 95 interface 1 has no altsetting 0 [ 675.952853][ T43] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 675.962168][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.970162][ T43] usb 4-1: Product: syz [ 675.974543][ T43] usb 4-1: Manufacturer: syz [ 675.979138][ T43] usb 4-1: SerialNumber: syz [ 676.149007][T15321] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 676.520157][T12626] usb 6-1: USB disconnect, device number 32 [ 677.084464][T15331] FAULT_INJECTION: forcing a failure. [ 677.084464][T15331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.117714][T15331] CPU: 0 UID: 0 PID: 15331 Comm: syz.0.2035 Not tainted syzkaller #0 PREEMPT(full) [ 677.117740][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 677.117751][T15331] Call Trace: [ 677.117757][T15331] [ 677.117764][T15331] dump_stack_lvl+0x16c/0x1f0 [ 677.117793][T15331] should_fail_ex+0x512/0x640 [ 677.117812][T15331] _copy_from_user+0x2e/0xd0 [ 677.117826][T15331] copy_msghdr_from_user+0x98/0x160 [ 677.117850][T15331] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 677.117882][T15331] ___sys_sendmsg+0xfe/0x1d0 [ 677.117903][T15331] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.117918][T15331] ? __lock_acquire+0x622/0x1c90 [ 677.117951][T15331] __sys_sendmsg+0x16d/0x220 [ 677.117970][T15331] ? __pfx___sys_sendmsg+0x10/0x10 [ 677.118005][T15331] do_syscall_64+0xcd/0xfa0 [ 677.118030][T15331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.118046][T15331] RIP: 0033:0x7fab42b8efc9 [ 677.118059][T15331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.118070][T15331] RSP: 002b:00007fab43aca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.118081][T15331] RAX: ffffffffffffffda RBX: 00007fab42de5fa0 RCX: 00007fab42b8efc9 [ 677.118088][T15331] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 677.118095][T15331] RBP: 00007fab43aca090 R08: 0000000000000000 R09: 0000000000000000 [ 677.118103][T15331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.118109][T15331] R13: 00007fab42de6038 R14: 00007fab42de5fa0 R15: 00007ffd53a65b08 [ 677.118128][T15331] [ 677.292436][T15332] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 677.744746][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 677.757277][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 678.133327][T15344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2039'. [ 678.477640][ T43] usb 4-1: USB disconnect, device number 36 [ 678.963442][T15356] siw: device registration error -23 [ 679.095964][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.698044][T15366] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2043'. [ 679.707053][T15366] netlink: 'syz.3.2043': attribute type 6 has an invalid length. [ 679.716984][T15366] netlink: 'syz.3.2043': attribute type 5 has an invalid length. [ 679.745031][T15366] netlink: 'syz.3.2043': attribute type 4 has an invalid length. [ 680.038931][ T43] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 680.073783][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2045'. [ 680.239953][T15372] geneve2: entered allmulticast mode [ 680.349133][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.363435][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 680.375071][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 680.385593][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 680.428796][T15378] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 680.811038][ T43] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 680.847552][ T43] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 680.902654][ T30] audit: type=1400 audit(1761186893.336:1270): avc: denied { create } for pid=15381 comm="syz.0.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 681.027977][ T30] audit: type=1400 audit(1761186893.336:1271): avc: denied { write } for pid=15381 comm="syz.0.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 681.038230][ T43] usb 8-1: Manufacturer: syz [ 681.080835][ T30] audit: type=1400 audit(1761186893.336:1272): avc: denied { ioctl } for pid=15381 comm="syz.0.2048" path="socket:[55955]" dev="sockfs" ino=55955 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 681.103027][ T43] usb 8-1: config 0 descriptor?? [ 681.627845][ T30] audit: type=1400 audit(1761186893.336:1273): avc: denied { read } for pid=15381 comm="syz.0.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 681.722012][ T43] rc_core: IR keymap rc-hauppauge not found [ 681.751257][ T43] Registered IR keymap rc-empty [ 681.770974][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 681.876129][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 681.920840][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 682.048267][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input58 [ 682.092031][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.111956][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.131649][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.181133][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.229542][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.273766][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.304919][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.335377][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.423282][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.531232][ T43] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 682.791725][ T30] audit: type=1400 audit(1761186895.066:1274): avc: denied { mount } for pid=15413 comm="syz.9.2053" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 682.828715][ T43] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 682.839113][ T43] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 682.864722][ T43] usb 8-1: USB disconnect, device number 7 [ 683.042328][ T9] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 683.323327][T12511] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 683.373757][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 683.407750][ T9] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 683.435514][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.448018][ T9] usb 10-1: config 0 has no interface number 0 [ 683.464786][ T9] usb 10-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 683.479371][ T9] usb 10-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.492985][T12511] usb 1-1: Using ep0 maxpacket: 32 [ 683.507467][ T9] usb 10-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.528553][ T9] usb 10-1: config 0 interface 196 has no altsetting 0 [ 683.531874][T12511] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 683.547117][T12511] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.564716][T12511] usb 1-1: config 0 has no interface number 0 [ 683.574703][T12511] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 683.586698][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 683.602145][T12511] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.602321][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 683.630647][T12511] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.656149][T12511] usb 1-1: config 0 interface 196 has no altsetting 0 [ 683.659933][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.684955][T12511] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 683.694424][T12511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.706616][T12511] usb 1-1: Product: syz [ 683.716699][ T9] usb 10-1: Product: syz [ 683.726722][T12511] usb 1-1: Manufacturer: syz [ 683.732026][ T9] usb 10-1: Manufacturer: syz [ 683.736707][ T9] usb 10-1: SerialNumber: syz [ 683.741857][T12511] usb 1-1: SerialNumber: syz [ 683.749885][ T43] usb 8-1: device descriptor read/64, error -71 [ 683.750317][T12511] usb 1-1: config 0 descriptor?? [ 683.774064][ T9] usb 10-1: config 0 descriptor?? [ 684.001910][ T43] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 684.026876][ T9] ipheth 10-1:0.196: Unable to find endpoints [ 684.518612][ T43] usb 8-1: device descriptor read/64, error -71 [ 684.529065][ T9] usb 10-1: USB disconnect, device number 25 [ 684.709747][ T43] usb usb8-port1: attempt power cycle [ 684.926881][T12511] ipheth 1-1:0.196: Unable to find endpoints [ 684.943266][T12511] usb 1-1: USB disconnect, device number 37 [ 684.994345][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 685.072013][ T43] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 685.104458][ T43] usb 8-1: device descriptor read/8, error -71 [ 685.152827][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 685.163625][ T9] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 685.182110][ T9] usb 6-1: config 0 has no interface number 0 [ 685.188307][ T9] usb 6-1: config 0 interface 196 has no altsetting 0 [ 685.233572][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 685.255741][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.271589][ T9] usb 6-1: Product: syz [ 685.306204][ T9] usb 6-1: Manufacturer: syz [ 685.317779][ T9] usb 6-1: SerialNumber: syz [ 685.324387][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.330845][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.342730][ T9] usb 6-1: config 0 descriptor?? [ 685.422823][T15439] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 685.800903][ T43] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 685.829078][T15428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.839016][T15428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.850424][T15428] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.852503][ T43] usb 8-1: device descriptor read/8, error -71 [ 685.993294][T15433] siw: device registration error -23 [ 686.085672][ T43] usb usb8-port1: unable to enumerate USB device [ 686.175108][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2057'. [ 687.023489][T15451] siw: device registration error -23 [ 687.521662][ T5875] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 687.812270][T12511] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 687.873579][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.023356][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.035816][ T5875] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 688.648763][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.666078][ T5875] usb 8-1: config 0 descriptor?? [ 688.728723][T12511] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 688.761514][T12511] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 688.819247][T12511] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 688.851940][T12511] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.982492][ T9] ipheth 6-1:0.196: Unable to find endpoints [ 689.080081][T15460] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 689.096615][ T9] usb 6-1: USB disconnect, device number 33 [ 689.137157][ T5875] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 689.154159][T12511] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 689.181884][ T5875] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 689.333264][ T5875] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 689.438567][ T9] usb 10-1: USB disconnect, device number 26 [ 689.595491][T15491] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2071'. [ 689.941809][T15458] FAULT_INJECTION: forcing a failure. [ 689.941809][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 690.104515][T15458] CPU: 1 UID: 0 PID: 15458 Comm: syz.7.2064 Not tainted syzkaller #0 PREEMPT(full) [ 690.104542][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 690.104552][T15458] Call Trace: [ 690.104559][T15458] [ 690.104566][T15458] dump_stack_lvl+0x16c/0x1f0 [ 690.104596][T15458] should_fail_ex+0x512/0x640 [ 690.104615][T15458] ? fs_reclaim_acquire+0xae/0x150 [ 690.104636][T15458] should_failslab+0xc2/0x120 [ 690.104656][T15458] __kmalloc_noprof+0xdd/0x880 [ 690.104680][T15458] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 690.104707][T15458] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 690.104725][T15458] tomoyo_realpath_from_path+0xc2/0x6e0 [ 690.104746][T15458] ? tomoyo_profile+0x47/0x60 [ 690.104771][T15458] tomoyo_path_number_perm+0x245/0x580 [ 690.104797][T15458] ? tomoyo_path_number_perm+0x237/0x580 [ 690.104826][T15458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 690.104862][T15458] ? find_held_lock+0x2b/0x80 [ 690.104905][T15458] ? find_held_lock+0x2b/0x80 [ 690.104926][T15458] ? hook_file_ioctl_common+0x145/0x410 [ 690.104955][T15458] ? __fget_files+0x20e/0x3c0 [ 690.104977][T15458] security_file_ioctl+0x9b/0x240 [ 690.104998][T15458] __x64_sys_ioctl+0xb7/0x210 [ 690.105023][T15458] do_syscall_64+0xcd/0xfa0 [ 690.105051][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.105069][T15458] RIP: 0033:0x7eff5ef8efc9 [ 690.105083][T15458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.105100][T15458] RSP: 002b:00007eff5feb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.105118][T15458] RAX: ffffffffffffffda RBX: 00007eff5f1e5fa0 RCX: 00007eff5ef8efc9 [ 690.105129][T15458] RDX: 0000200000000700 RSI: 0000000000000720 RDI: 0000000000000004 [ 690.105140][T15458] RBP: 00007eff5feb4090 R08: 0000000000000000 R09: 0000000000000000 [ 690.105149][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.105159][T15458] R13: 00007eff5f1e6038 R14: 00007eff5f1e5fa0 R15: 00007ffc4324ad38 [ 690.105184][T15458] [ 690.105192][T15458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 690.324064][ T5875] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 690.388680][ T5875] usb 8-1: USB disconnect, device number 12 [ 690.589033][T15515] netlink: 'syz.9.2075': attribute type 1 has an invalid length. [ 690.692667][T15515] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.778259][T15516] bond3: (slave geneve2): making interface the new active one [ 690.951858][T15516] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 692.041507][ T5869] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 692.211492][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 692.300142][ T5869] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 692.346563][ T5869] usb 4-1: config 0 has no interface number 0 [ 692.405652][ T5869] usb 4-1: config 0 interface 196 has no altsetting 0 [ 692.454170][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 692.565936][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.571497][T12511] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 692.595899][ T5869] usb 4-1: Product: syz [ 692.607551][ T5869] usb 4-1: Manufacturer: syz [ 692.626347][ T5869] usb 4-1: SerialNumber: syz [ 692.651110][ T5869] usb 4-1: config 0 descriptor?? [ 692.777379][T12511] usb 8-1: Using ep0 maxpacket: 32 [ 692.791538][ T5875] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 692.799273][T12511] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 692.819018][T12511] usb 8-1: config 0 has no interface number 0 [ 692.859730][T12511] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.879910][T15544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.889073][T12511] usb 8-1: config 0 interface 85 has no altsetting 0 [ 692.911034][T15544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.916008][T12511] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 692.953788][T15544] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.965016][T12511] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.977698][ T5875] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.991099][ T5875] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 693.012828][T12511] usb 8-1: Product: syz [ 693.017087][T12511] usb 8-1: Manufacturer: syz [ 693.022042][ T5875] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 693.034916][T12511] usb 8-1: SerialNumber: syz [ 693.050454][T12511] usb 8-1: config 0 descriptor?? [ 693.056328][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.077245][T12511] appletouch 8-1:0.85: Could not find int-in endpoint [ 693.091710][T12511] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 693.111319][ T5875] usb 10-1: config 0 descriptor?? [ 693.137224][T12511] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 693.155895][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 693.643069][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2085'. [ 693.863843][T15597] siw: device registration error -23 [ 693.938005][T15596] geneve2: entered allmulticast mode [ 694.698905][ T5869] ipheth 4-1:0.196: Unable to find endpoints [ 694.754088][ T5869] usb 4-1: USB disconnect, device number 37 [ 695.564809][ T43] usb 8-1: USB disconnect, device number 13 [ 696.059291][T15634] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2088'. [ 696.112026][ T9] usb 10-1: USB disconnect, device number 27 [ 696.888440][T15634] geneve2: entered allmulticast mode [ 697.284555][ T30] audit: type=1400 audit(1761186909.746:1275): avc: denied { lock } for pid=15664 comm="syz.9.2095" path="socket:[57035]" dev="sockfs" ino=57035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 698.372664][T15679] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 699.503127][T15688] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 700.121664][T15706] FAULT_INJECTION: forcing a failure. [ 700.121664][T15706] name failslab, interval 1, probability 0, space 0, times 0 [ 700.135456][T15706] CPU: 0 UID: 0 PID: 15706 Comm: syz.3.2106 Not tainted syzkaller #0 PREEMPT(full) [ 700.135480][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 700.135490][T15706] Call Trace: [ 700.135496][T15706] [ 700.135503][T15706] dump_stack_lvl+0x16c/0x1f0 [ 700.135532][T15706] should_fail_ex+0x512/0x640 [ 700.135552][T15706] ? fs_reclaim_acquire+0xae/0x150 [ 700.135574][T15706] should_failslab+0xc2/0x120 [ 700.135594][T15706] __kmalloc_noprof+0xdd/0x880 [ 700.135618][T15706] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 700.135643][T15706] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 700.135662][T15706] tomoyo_realpath_from_path+0xc2/0x6e0 [ 700.135684][T15706] ? tomoyo_profile+0x47/0x60 [ 700.135710][T15706] tomoyo_path_number_perm+0x245/0x580 [ 700.135735][T15706] ? tomoyo_path_number_perm+0x237/0x580 [ 700.135765][T15706] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 700.135793][T15706] ? find_held_lock+0x2b/0x80 [ 700.135837][T15706] ? find_held_lock+0x2b/0x80 [ 700.135858][T15706] ? hook_file_ioctl_common+0x145/0x410 [ 700.135886][T15706] ? __fget_files+0x20e/0x3c0 [ 700.135909][T15706] security_file_ioctl+0x9b/0x240 [ 700.135930][T15706] __x64_sys_ioctl+0xb7/0x210 [ 700.135956][T15706] do_syscall_64+0xcd/0xfa0 [ 700.135989][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.136007][T15706] RIP: 0033:0x7ff35ed8efc9 [ 700.136022][T15706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.136038][T15706] RSP: 002b:00007ff35fc3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.136055][T15706] RAX: ffffffffffffffda RBX: 00007ff35efe6090 RCX: 00007ff35ed8efc9 [ 700.136065][T15706] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 700.136076][T15706] RBP: 00007ff35fc3d090 R08: 0000000000000000 R09: 0000000000000000 [ 700.136086][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.136096][T15706] R13: 00007ff35efe6128 R14: 00007ff35efe6090 R15: 00007ffc84b8fd18 [ 700.136122][T15706] [ 700.136151][T15706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 700.351640][ T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 700.381015][T15708] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2107'. [ 700.427989][T15708] geneve2: entered allmulticast mode [ 700.602834][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.649732][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.816499][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 700.902669][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.952282][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2109'. [ 701.022542][ T43] usb 1-1: config 0 descriptor?? [ 702.461288][T15737] bridge1: entered allmulticast mode [ 702.883269][ T5853] usb 1-1: USB disconnect, device number 38 [ 703.989219][T15755] vlan2: entered promiscuous mode [ 704.011519][T15755] bridge0: entered promiscuous mode [ 704.132483][T15759] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 704.642127][T15761] kAFS: unable to lookup cell '' [ 704.794809][T15768] program syz.9.2123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.271878][T11160] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 706.103048][T11160] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.116750][T11160] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 706.129273][T11160] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 706.141309][T11160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.154999][T11160] usb 4-1: config 0 descriptor?? [ 707.304091][T15796] siw: device registration error -23 [ 707.370759][T15799] siw: device registration error -23 [ 708.100771][ T24] usb 4-1: USB disconnect, device number 38 [ 708.216583][T15812] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 708.675482][T15813] FAULT_INJECTION: forcing a failure. [ 708.675482][T15813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.689122][T15813] CPU: 1 UID: 0 PID: 15813 Comm: syz.3.2135 Not tainted syzkaller #0 PREEMPT(full) [ 708.689146][T15813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 708.689157][T15813] Call Trace: [ 708.689163][T15813] [ 708.689169][T15813] dump_stack_lvl+0x16c/0x1f0 [ 708.689198][T15813] should_fail_ex+0x512/0x640 [ 708.689220][T15813] should_fail_alloc_page+0xe7/0x130 [ 708.689240][T15813] prepare_alloc_pages+0x3c2/0x610 [ 708.689262][T15813] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 708.689292][T15813] ? find_held_lock+0x2b/0x80 [ 708.689314][T15813] ? is_bpf_text_address+0x8a/0x1a0 [ 708.689333][T15813] ? bpf_ksym_find+0x127/0x1c0 [ 708.689355][T15813] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 708.689377][T15813] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.689402][T15813] ? kernel_text_address+0x8d/0x100 [ 708.689419][T15813] ? __kernel_text_address+0xd/0x40 [ 708.689447][T15813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.689469][T15813] ? policy_nodemask+0xea/0x4e0 [ 708.689489][T15813] alloc_pages_mpol+0x1fb/0x550 [ 708.689509][T15813] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 708.689534][T15813] folio_alloc_mpol_noprof+0x36/0x2f0 [ 708.689555][T15813] vma_alloc_folio_noprof+0xed/0x1e0 [ 708.689576][T15813] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 708.689603][T15813] do_pte_missing+0x2202/0x3ba0 [ 708.689625][T15813] ? find_held_lock+0x2b/0x80 [ 708.689650][T15813] __handle_mm_fault+0x1556/0x2aa0 [ 708.689679][T15813] ? __pfx___handle_mm_fault+0x10/0x10 [ 708.689703][T15813] ? lock_vma_under_rcu+0x176/0x530 [ 708.689732][T15813] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 708.689759][T15813] handle_mm_fault+0x589/0xd10 [ 708.689781][T15813] ? __pkru_allows_pkey+0x11/0xb0 [ 708.689799][T15813] do_user_addr_fault+0x60c/0x1370 [ 708.689818][T15813] ? rcu_is_watching+0x12/0xc0 [ 708.689846][T15813] exc_page_fault+0x64/0xc0 [ 708.689869][T15813] asm_exc_page_fault+0x26/0x30 [ 708.689883][T15813] RIP: 0033:0x7ff35ec5a87b [ 708.689897][T15813] Code: 00 00 00 48 8d 3d bd 38 19 00 48 89 c1 31 c0 e8 db 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d f1 38 19 00 48 89 34 24 48 8b 14 24 48 8b [ 708.689911][T15813] RSP: 002b:00007ff35fc3bfb0 EFLAGS: 00010202 [ 708.689926][T15813] RAX: 0000000000000000 RBX: 00007ff35efe6090 RCX: 0000000000000000 [ 708.689935][T15813] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000180 [ 708.689945][T15813] RBP: 00007ff35fc3d090 R08: 0000000000000000 R09: 0000000000000000 [ 708.689954][T15813] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 708.689963][T15813] R13: 00007ff35efe6128 R14: 00007ff35efe6090 R15: 00007ffc84b8fd18 [ 708.689986][T15813] [ 708.690246][T15813] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 708.861496][T11160] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 709.441924][T11160] usb 10-1: Using ep0 maxpacket: 32 [ 709.776585][T11160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.801087][T11160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.826937][T11160] usb 10-1: New USB device found, idVendor=0403, idProduct=a3f6, bcdDevice=ec.88 [ 709.846948][T11160] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.870809][T11160] usb 10-1: config 0 descriptor?? [ 709.971059][T15828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2138'. [ 710.111796][ T5875] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 710.286273][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.298656][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.309746][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.338944][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.359484][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.370719][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.381825][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.392927][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.403856][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 710.471052][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 710.531546][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 710.541504][ T5875] usb 6-1: config 0 has an invalid interface number: 203 but max is 0 [ 710.549786][ T5875] usb 6-1: config 0 has no interface number 0 [ 710.561770][ T5875] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a5e, bcdDevice=33.6d [ 710.571699][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.580597][ T5875] usb 6-1: Product: syz [ 710.591011][ T5875] usb 6-1: Manufacturer: syz [ 710.597469][ T5875] usb 6-1: SerialNumber: syz [ 710.622471][ T5875] usb 6-1: config 0 descriptor?? [ 710.662223][ T9] usb 1-1: no configurations [ 710.675290][ T9] usb 1-1: can't read configurations, error -22 [ 710.831789][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 710.853451][ T5875] usb 6-1: USB disconnect, device number 34 [ 711.013302][ T9] usb 1-1: no configurations [ 711.022573][ T7342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.033022][ T9] usb 1-1: can't read configurations, error -22 [ 711.033294][ T9] usb usb1-port1: attempt power cycle [ 711.054949][ T7342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.239251][T11160] usbhid 10-1:0.0: can't add hid device: -32 [ 711.248285][T11160] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 711.429073][ T7342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.439391][ T7342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.515035][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 711.537937][ T7342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.555076][ T9] usb 1-1: no configurations [ 711.574802][ T9] usb 1-1: can't read configurations, error -22 [ 711.634607][ T7342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.834555][ T7342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.846299][ T7342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.858247][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 712.100542][T11160] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 712.112450][ T9] usb 1-1: no configurations [ 712.117834][ T9] usb 1-1: can't read configurations, error -22 [ 712.130210][ T9] usb usb1-port1: unable to enumerate USB device [ 712.310307][T11160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.343154][T11160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 712.370749][T11160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 712.394415][T11160] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 712.413333][T11160] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 712.451991][ T7342] bridge_slave_1: left allmulticast mode [ 712.509761][T11160] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 712.528461][ T7342] bridge_slave_1: left promiscuous mode [ 712.538894][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.598706][T11160] usb 6-1: Manufacturer: syz [ 712.632979][ T7342] bridge_slave_0: left allmulticast mode [ 712.838153][ T7342] bridge_slave_0: left promiscuous mode [ 712.848925][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.867601][T11160] usb 6-1: config 0 descriptor?? [ 712.882677][T15853] siw: device registration error -23 [ 713.413563][ T5869] usb 10-1: USB disconnect, device number 28 [ 713.481561][T11160] rc_core: IR keymap rc-hauppauge not found [ 713.487548][T11160] Registered IR keymap rc-empty [ 713.492586][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.571548][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.707477][T11160] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 713.765400][T11160] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59 [ 713.786148][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.815323][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.861805][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.912051][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 714.028969][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 714.232034][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 714.261849][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 714.289326][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 714.311662][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 714.364419][T11160] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 714.484299][T11160] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 714.502924][T11160] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 714.773159][T15878] siw: device registration error -23 [ 714.890393][T11160] usb 6-1: USB disconnect, device number 35 [ 715.699538][ T5869] IPVS: starting estimator thread 0... [ 715.763031][ T30] audit: type=1400 audit(1761186928.226:1276): avc: denied { getopt } for pid=15893 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 715.782514][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.791584][T15890] IPVS: using max 75 ests per chain, 180000 per kthread [ 715.953568][T15903] __nla_validate_parse: 27 callbacks suppressed [ 715.953580][T15903] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2156'. [ 716.085242][ T7342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.127837][T11160] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 716.138119][ T7342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.185513][ T7342] bond0 (unregistering): Released all slaves [ 716.412965][T11160] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 716.459254][T11160] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 716.549188][T11160] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 716.565778][T11160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.660657][T15898] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 716.685833][T11160] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 716.951389][T11160] usb 1-1: USB disconnect, device number 43 [ 717.594446][ T7342] hsr_slave_0: left promiscuous mode [ 717.615242][ T7342] hsr_slave_1: left promiscuous mode [ 717.644664][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.177688][ T7342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.266179][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.287465][ T7342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.346789][ T7342] veth1_macvtap: left promiscuous mode [ 718.352421][ T7342] veth0_macvtap: left promiscuous mode [ 718.357989][ T7342] veth1_vlan: left promiscuous mode [ 718.363628][ T7342] veth0_vlan: left promiscuous mode [ 718.886097][T15951] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2167'. [ 720.405290][T15946] siw: device registration error -23 [ 720.424813][T15981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2169'. [ 721.172454][ T7342] team0 (unregistering): Port device team_slave_1 removed [ 721.271258][ T7342] team0 (unregistering): Port device team_slave_0 removed [ 721.502603][ T30] audit: type=1400 audit(1761186933.956:1277): avc: denied { map } for pid=15988 comm="syz.7.2171" path="socket:[58818]" dev="sockfs" ino=58818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 721.526009][ T30] audit: type=1400 audit(1761186933.956:1278): avc: denied { read accept } for pid=15988 comm="syz.7.2171" path="socket:[58818]" dev="sockfs" ino=58818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 721.876921][T15981] geneve2: entered allmulticast mode [ 723.935967][T16024] FAULT_INJECTION: forcing a failure. [ 723.935967][T16024] name failslab, interval 1, probability 0, space 0, times 0 [ 723.949092][T16024] CPU: 0 UID: 0 PID: 16024 Comm: syz.3.2178 Not tainted syzkaller #0 PREEMPT(full) [ 723.949115][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 723.949126][T16024] Call Trace: [ 723.949132][T16024] [ 723.949140][T16024] dump_stack_lvl+0x16c/0x1f0 [ 723.949169][T16024] should_fail_ex+0x512/0x640 [ 723.949189][T16024] ? fs_reclaim_acquire+0xae/0x150 [ 723.949212][T16024] should_failslab+0xc2/0x120 [ 723.949233][T16024] __kmalloc_noprof+0xdd/0x880 [ 723.949258][T16024] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 723.949284][T16024] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 723.949302][T16024] tomoyo_realpath_from_path+0xc2/0x6e0 [ 723.949325][T16024] ? tomoyo_profile+0x47/0x60 [ 723.949347][T16024] tomoyo_path_number_perm+0x245/0x580 [ 723.949367][T16024] ? tomoyo_path_number_perm+0x237/0x580 [ 723.949390][T16024] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 723.949412][T16024] ? find_held_lock+0x2b/0x80 [ 723.949449][T16024] ? find_held_lock+0x2b/0x80 [ 723.949465][T16024] ? hook_file_ioctl_common+0x145/0x410 [ 723.949488][T16024] ? __fget_files+0x20e/0x3c0 [ 723.949505][T16024] security_file_ioctl+0x9b/0x240 [ 723.949522][T16024] __x64_sys_ioctl+0xb7/0x210 [ 723.949542][T16024] do_syscall_64+0xcd/0xfa0 [ 723.949563][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.949577][T16024] RIP: 0033:0x7ff35ed8efc9 [ 723.949593][T16024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.949607][T16024] RSP: 002b:00007ff35fc1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.949621][T16024] RAX: ffffffffffffffda RBX: 00007ff35efe6180 RCX: 00007ff35ed8efc9 [ 723.949630][T16024] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000009 [ 723.949638][T16024] RBP: 00007ff35fc1c090 R08: 0000000000000000 R09: 0000000000000000 [ 723.949646][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.949654][T16024] R13: 00007ff35efe6218 R14: 00007ff35efe6180 R15: 00007ffc84b8fd18 [ 723.949676][T16024] [ 723.949957][T16024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 724.251657][ T30] audit: type=1400 audit(1761186936.386:1279): avc: denied { create } for pid=16018 comm="syz.3.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 724.393881][ T30] audit: type=1400 audit(1761186936.386:1280): avc: denied { setopt } for pid=16018 comm="syz.3.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 724.536561][ T30] audit: type=1400 audit(1761186936.806:1281): avc: denied { create } for pid=16022 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 725.233001][T16035] siw: device registration error -23 [ 725.789969][T16045] FAULT_INJECTION: forcing a failure. [ 725.789969][T16045] name failslab, interval 1, probability 0, space 0, times 0 [ 725.803132][T16045] CPU: 1 UID: 0 PID: 16045 Comm: syz.5.2183 Not tainted syzkaller #0 PREEMPT(full) [ 725.803147][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 725.803153][T16045] Call Trace: [ 725.803157][T16045] [ 725.803161][T16045] dump_stack_lvl+0x16c/0x1f0 [ 725.803180][T16045] should_fail_ex+0x512/0x640 [ 725.803193][T16045] ? fs_reclaim_acquire+0xae/0x150 [ 725.803207][T16045] should_failslab+0xc2/0x120 [ 725.803219][T16045] __kmalloc_noprof+0xdd/0x880 [ 725.803235][T16045] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 725.803251][T16045] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 725.803263][T16045] tomoyo_realpath_from_path+0xc2/0x6e0 [ 725.803276][T16045] ? tomoyo_profile+0x47/0x60 [ 725.803290][T16045] tomoyo_path_number_perm+0x245/0x580 [ 725.803306][T16045] ? tomoyo_path_number_perm+0x237/0x580 [ 725.803323][T16045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 725.803340][T16045] ? find_held_lock+0x2b/0x80 [ 725.803365][T16045] ? find_held_lock+0x2b/0x80 [ 725.803378][T16045] ? hook_file_ioctl_common+0x145/0x410 [ 725.803394][T16045] ? __fget_files+0x20e/0x3c0 [ 725.803408][T16045] security_file_ioctl+0x9b/0x240 [ 725.803426][T16045] __x64_sys_ioctl+0xb7/0x210 [ 725.803442][T16045] do_syscall_64+0xcd/0xfa0 [ 725.803458][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.803469][T16045] RIP: 0033:0x7f35f1d8efc9 [ 725.803478][T16045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.803488][T16045] RSP: 002b:00007f35f2b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.803499][T16045] RAX: ffffffffffffffda RBX: 00007f35f1fe5fa0 RCX: 00007f35f1d8efc9 [ 725.803505][T16045] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000007 [ 725.803512][T16045] RBP: 00007f35f2b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 725.803518][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.803524][T16045] R13: 00007f35f1fe6038 R14: 00007f35f1fe5fa0 R15: 00007ffe9cd17df8 [ 725.803538][T16045] [ 725.803542][T16045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.016844][ T30] audit: type=1400 audit(1761186938.476:1282): avc: denied { ioctl } for pid=16044 comm="syz.5.2183" path="socket:[58885]" dev="sockfs" ino=58885 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 726.111990][T16051] FAULT_INJECTION: forcing a failure. [ 726.111990][T16051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.131062][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.5.2185 Not tainted syzkaller #0 PREEMPT(full) [ 726.131080][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 726.131087][T16051] Call Trace: [ 726.131091][T16051] [ 726.131096][T16051] dump_stack_lvl+0x16c/0x1f0 [ 726.131115][T16051] should_fail_ex+0x512/0x640 [ 726.131130][T16051] _copy_from_user+0x2e/0xd0 [ 726.131143][T16051] copy_msghdr_from_user+0x98/0x160 [ 726.131158][T16051] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 726.131178][T16051] ___sys_sendmsg+0xfe/0x1d0 [ 726.131192][T16051] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.131203][T16051] ? __lock_acquire+0x622/0x1c90 [ 726.131235][T16051] __sys_sendmsg+0x16d/0x220 [ 726.131248][T16051] ? __pfx___sys_sendmsg+0x10/0x10 [ 726.131270][T16051] do_syscall_64+0xcd/0xfa0 [ 726.131286][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.131297][T16051] RIP: 0033:0x7f35f1d8efc9 [ 726.131306][T16051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.131317][T16051] RSP: 002b:00007f35f2b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.131327][T16051] RAX: ffffffffffffffda RBX: 00007f35f1fe5fa0 RCX: 00007f35f1d8efc9 [ 726.131334][T16051] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 726.131340][T16051] RBP: 00007f35f2b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 726.131346][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.131352][T16051] R13: 00007f35f1fe6038 R14: 00007f35f1fe5fa0 R15: 00007ffe9cd17df8 [ 726.131366][T16051] [ 726.535579][T16053] 9pnet_fd: Insufficient options for proto=fd [ 726.660452][T16057] program syz.5.2186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 727.445081][ T30] audit: type=1400 audit(1761186939.906:1283): avc: denied { create } for pid=16071 comm="syz.7.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 727.804068][ T30] audit: type=1400 audit(1761186939.926:1284): avc: denied { ioctl } for pid=16071 comm="syz.7.2191" path="socket:[58307]" dev="sockfs" ino=58307 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 727.882128][T10999] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 727.911480][ T30] audit: type=1400 audit(1761186939.976:1285): avc: denied { read } for pid=16071 comm="syz.7.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 728.051798][ T30] audit: type=1400 audit(1761186940.316:1286): avc: denied { setopt } for pid=16069 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 728.141740][T10999] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 728.241036][T16097] sp0: Synchronizing with TNC [ 728.566125][T10999] usb 8-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config [ 728.586524][ T5813] Bluetooth: hci5: command 0x0406 tx timeout [ 728.626084][T10999] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.668291][T10999] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 728.951141][T10999] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.051562][T10999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.059576][T10999] usb 8-1: Product: syz [ 729.124612][T10999] usb 8-1: Manufacturer: syz [ 729.129223][T10999] usb 8-1: SerialNumber: syz [ 729.256382][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2196'. [ 729.327811][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 729.549359][T10999] usb 8-1: 0:2 : does not exist [ 729.575567][T10999] usb 8-1: USB disconnect, device number 14 [ 730.010726][T16121] FAULT_INJECTION: forcing a failure. [ 730.010726][T16121] name failslab, interval 1, probability 0, space 0, times 0 [ 730.023508][T16121] CPU: 0 UID: 0 PID: 16121 Comm: syz.3.2198 Not tainted syzkaller #0 PREEMPT(full) [ 730.023537][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 730.023544][T16121] Call Trace: [ 730.023549][T16121] [ 730.023553][T16121] dump_stack_lvl+0x16c/0x1f0 [ 730.023573][T16121] should_fail_ex+0x512/0x640 [ 730.023586][T16121] ? fs_reclaim_acquire+0xae/0x150 [ 730.023600][T16121] should_failslab+0xc2/0x120 [ 730.023613][T16121] __kmalloc_noprof+0xdd/0x880 [ 730.023627][T16121] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 730.023643][T16121] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 730.023654][T16121] tomoyo_realpath_from_path+0xc2/0x6e0 [ 730.023667][T16121] ? tomoyo_profile+0x47/0x60 [ 730.023682][T16121] tomoyo_path_number_perm+0x245/0x580 [ 730.023697][T16121] ? tomoyo_path_number_perm+0x237/0x580 [ 730.023721][T16121] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 730.023773][T16121] ? hook_file_ioctl_common+0x145/0x410 [ 730.023793][T16121] ? __rcu_read_unlock+0x2bc/0x550 [ 730.023806][T16121] ? __fget_files+0x20e/0x3c0 [ 730.023819][T16121] security_file_ioctl+0x9b/0x240 [ 730.023832][T16121] __x64_sys_ioctl+0xb7/0x210 [ 730.023848][T16121] do_syscall_64+0xcd/0xfa0 [ 730.023864][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.023875][T16121] RIP: 0033:0x7ff35ed8efc9 [ 730.023885][T16121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.023895][T16121] RSP: 002b:00007ff35fc3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.023906][T16121] RAX: ffffffffffffffda RBX: 00007ff35efe6090 RCX: 00007ff35ed8efc9 [ 730.023913][T16121] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000006 [ 730.023919][T16121] RBP: 00007ff35fc3d090 R08: 0000000000000000 R09: 0000000000000000 [ 730.023925][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.023931][T16121] R13: 00007ff35efe6128 R14: 00007ff35efe6090 R15: 00007ffc84b8fd18 [ 730.023945][T16121] [ 730.023965][T16121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 730.383505][ T30] audit: type=1400 audit(1761186942.816:1287): avc: denied { connect } for pid=16118 comm="syz.3.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 731.996742][ T30] audit: type=1400 audit(1761186944.456:1288): avc: denied { mounton } for pid=16147 comm="syz.0.2204" path="/93/file0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 732.739158][T16164] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2206'. [ 733.483391][T16174] FAULT_INJECTION: forcing a failure. [ 733.483391][T16174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.496597][T16174] CPU: 1 UID: 0 PID: 16174 Comm: syz.5.2209 Not tainted syzkaller #0 PREEMPT(full) [ 733.496620][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 733.496630][T16174] Call Trace: [ 733.496636][T16174] [ 733.496643][T16174] dump_stack_lvl+0x16c/0x1f0 [ 733.496673][T16174] should_fail_ex+0x512/0x640 [ 733.496701][T16174] _copy_from_user+0x2e/0xd0 [ 733.496729][T16174] copy_msghdr_from_user+0x98/0x160 [ 733.496752][T16174] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 733.496774][T16174] ? __lock_acquire+0x622/0x1c90 [ 733.496793][T16174] ___sys_recvmsg+0xdb/0x1a0 [ 733.496806][T16174] ? __pfx____sys_recvmsg+0x10/0x10 [ 733.496837][T16174] __sys_recvmsg+0x16a/0x220 [ 733.496855][T16174] ? __pfx___sys_recvmsg+0x10/0x10 [ 733.496877][T16174] do_syscall_64+0xcd/0xfa0 [ 733.496894][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.496905][T16174] RIP: 0033:0x7f35f1d8efc9 [ 733.496914][T16174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.496927][T16174] RSP: 002b:00007f35efff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 733.496937][T16174] RAX: ffffffffffffffda RBX: 00007f35f1fe6090 RCX: 00007f35f1d8efc9 [ 733.496944][T16174] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 733.496950][T16174] RBP: 00007f35efff6090 R08: 0000000000000000 R09: 0000000000000000 [ 733.496957][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.496966][T16174] R13: 00007f35f1fe6128 R14: 00007f35f1fe6090 R15: 00007ffe9cd17df8 [ 733.496980][T16174] [ 733.791613][T11160] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 734.074248][T11160] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 734.111940][T10999] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 734.165782][T11160] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 734.186506][T11160] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 734.315685][T11160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.341389][T16173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 734.373913][T11160] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 734.401979][T10999] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.431260][T10999] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 734.760877][T10999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.817767][T11160] usb 4-1: USB disconnect, device number 39 [ 734.832297][T10999] usb 1-1: config 0 descriptor?? [ 734.875485][T10999] pwc: Askey VC010 type 2 USB webcam detected. [ 735.811809][T10999] pwc: recv_control_msg error -32 req 02 val 2b00 [ 735.843329][T10999] pwc: recv_control_msg error -32 req 02 val 2700 [ 736.118617][T10999] pwc: recv_control_msg error -32 req 02 val 2c00 [ 736.130253][T10999] pwc: recv_control_msg error -32 req 04 val 1000 [ 736.164218][T10999] pwc: recv_control_msg error -32 req 04 val 1300 [ 736.191658][T10999] pwc: recv_control_msg error -32 req 04 val 1400 [ 736.213143][T10999] pwc: recv_control_msg error -32 req 02 val 2000 [ 736.230688][ T30] audit: type=1400 audit(1761186948.686:1289): avc: denied { read } for pid=16208 comm="syz.3.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 736.251476][ T5869] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 736.269125][T10999] pwc: recv_control_msg error -32 req 02 val 2100 [ 736.298961][ T30] audit: type=1400 audit(1761186948.756:1290): avc: denied { setopt } for pid=16208 comm="syz.3.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 736.310807][T10999] pwc: recv_control_msg error -32 req 04 val 1500 [ 736.460445][ T5869] usb 6-1: device descriptor read/64, error -71 [ 736.483202][T10999] pwc: recv_control_msg error -32 req 02 val 2500 [ 736.490797][T10999] pwc: recv_control_msg error -32 req 02 val 2400 [ 736.566608][T16221] FAULT_INJECTION: forcing a failure. [ 736.566608][T16221] name failslab, interval 1, probability 0, space 0, times 0 [ 736.579396][T16221] CPU: 1 UID: 0 PID: 16221 Comm: syz.7.2219 Not tainted syzkaller #0 PREEMPT(full) [ 736.579420][T16221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 736.579430][T16221] Call Trace: [ 736.579437][T16221] [ 736.579444][T16221] dump_stack_lvl+0x16c/0x1f0 [ 736.579474][T16221] should_fail_ex+0x512/0x640 [ 736.579493][T16221] ? fs_reclaim_acquire+0xae/0x150 [ 736.579516][T16221] should_failslab+0xc2/0x120 [ 736.579542][T16221] __kmalloc_noprof+0xdd/0x880 [ 736.579567][T16221] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 736.579592][T16221] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 736.579611][T16221] tomoyo_realpath_from_path+0xc2/0x6e0 [ 736.579632][T16221] ? tomoyo_profile+0x47/0x60 [ 736.579657][T16221] tomoyo_path_number_perm+0x245/0x580 [ 736.579683][T16221] ? tomoyo_path_number_perm+0x237/0x580 [ 736.579713][T16221] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 736.579741][T16221] ? find_held_lock+0x2b/0x80 [ 736.579784][T16221] ? find_held_lock+0x2b/0x80 [ 736.579805][T16221] ? hook_file_ioctl_common+0x145/0x410 [ 736.579834][T16221] ? __fget_files+0x20e/0x3c0 [ 736.579857][T16221] security_file_ioctl+0x9b/0x240 [ 736.579878][T16221] __x64_sys_ioctl+0xb7/0x210 [ 736.579904][T16221] do_syscall_64+0xcd/0xfa0 [ 736.579931][T16221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.579949][T16221] RIP: 0033:0x7eff5ef8efc9 [ 736.579963][T16221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.579980][T16221] RSP: 002b:00007eff5fe72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.579997][T16221] RAX: ffffffffffffffda RBX: 00007eff5f1e6180 RCX: 00007eff5ef8efc9 [ 736.580008][T16221] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 736.580019][T16221] RBP: 00007eff5fe72090 R08: 0000000000000000 R09: 0000000000000000 [ 736.580029][T16221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.580038][T16221] R13: 00007eff5f1e6218 R14: 00007eff5f1e6180 R15: 00007ffc4324ad38 [ 736.580064][T16221] [ 736.580088][T16221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 736.798899][T10999] pwc: recv_control_msg error -71 req 02 val 2900 [ 736.818320][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.828426][T10999] pwc: recv_control_msg error -71 req 02 val 2800 [ 736.843546][T10999] pwc: recv_control_msg error -71 req 04 val 1100 [ 736.856153][T10999] pwc: recv_control_msg error -71 req 04 val 1200 [ 736.872151][T10999] pwc: Registered as video103. [ 736.878821][T10999] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 736.893381][T10999] usb 1-1: USB disconnect, device number 44 [ 737.057109][ T5869] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 737.282126][T16224] siw: device registration error -23 [ 737.323585][ T5869] usb 6-1: device descriptor read/64, error -71 [ 737.434435][ T5869] usb usb6-port1: attempt power cycle [ 737.445216][ T30] audit: type=1400 audit(1761186949.856:1291): avc: denied { name_bind } for pid=16229 comm="syz.7.2222" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 737.811483][ T5869] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 738.111031][ T5869] usb 6-1: device descriptor read/8, error -71 [ 738.236138][T10999] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 738.485030][T10999] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 738.501712][T10999] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.522632][T10999] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 738.642937][ T5869] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 738.722066][ T5869] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.780497][ T5869] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 738.895944][ T5869] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 738.995177][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.034882][T10999] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 739.042951][T10999] usb 8-1: Manufacturer: syz [ 739.050850][T10999] usb 8-1: config 0 descriptor?? [ 739.068730][T16238] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 739.085054][ T5869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.251767][T10999] rc_core: IR keymap rc-hauppauge not found [ 739.261737][T16252] FAULT_INJECTION: forcing a failure. [ 739.261737][T16252] name failslab, interval 1, probability 0, space 0, times 0 [ 739.264492][T10999] Registered IR keymap rc-empty [ 739.279377][T16252] CPU: 0 UID: 0 PID: 16252 Comm: syz.3.2229 Not tainted syzkaller #0 PREEMPT(full) [ 739.279401][T16252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 739.279412][T16252] Call Trace: [ 739.279418][T16252] [ 739.279425][T16252] dump_stack_lvl+0x16c/0x1f0 [ 739.279454][T16252] should_fail_ex+0x512/0x640 [ 739.279474][T16252] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 739.279503][T16252] should_failslab+0xc2/0x120 [ 739.279522][T16252] kmem_cache_alloc_node_noprof+0x78/0x770 [ 739.279546][T16252] ? __alloc_skb+0x2b2/0x380 [ 739.279572][T16252] ? __alloc_skb+0x2b2/0x380 [ 739.279588][T16252] ? __pfx_netlink_insert+0x10/0x10 [ 739.279609][T16252] __alloc_skb+0x2b2/0x380 [ 739.279628][T16252] ? __pfx___alloc_skb+0x10/0x10 [ 739.279647][T16252] ? netlink_autobind.isra.0+0x158/0x370 [ 739.279676][T16252] netlink_alloc_large_skb+0x69/0x140 [ 739.279701][T16252] netlink_sendmsg+0x698/0xdd0 [ 739.279728][T16252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.279761][T16252] sock_write_iter+0x566/0x610 [ 739.279788][T16252] ? __pfx_sock_write_iter+0x10/0x10 [ 739.279824][T16252] ? __pfx_file_has_perm+0x10/0x10 [ 739.279853][T16252] do_iter_readv_writev+0x662/0x9e0 [ 739.279881][T16252] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 739.279905][T16252] ? selinux_file_permission+0x126/0x660 [ 739.279926][T16252] ? bpf_lsm_file_permission+0x9/0x10 [ 739.279942][T16252] ? security_file_permission+0x71/0x210 [ 739.279962][T16252] ? rw_verify_area+0xcf/0x6c0 [ 739.279988][T16252] vfs_writev+0x35f/0xde0 [ 739.280020][T16252] ? __pfx_vfs_writev+0x10/0x10 [ 739.280057][T16252] ? __fget_files+0x20e/0x3c0 [ 739.280073][T16252] ? __fget_files+0x140/0x3c0 [ 739.280096][T16252] ? do_writev+0x28c/0x340 [ 739.280117][T16252] do_writev+0x28c/0x340 [ 739.280141][T16252] ? __pfx_do_writev+0x10/0x10 [ 739.280173][T16252] do_syscall_64+0xcd/0xfa0 [ 739.280200][T16252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.280217][T16252] RIP: 0033:0x7ff35ed8efc9 [ 739.280231][T16252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.280246][T16252] RSP: 002b:00007ff35fc5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 739.280269][T16252] RAX: ffffffffffffffda RBX: 00007ff35efe5fa0 RCX: 00007ff35ed8efc9 [ 739.280280][T16252] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000008 [ 739.280289][T16252] RBP: 00007ff35fc5e090 R08: 0000000000000000 R09: 0000000000000000 [ 739.280298][T16252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.280307][T16252] R13: 00007ff35efe6038 R14: 00007ff35efe5fa0 R15: 00007ffc84b8fd18 [ 739.280328][T16252] [ 739.547050][T10999] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 739.565795][T10999] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input61 [ 739.700053][T10999] usb 8-1: USB disconnect, device number 15 [ 739.759541][T16255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2230'. [ 739.773194][ T43] usb 6-1: USB disconnect, device number 39 [ 739.828334][T16255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2230'. [ 740.161546][T10999] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 740.191544][T12755] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 740.321522][T12755] usb 1-1: device descriptor read/64, error -71 [ 740.371180][T10999] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 740.422412][T10999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.436557][T10999] usb 8-1: Product: syz [ 740.446118][T10999] usb 8-1: Manufacturer: syz [ 740.451354][T10999] usb 8-1: SerialNumber: syz [ 740.468258][T10999] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 740.565121][ T30] audit: type=1400 audit(1761186953.026:1292): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 740.607934][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 740.625963][T12755] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 740.821498][T12755] usb 1-1: device descriptor read/64, error -71 [ 740.874989][T12511] usb 8-1: USB disconnect, device number 16 [ 740.931771][T12755] usb usb1-port1: attempt power cycle [ 741.281484][T12755] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 741.313241][T12755] usb 1-1: device descriptor read/8, error -71 [ 741.813309][T12755] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 741.821212][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 741.839985][ T9] ath9k_htc: Failed to initialize the device [ 741.861886][T12755] usb 1-1: device descriptor read/8, error -71 [ 741.870751][T12511] usb 8-1: ath9k_htc: USB layer deinitialized [ 742.447852][T12755] usb usb1-port1: unable to enumerate USB device [ 743.369394][T16306] FAULT_INJECTION: forcing a failure. [ 743.369394][T16306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.382833][T16287] siw: device registration error -23 [ 743.398455][T16306] CPU: 1 UID: 0 PID: 16306 Comm: syz.0.2242 Not tainted syzkaller #0 PREEMPT(full) [ 743.398478][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 743.398488][T16306] Call Trace: [ 743.398494][T16306] [ 743.398502][T16306] dump_stack_lvl+0x16c/0x1f0 [ 743.398531][T16306] should_fail_ex+0x512/0x640 [ 743.398553][T16306] _copy_from_user+0x2e/0xd0 [ 743.398574][T16306] copy_msghdr_from_user+0x98/0x160 [ 743.398594][T16306] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 743.398614][T16306] ___sys_sendmsg+0xfe/0x1d0 [ 743.398628][T16306] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.398640][T16306] ? __lock_acquire+0x622/0x1c90 [ 743.398673][T16306] __sys_sendmsg+0x16d/0x220 [ 743.398686][T16306] ? __pfx___sys_sendmsg+0x10/0x10 [ 743.398708][T16306] do_syscall_64+0xcd/0xfa0 [ 743.398725][T16306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.398736][T16306] RIP: 0033:0x7fab42b8efc9 [ 743.398745][T16306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.398755][T16306] RSP: 002b:00007fab43aca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.398765][T16306] RAX: ffffffffffffffda RBX: 00007fab42de5fa0 RCX: 00007fab42b8efc9 [ 743.398772][T16306] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 743.398779][T16306] RBP: 00007fab43aca090 R08: 0000000000000000 R09: 0000000000000000 [ 743.398785][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.398791][T16306] R13: 00007fab42de6038 R14: 00007fab42de5fa0 R15: 00007ffd53a65b08 [ 743.398805][T16306] [ 743.598030][T16304] netlink: 'syz.3.2241': attribute type 27 has an invalid length. [ 743.605922][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 743.673042][T16304] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 744.683981][T16323] siw: device registration error -23 [ 744.876230][T16326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2246'. [ 745.812907][T16325] siw: device registration error -23 [ 745.936107][T16337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2248'. [ 746.763215][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.774852][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.549154][T16370] fuse: Bad value for 'user_id' [ 747.569150][T16370] fuse: Bad value for 'user_id' [ 747.621521][ T30] audit: type=1400 audit(1761186960.076:1293): avc: denied { ioctl } for pid=16373 comm="syz.3.2255" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 747.625546][T16376] input: syz1 as /devices/virtual/input/input63 [ 747.655561][T16375] FAULT_INJECTION: forcing a failure. [ 747.655561][T16375] name failslab, interval 1, probability 0, space 0, times 0 [ 747.701966][T16375] CPU: 1 UID: 0 PID: 16375 Comm: syz.3.2255 Not tainted syzkaller #0 PREEMPT(full) [ 747.701989][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 747.701999][T16375] Call Trace: [ 747.702005][T16375] [ 747.702013][T16375] dump_stack_lvl+0x16c/0x1f0 [ 747.702042][T16375] should_fail_ex+0x512/0x640 [ 747.702062][T16375] ? fs_reclaim_acquire+0xae/0x150 [ 747.702085][T16375] should_failslab+0xc2/0x120 [ 747.702106][T16375] __kmalloc_noprof+0xdd/0x880 [ 747.702130][T16375] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 747.702156][T16375] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 747.702181][T16375] tomoyo_realpath_from_path+0xc2/0x6e0 [ 747.702203][T16375] ? tomoyo_profile+0x47/0x60 [ 747.702228][T16375] tomoyo_path_number_perm+0x245/0x580 [ 747.702253][T16375] ? tomoyo_path_number_perm+0x237/0x580 [ 747.702280][T16375] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 747.702307][T16375] ? find_held_lock+0x2b/0x80 [ 747.702348][T16375] ? find_held_lock+0x2b/0x80 [ 747.702368][T16375] ? hook_file_ioctl_common+0x145/0x410 [ 747.702394][T16375] ? __fget_files+0x20e/0x3c0 [ 747.702412][T16375] security_file_ioctl+0x9b/0x240 [ 747.702429][T16375] __x64_sys_ioctl+0xb7/0x210 [ 747.702450][T16375] do_syscall_64+0xcd/0xfa0 [ 747.702473][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.702488][T16375] RIP: 0033:0x7ff35ed8efc9 [ 747.702500][T16375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.702514][T16375] RSP: 002b:00007ff35fc5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.702528][T16375] RAX: ffffffffffffffda RBX: 00007ff35efe5fa0 RCX: 00007ff35ed8efc9 [ 747.702538][T16375] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 747.702547][T16375] RBP: 00007ff35fc5e090 R08: 0000000000000000 R09: 0000000000000000 [ 747.702556][T16375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.702565][T16375] R13: 00007ff35efe6038 R14: 00007ff35efe5fa0 R15: 00007ffc84b8fd18 [ 747.702587][T16375] [ 747.702593][T16375] ERROR: Out of memory at tomoyo_realpath_from_path. [ 748.009398][T16375] input: syz1 as /devices/virtual/input/input62 [ 748.185642][T16387] 9pnet_fd: Insufficient options for proto=fd [ 748.202825][ T30] audit: type=1400 audit(1761186960.636:1294): avc: denied { read } for pid=16383 comm="syz.9.2257" dev="sockfs" ino=60503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 748.426444][ T30] audit: type=1400 audit(1761186960.696:1295): avc: denied { write } for pid=16383 comm="syz.9.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 748.451643][ T30] audit: type=1400 audit(1761186960.756:1296): avc: denied { setopt } for pid=16383 comm="syz.9.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 748.471250][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.641604][ T5869] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 748.819753][T16399] FAULT_INJECTION: forcing a failure. [ 748.819753][T16399] name failslab, interval 1, probability 0, space 0, times 0 [ 748.832578][T16399] CPU: 0 UID: 0 PID: 16399 Comm: syz.9.2259 Not tainted syzkaller #0 PREEMPT(full) [ 748.832600][T16399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 748.832610][T16399] Call Trace: [ 748.832616][T16399] [ 748.832622][T16399] dump_stack_lvl+0x16c/0x1f0 [ 748.832649][T16399] should_fail_ex+0x512/0x640 [ 748.832668][T16399] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 748.832696][T16399] should_failslab+0xc2/0x120 [ 748.832715][T16399] kmem_cache_alloc_node_noprof+0x78/0x770 [ 748.832739][T16399] ? __alloc_skb+0x2b2/0x380 [ 748.832765][T16399] ? __alloc_skb+0x2b2/0x380 [ 748.832783][T16399] ? __pfx_netlink_insert+0x10/0x10 [ 748.832805][T16399] __alloc_skb+0x2b2/0x380 [ 748.832825][T16399] ? __pfx___alloc_skb+0x10/0x10 [ 748.832845][T16399] ? netlink_autobind.isra.0+0x158/0x370 [ 748.832874][T16399] netlink_alloc_large_skb+0x69/0x140 [ 748.832898][T16399] netlink_sendmsg+0x698/0xdd0 [ 748.832924][T16399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.832955][T16399] sock_write_iter+0x566/0x610 [ 748.832981][T16399] ? __pfx_sock_write_iter+0x10/0x10 [ 748.833004][T16399] ? __schedule+0x3fec/0x5de0 [ 748.833032][T16399] ? bpf_lsm_file_permission+0x9/0x10 [ 748.833049][T16399] ? security_file_permission+0x71/0x210 [ 748.833070][T16399] ? rw_verify_area+0xcf/0x6c0 [ 748.833096][T16399] vfs_write+0x7d3/0x11d0 [ 748.833112][T16399] ? __pfx_sock_write_iter+0x10/0x10 [ 748.833139][T16399] ? __pfx_vfs_write+0x10/0x10 [ 748.833153][T16399] ? find_held_lock+0x2b/0x80 [ 748.833188][T16399] ksys_write+0x1f8/0x250 [ 748.833205][T16399] ? __pfx_ksys_write+0x10/0x10 [ 748.833223][T16399] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 748.833249][T16399] do_syscall_64+0xcd/0xfa0 [ 748.833275][T16399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.833295][T16399] RIP: 0033:0x7f28a4b8efc9 [ 748.833309][T16399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.833325][T16399] RSP: 002b:00007f28a5ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 748.833341][T16399] RAX: ffffffffffffffda RBX: 00007f28a4de6090 RCX: 00007f28a4b8efc9 [ 748.833353][T16399] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000007 [ 748.833364][T16399] RBP: 00007f28a5ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 748.833374][T16399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.833383][T16399] R13: 00007f28a4de6128 R14: 00007f28a4de6090 R15: 00007fff6dd5ecc8 [ 748.833416][T16399] [ 748.845359][ T5869] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 748.867923][T12851] Bluetooth: hci1: command 0x0406 tx timeout [ 749.338842][ T5869] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.352992][T16401] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 749.363674][ T5869] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.374862][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.384861][T16388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 749.401108][ T5869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 749.875640][T12755] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 750.380769][T12755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.421524][T12755] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 750.441579][T12755] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.451803][T12755] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 750.488644][T12511] usb 6-1: USB disconnect, device number 40 [ 750.574920][T12755] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 750.881490][T12755] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 750.913689][T12755] usb 10-1: Manufacturer: syz [ 750.948642][T12755] usb 10-1: config 0 descriptor?? [ 751.148981][T16425] FAULT_INJECTION: forcing a failure. [ 751.148981][T16425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.162272][T16425] CPU: 0 UID: 0 PID: 16425 Comm: syz.7.2264 Not tainted syzkaller #0 PREEMPT(full) [ 751.162295][T16425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.162305][T16425] Call Trace: [ 751.162312][T16425] [ 751.162319][T16425] dump_stack_lvl+0x16c/0x1f0 [ 751.162351][T16425] should_fail_ex+0x512/0x640 [ 751.162375][T16425] _copy_from_user+0x2e/0xd0 [ 751.162403][T16425] move_addr_to_kernel+0x65/0x170 [ 751.162423][T16425] __sys_bind+0x11b/0x260 [ 751.162441][T16425] ? __pfx___sys_bind+0x10/0x10 [ 751.162474][T16425] __x64_sys_bind+0x72/0xb0 [ 751.162492][T16425] do_syscall_64+0xcd/0xfa0 [ 751.162519][T16425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.162538][T16425] RIP: 0033:0x7eff5ef8efc9 [ 751.162551][T16425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.162567][T16425] RSP: 002b:00007eff5fe93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 751.162585][T16425] RAX: ffffffffffffffda RBX: 00007eff5f1e6090 RCX: 00007eff5ef8efc9 [ 751.162596][T16425] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000b [ 751.162606][T16425] RBP: 00007eff5fe93090 R08: 0000000000000000 R09: 0000000000000000 [ 751.162615][T16425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.162625][T16425] R13: 00007eff5f1e6128 R14: 00007eff5f1e6090 R15: 00007ffc4324ad38 [ 751.162646][T16425] [ 751.312171][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.601459][T12755] rc_core: IR keymap rc-hauppauge not found [ 751.607418][T12755] Registered IR keymap rc-empty [ 751.612356][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 751.641216][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 751.694756][T12755] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 751.729869][T12755] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input64 [ 751.748109][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 751.794021][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.045386][T12511] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 752.141615][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.224106][T16448] FAULT_INJECTION: forcing a failure. [ 752.224106][T16448] name failslab, interval 1, probability 0, space 0, times 0 [ 752.236817][T16448] CPU: 0 UID: 0 PID: 16448 Comm: syz.0.2269 Not tainted syzkaller #0 PREEMPT(full) [ 752.236840][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 752.236850][T16448] Call Trace: [ 752.236856][T16448] [ 752.236863][T16448] dump_stack_lvl+0x16c/0x1f0 [ 752.236891][T16448] should_fail_ex+0x512/0x640 [ 752.236910][T16448] ? __kmalloc_noprof+0xca/0x880 [ 752.236936][T16448] should_failslab+0xc2/0x120 [ 752.236957][T16448] __kmalloc_noprof+0xdd/0x880 [ 752.236979][T16448] ? sock_kmalloc+0x111/0x170 [ 752.237009][T16448] ? sock_kmalloc+0x111/0x170 [ 752.237032][T16448] sock_kmalloc+0x111/0x170 [ 752.237059][T16448] alg_setsockopt+0x390/0xdd0 [ 752.237089][T16448] ? __pfx_alg_setsockopt+0x10/0x10 [ 752.237116][T16448] ? selinux_socket_setsockopt+0x6a/0x80 [ 752.237144][T16448] ? __pfx_alg_setsockopt+0x10/0x10 [ 752.237171][T16448] do_sock_setsockopt+0xf3/0x1d0 [ 752.237200][T16448] __sys_setsockopt+0x1a0/0x230 [ 752.237225][T16448] __x64_sys_setsockopt+0xbd/0x160 [ 752.237245][T16448] ? do_syscall_64+0x9a/0xfa0 [ 752.237271][T16448] do_syscall_64+0xcd/0xfa0 [ 752.237298][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.237316][T16448] RIP: 0033:0x7fab42b8efc9 [ 752.237331][T16448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.237348][T16448] RSP: 002b:00007fab43aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 752.237369][T16448] RAX: ffffffffffffffda RBX: 00007fab42de6090 RCX: 00007fab42b8efc9 [ 752.237381][T16448] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000005 [ 752.237392][T16448] RBP: 00007fab43aa9090 R08: 0000000000000010 R09: 0000000000000000 [ 752.237403][T16448] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 752.237413][T16448] R13: 00007fab42de6128 R14: 00007fab42de6090 R15: 00007ffd53a65b08 [ 752.237439][T16448] [ 752.429567][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.605299][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.613194][T12511] usb 6-1: device descriptor read/64, error -71 [ 752.632835][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.665754][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.701533][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.721499][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.741565][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.761519][T12755] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 752.783122][T12755] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 752.801117][T12755] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 752.851485][T12511] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 752.879605][T12755] usb 10-1: USB disconnect, device number 29 [ 752.973279][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 753.011492][T12511] usb 6-1: device descriptor read/64, error -71 [ 753.073223][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 753.390500][T12511] usb usb6-port1: attempt power cycle [ 753.650137][T16473] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 753.698855][ T30] audit: type=1400 audit(1761186966.156:1297): avc: denied { read } for pid=16471 comm="syz.9.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 753.748621][T16480] Bluetooth: MGMT ver 1.23 [ 753.771486][T12511] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 753.794162][T12511] usb 6-1: device descriptor read/8, error -71 [ 753.813580][T16483] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 753.890158][ T30] audit: type=1400 audit(1761186966.346:1298): avc: denied { read } for pid=16471 comm="syz.9.2274" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 753.926697][ T30] audit: type=1400 audit(1761186966.346:1299): avc: denied { open } for pid=16471 comm="syz.9.2274" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 754.223043][T12511] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 754.243323][T12511] usb 6-1: device descriptor read/8, error -71 [ 754.391671][T12511] usb usb6-port1: unable to enumerate USB device [ 754.991580][T11160] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 755.189389][T11160] usb 4-1: Using ep0 maxpacket: 32 [ 755.441547][T11160] usb 4-1: no configurations [ 755.446147][T11160] usb 4-1: can't read configurations, error -22 [ 755.622686][ T30] audit: type=1400 audit(1761186968.006:1300): avc: denied { ioctl } for pid=16503 comm="syz.5.2280" path="socket:[60250]" dev="sockfs" ino=60250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 755.837180][T16507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.902688][T11160] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 756.037895][T16507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.123147][T16507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.138137][T16507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.221509][T11160] usb 4-1: Using ep0 maxpacket: 32 [ 756.238857][T11160] usb 4-1: no configurations [ 756.254467][T11160] usb 4-1: can't read configurations, error -22 [ 756.296547][T11160] usb usb4-port1: attempt power cycle [ 756.387008][T16531] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2286'. [ 756.441497][T12511] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 756.759077][T12511] usb 8-1: Using ep0 maxpacket: 32 [ 756.789430][T11160] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 756.812608][T12511] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 756.820764][T12511] usb 8-1: config 0 has no interface number 0 [ 756.833017][T11160] usb 4-1: Using ep0 maxpacket: 32 [ 756.844065][T12511] usb 8-1: config 0 interface 196 has no altsetting 0 [ 756.852641][T11160] usb 4-1: no configurations [ 756.855097][T16541] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2288'. [ 756.857349][T11160] usb 4-1: can't read configurations, error -22 [ 756.886231][T12511] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 756.925284][T12511] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.979427][T12511] usb 8-1: Product: syz [ 756.984035][T12511] usb 8-1: Manufacturer: syz [ 756.988707][T12511] usb 8-1: SerialNumber: syz [ 757.004481][T12511] usb 8-1: config 0 descriptor?? [ 757.154029][T16547] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 757.223708][T16522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.238601][T16522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.278598][T16522] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.349817][ T30] audit: type=1400 audit(1761186969.786:1301): avc: denied { map } for pid=16548 comm="syz.9.2292" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 757.377627][T12626] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 757.584634][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2284'. [ 757.586052][ T30] audit: type=1400 audit(1761186969.786:1302): avc: denied { execute } for pid=16548 comm="syz.9.2292" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 757.674450][T12626] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 757.685558][T12626] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 757.726423][T12626] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 757.868464][T12626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.941466][T16543] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 758.092379][T12626] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.374686][T12626] usb 1-1: USB disconnect, device number 49 [ 758.721510][T11160] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 758.947763][T11160] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.961693][T11160] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.973664][T11160] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.989722][T11160] usb 10-1: config 0 descriptor?? [ 758.991501][T12626] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 758.998399][T11160] pwc: Askey VC010 type 2 USB webcam detected. [ 759.173196][T12626] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 759.185433][T12626] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 759.195682][T12626] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 759.209332][T12626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.250816][T16571] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 759.264534][T12626] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.341861][T12511] ipheth 8-1:0.196: Unable to find endpoints [ 759.424300][T11160] pwc: recv_control_msg error -32 req 02 val 2b00 [ 759.432801][T11160] pwc: recv_control_msg error -32 req 02 val 2700 [ 759.439994][T11160] pwc: recv_control_msg error -32 req 02 val 2c00 [ 759.455780][T12511] usb 8-1: USB disconnect, device number 17 [ 759.466739][T11160] pwc: recv_control_msg error -32 req 04 val 1000 [ 759.512129][T11160] pwc: recv_control_msg error -32 req 04 val 1300 [ 759.519374][T11160] pwc: recv_control_msg error -32 req 04 val 1400 [ 759.526574][T11160] pwc: recv_control_msg error -32 req 02 val 2000 [ 759.533658][T11160] pwc: recv_control_msg error -32 req 02 val 2100 [ 759.540640][T11160] pwc: recv_control_msg error -32 req 04 val 1500 [ 759.556434][T11160] pwc: recv_control_msg error -32 req 02 val 2500 [ 759.567784][T11160] pwc: recv_control_msg error -32 req 02 val 2400 [ 759.574839][T11160] pwc: recv_control_msg error -32 req 02 val 2600 [ 759.581746][T11160] pwc: recv_control_msg error -32 req 02 val 2900 [ 759.597287][T11160] pwc: recv_control_msg error -32 req 02 val 2800 [ 759.660975][ T10] usb 4-1: USB disconnect, device number 44 [ 759.807782][T11160] pwc: recv_control_msg error -71 req 04 val 1200 [ 759.816852][T11160] pwc: Registered as video103. [ 759.830196][T11160] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input65 [ 759.862116][T16584] "syz.7.2299" (16584) uses obsolete ecb(arc4) skcipher [ 759.873527][T11160] usb 10-1: USB disconnect, device number 30 [ 760.108298][T16584] pim6reg: entered allmulticast mode [ 760.291530][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 760.453492][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 760.472377][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.489017][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 760.498466][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 760.506745][ T10] usb 1-1: Manufacturer: syz [ 760.515313][ T10] usb 1-1: config 0 descriptor?? [ 760.595176][ T10] rc_core: IR keymap rc-hauppauge not found [ 760.601229][ T10] Registered IR keymap rc-empty [ 760.609115][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 760.619738][T12511] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 760.635108][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input66 [ 760.781573][T12511] usb 10-1: Invalid ep0 maxpacket: 64 [ 760.790085][T16605] FAULT_INJECTION: forcing a failure. [ 760.790085][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 760.802858][T16605] CPU: 1 UID: 0 PID: 16605 Comm: syz.0.2301 Not tainted syzkaller #0 PREEMPT(full) [ 760.802879][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 760.802890][T16605] Call Trace: [ 760.802896][T16605] [ 760.802903][T16605] dump_stack_lvl+0x16c/0x1f0 [ 760.802932][T16605] should_fail_ex+0x512/0x640 [ 760.802951][T16605] ? fs_reclaim_acquire+0xae/0x150 [ 760.802971][T16605] should_failslab+0xc2/0x120 [ 760.802987][T16605] __kmalloc_noprof+0xdd/0x880 [ 760.803007][T16605] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 760.803029][T16605] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 760.803045][T16605] tomoyo_realpath_from_path+0xc2/0x6e0 [ 760.803063][T16605] ? tomoyo_profile+0x47/0x60 [ 760.803083][T16605] tomoyo_path_number_perm+0x245/0x580 [ 760.803104][T16605] ? tomoyo_path_number_perm+0x237/0x580 [ 760.803127][T16605] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 760.803150][T16605] ? find_held_lock+0x2b/0x80 [ 760.803188][T16605] ? find_held_lock+0x2b/0x80 [ 760.803204][T16605] ? hook_file_ioctl_common+0x145/0x410 [ 760.803227][T16605] ? __fget_files+0x20e/0x3c0 [ 760.803245][T16605] security_file_ioctl+0x9b/0x240 [ 760.803261][T16605] __x64_sys_ioctl+0xb7/0x210 [ 760.803282][T16605] do_syscall_64+0xcd/0xfa0 [ 760.803310][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.803324][T16605] RIP: 0033:0x7fab42b8efc9 [ 760.803336][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.803349][T16605] RSP: 002b:00007fab43aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.803363][T16605] RAX: ffffffffffffffda RBX: 00007fab42de6090 RCX: 00007fab42b8efc9 [ 760.803373][T16605] RDX: 0000200000000040 RSI: 0000000080284504 RDI: 0000000000000008 [ 760.803383][T16605] RBP: 00007fab43aa9090 R08: 0000000000000000 R09: 0000000000000000 [ 760.803391][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.803399][T16605] R13: 00007fab42de6128 R14: 00007fab42de6090 R15: 00007ffd53a65b08 [ 760.803420][T16605] [ 760.803459][T16605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.081606][T12511] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 761.232347][T12511] usb 10-1: Invalid ep0 maxpacket: 64 [ 761.324372][T12511] usb usb10-port1: attempt power cycle [ 761.516376][T16612] netlink: 'syz.3.2305': attribute type 9 has an invalid length. [ 761.524229][T16612] netlink: 'syz.3.2305': attribute type 7 has an invalid length. [ 761.532795][T16612] netlink: 'syz.3.2305': attribute type 8 has an invalid length. [ 762.011664][T12511] usb 10-1: new low-speed USB device number 33 using dummy_hcd [ 762.366514][T12511] usb 10-1: Invalid ep0 maxpacket: 64 [ 762.506420][T16622] fuse: Bad value for 'fd' [ 762.521871][T12511] usb 10-1: new low-speed USB device number 34 using dummy_hcd [ 762.552479][T12511] usb 10-1: Invalid ep0 maxpacket: 64 [ 762.562456][T12511] usb usb10-port1: unable to enumerate USB device [ 763.134322][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 763.184284][T12511] usb 1-1: USB disconnect, device number 50 [ 763.195474][T16628] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 763.196562][ T30] audit: type=1400 audit(1761186975.656:1303): avc: denied { mounton } for pid=16627 comm="syz.7.2311" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 763.277101][ T30] audit: type=1400 audit(1761186975.726:1304): avc: denied { lock } for pid=16629 comm="syz.0.2312" path="socket:[61445]" dev="sockfs" ino=61445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 763.302902][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 763.317341][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 763.328542][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 763.338390][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.350130][T16620] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 763.372789][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 763.561490][ T5853] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 763.672525][ T24] usb 6-1: USB disconnect, device number 45 [ 763.783127][ T5853] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 763.799516][ T5853] usb 8-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.834088][ T5853] usb 8-1: config 2 interface 0 has no altsetting 0 [ 763.845640][ T5853] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 763.856828][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.953268][ T5853] usb 8-1: Product: syz [ 763.965276][ T5853] usb 8-1: Manufacturer: syz [ 763.978972][ T5853] usb 8-1: SerialNumber: syz [ 764.278429][ T5853] ims_pcu 8-1:2.0: Missing CDC union descriptor [ 764.285243][ T5853] ims_pcu 8-1:2.0: probe with driver ims_pcu failed with error -22 [ 764.317268][ T5853] usb 8-1: USB disconnect, device number 18 [ 764.487424][T16650] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2316'. [ 764.680888][T16650] geneve2: entered allmulticast mode [ 765.301230][T16660] "syz.3.2318" (16660) uses obsolete ecb(arc4) skcipher [ 765.373666][T11160] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 765.388681][T16664] "syz.3.2320" (16664) uses obsolete ecb(arc4) skcipher [ 765.624575][T16664] FAULT_INJECTION: forcing a failure. [ 765.624575][T16664] name failslab, interval 1, probability 0, space 0, times 0 [ 765.714484][T16664] CPU: 1 UID: 0 PID: 16664 Comm: syz.3.2320 Not tainted syzkaller #0 PREEMPT(full) [ 765.714508][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 765.714518][T16664] Call Trace: [ 765.714523][T16664] [ 765.714530][T16664] dump_stack_lvl+0x16c/0x1f0 [ 765.714563][T16664] should_fail_ex+0x512/0x640 [ 765.714582][T16664] ? __kmalloc_noprof+0xca/0x880 [ 765.714605][T16664] should_failslab+0xc2/0x120 [ 765.714624][T16664] __kmalloc_noprof+0xdd/0x880 [ 765.714646][T16664] ? sock_kmalloc+0x111/0x170 [ 765.714673][T16664] ? sock_kmalloc+0x111/0x170 [ 765.714695][T16664] sock_kmalloc+0x111/0x170 [ 765.714718][T16664] af_alg_alloc_areq+0xbc/0x2e0 [ 765.714736][T16664] skcipher_recvmsg+0x314/0x1030 [ 765.714752][T16664] ? __fget_files+0x204/0x3c0 [ 765.714762][T16664] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 765.714777][T16664] sock_recvmsg+0x1f9/0x250 [ 765.714794][T16664] __sys_recvfrom+0x203/0x310 [ 765.714807][T16664] ? __pfx___sys_recvfrom+0x10/0x10 [ 765.714831][T16664] ? ksys_write+0x1ac/0x250 [ 765.714841][T16664] ? __pfx_ksys_write+0x10/0x10 [ 765.714853][T16664] __x64_sys_recvfrom+0xe0/0x1c0 [ 765.714864][T16664] ? do_syscall_64+0x91/0xfa0 [ 765.714879][T16664] ? lockdep_hardirqs_on+0x7c/0x110 [ 765.714894][T16664] do_syscall_64+0xcd/0xfa0 [ 765.714910][T16664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.714922][T16664] RIP: 0033:0x7ff35ed8efc9 [ 765.714931][T16664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.714941][T16664] RSP: 002b:00007ff35fc5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 765.714951][T16664] RAX: ffffffffffffffda RBX: 00007ff35efe5fa0 RCX: 00007ff35ed8efc9 [ 765.714958][T16664] RDX: 0000000000000087 RSI: 0000200000000480 RDI: 0000000000000004 [ 765.714965][T16664] RBP: 00007ff35fc5e090 R08: 0000000000000000 R09: 0000000000000000 [ 765.714973][T16664] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 765.714979][T16664] R13: 00007ff35efe6038 R14: 00007ff35efe5fa0 R15: 00007ffc84b8fd18 [ 765.714993][T16664] [ 765.722965][T11160] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.985958][T11160] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 765.995274][T11160] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.006170][T11160] usb 8-1: config 0 descriptor?? [ 766.391259][T16673] siw: device registration error -23 [ 766.485638][ T30] audit: type=1400 audit(1761186978.766:1305): avc: denied { write } for pid=16671 comm="syz.5.2322" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 766.858528][T11160] usbhid 8-1:0.0: can't add hid device: -71 [ 766.883396][T11160] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 766.975476][T11160] usb 8-1: USB disconnect, device number 19 [ 767.337006][T16683] fuse: Bad value for 'fd' [ 768.496564][ T30] audit: type=1400 audit(1761186980.946:1306): avc: denied { map } for pid=16688 comm="syz.9.2326" path="socket:[60936]" dev="sockfs" ino=60936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 769.485931][ T30] audit: type=1400 audit(1761186981.946:1307): avc: denied { connect } for pid=16713 comm="syz.7.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 769.763908][ T30] audit: type=1400 audit(1761186982.176:1308): avc: denied { shutdown } for pid=16713 comm="syz.7.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 771.332244][T16735] siw: device registration error -23 [ 771.655479][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2341'. [ 772.095293][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 772.384588][T16748] ip6t_srh: unknown srh match flags 4000 [ 773.658632][T16761] FAULT_INJECTION: forcing a failure. [ 773.658632][T16761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.691658][T16761] CPU: 1 UID: 0 PID: 16761 Comm: syz.5.2346 Not tainted syzkaller #0 PREEMPT(full) [ 773.691684][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 773.691693][T16761] Call Trace: [ 773.691699][T16761] [ 773.691706][T16761] dump_stack_lvl+0x16c/0x1f0 [ 773.691735][T16761] should_fail_ex+0x512/0x640 [ 773.691757][T16761] _copy_from_user+0x2e/0xd0 [ 773.691777][T16761] copy_msghdr_from_user+0x98/0x160 [ 773.691799][T16761] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 773.691830][T16761] ? __lock_acquire+0x622/0x1c90 [ 773.691860][T16761] ___sys_recvmsg+0xdb/0x1a0 [ 773.691880][T16761] ? __pfx____sys_recvmsg+0x10/0x10 [ 773.691904][T16761] ? find_held_lock+0x2b/0x80 [ 773.691941][T16761] do_recvmmsg+0x2fe/0x750 [ 773.691965][T16761] ? __pfx_do_recvmmsg+0x10/0x10 [ 773.691990][T16761] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 773.692022][T16761] ? __fget_files+0x20e/0x3c0 [ 773.692043][T16761] __x64_sys_recvmmsg+0x22a/0x280 [ 773.692065][T16761] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 773.692093][T16761] do_syscall_64+0xcd/0xfa0 [ 773.692117][T16761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.692134][T16761] RIP: 0033:0x7f35f1d8efc9 [ 773.692148][T16761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.692163][T16761] RSP: 002b:00007f35efff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 773.692180][T16761] RAX: ffffffffffffffda RBX: 00007f35f1fe6090 RCX: 00007f35f1d8efc9 [ 773.692191][T16761] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000005 [ 773.692200][T16761] RBP: 00007f35efff6090 R08: 0000000000000000 R09: 0000000000000000 [ 773.692210][T16761] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 773.692219][T16761] R13: 00007f35f1fe6128 R14: 00007f35f1fe6090 R15: 00007ffe9cd17df8 [ 773.692241][T16761] [ 774.828306][T16776] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2349'. [ 775.838981][T16783] FAULT_INJECTION: forcing a failure. [ 775.838981][T16783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.858278][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.5.2351 Not tainted syzkaller #0 PREEMPT(full) [ 775.858302][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 775.858308][T16783] Call Trace: [ 775.858312][T16783] [ 775.858317][T16783] dump_stack_lvl+0x16c/0x1f0 [ 775.858337][T16783] should_fail_ex+0x512/0x640 [ 775.858352][T16783] _copy_from_user+0x2e/0xd0 [ 775.858370][T16783] __sys_bpf+0x248/0x4980 [ 775.858388][T16783] ? __pfx___sys_bpf+0x10/0x10 [ 775.858403][T16783] ? find_held_lock+0x2b/0x80 [ 775.858419][T16783] ? find_held_lock+0x2b/0x80 [ 775.858435][T16783] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 775.858459][T16783] ? fput+0x9b/0xd0 [ 775.858473][T16783] ? ksys_write+0x1ac/0x250 [ 775.858483][T16783] ? __pfx_ksys_write+0x10/0x10 [ 775.858495][T16783] __x64_sys_bpf+0x78/0xc0 [ 775.858510][T16783] ? lockdep_hardirqs_on+0x7c/0x110 [ 775.858525][T16783] do_syscall_64+0xcd/0xfa0 [ 775.858541][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.858552][T16783] RIP: 0033:0x7f35f1d8efc9 [ 775.858562][T16783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.858572][T16783] RSP: 002b:00007f35efff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.858582][T16783] RAX: ffffffffffffffda RBX: 00007f35f1fe6090 RCX: 00007f35f1d8efc9 [ 775.858589][T16783] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 775.858595][T16783] RBP: 00007f35efff6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.858601][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.858607][T16783] R13: 00007f35f1fe6128 R14: 00007f35f1fe6090 R15: 00007ffe9cd17df8 [ 775.858621][T16783] [ 776.394533][T16776] geneve3: entered allmulticast mode [ 776.594084][T16790] FAULT_INJECTION: forcing a failure. [ 776.594084][T16790] name failslab, interval 1, probability 0, space 0, times 0 [ 776.611304][T16790] CPU: 0 UID: 0 PID: 16790 Comm: syz.3.2353 Not tainted syzkaller #0 PREEMPT(full) [ 776.611326][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 776.611334][T16790] Call Trace: [ 776.611338][T16790] [ 776.611343][T16790] dump_stack_lvl+0x16c/0x1f0 [ 776.611363][T16790] should_fail_ex+0x512/0x640 [ 776.611376][T16790] ? fs_reclaim_acquire+0xae/0x150 [ 776.611397][T16790] should_failslab+0xc2/0x120 [ 776.611418][T16790] __kmalloc_noprof+0xdd/0x880 [ 776.611440][T16790] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 776.611465][T16790] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 776.611484][T16790] tomoyo_realpath_from_path+0xc2/0x6e0 [ 776.611506][T16790] ? tomoyo_profile+0x47/0x60 [ 776.611531][T16790] tomoyo_path_number_perm+0x245/0x580 [ 776.611557][T16790] ? tomoyo_path_number_perm+0x237/0x580 [ 776.611585][T16790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.611613][T16790] ? find_held_lock+0x2b/0x80 [ 776.611664][T16790] ? find_held_lock+0x2b/0x80 [ 776.611685][T16790] ? hook_file_ioctl_common+0x145/0x410 [ 776.611714][T16790] ? __fget_files+0x20e/0x3c0 [ 776.611737][T16790] security_file_ioctl+0x9b/0x240 [ 776.611764][T16790] __x64_sys_ioctl+0xb7/0x210 [ 776.611790][T16790] do_syscall_64+0xcd/0xfa0 [ 776.611818][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.611836][T16790] RIP: 0033:0x7ff35ed8efc9 [ 776.611851][T16790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.611868][T16790] RSP: 002b:00007ff35fc3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.611885][T16790] RAX: ffffffffffffffda RBX: 00007ff35efe6090 RCX: 00007ff35ed8efc9 [ 776.611897][T16790] RDX: 0000200000000080 RSI: 00000000c1105517 RDI: 0000000000000006 [ 776.611907][T16790] RBP: 00007ff35fc3d090 R08: 0000000000000000 R09: 0000000000000000 [ 776.611918][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.611928][T16790] R13: 00007ff35efe6128 R14: 00007ff35efe6090 R15: 00007ffc84b8fd18 [ 776.611954][T16790] [ 776.884389][T16790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.021512][T11160] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 777.174704][T11160] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 777.185013][T11160] usb 8-1: config 0 interface 0 has no altsetting 0 [ 777.201314][T11160] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 777.218601][T11160] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 777.240965][T11160] usb 8-1: Product: syz [ 777.263045][T11160] usb 8-1: Manufacturer: syz [ 777.267823][T11160] usb 8-1: SerialNumber: syz [ 777.286910][T11160] usb 8-1: config 0 descriptor?? [ 777.300411][T11160] usb 8-1: selecting invalid altsetting 0 [ 777.426956][ T30] audit: type=1400 audit(1761186989.886:1309): avc: denied { listen } for pid=16793 comm="syz.3.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 777.536376][T11160] usb 8-1: USB disconnect, device number 20 [ 777.545521][ T30] audit: type=1400 audit(1761186989.916:1310): avc: denied { connect } for pid=16793 comm="syz.3.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 777.548685][ T43] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 778.222872][ T43] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 778.327773][ T43] usb 10-1: config 0 interface 0 has no altsetting 0 [ 778.362632][ T43] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 778.372659][T16800] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2357'. [ 778.382002][ T43] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 778.403483][ T43] usb 10-1: Product: syz [ 778.421459][ T43] usb 10-1: Manufacturer: syz [ 778.426378][ T43] usb 10-1: SerialNumber: syz [ 778.477039][ T43] usb 10-1: config 0 descriptor?? [ 778.525112][ T43] usb 10-1: selecting invalid altsetting 0 [ 778.661332][T16804] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2358'. [ 778.984144][ T43] usb 10-1: USB disconnect, device number 35 [ 779.136832][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.625042][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2361'. [ 779.657925][T16816] ------------[ cut here ]------------ [ 779.664043][T16816] kernfs: can not remove 'bind', no directory [ 779.665546][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2361'. [ 779.673746][T16816] WARNING: CPU: 0 PID: 16816 at fs/kernfs/dir.c:1706 kernfs_remove_by_name_ns+0xff/0x110 [ 779.689008][T16816] Modules linked in: [ 779.693338][T16816] CPU: 0 UID: 0 PID: 16816 Comm: syz.0.2362 Not tainted syzkaller #0 PREEMPT(full) [ 779.702932][T16816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 779.713201][T16816] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 779.719444][T16816] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 49 8f 32 ff eb b1 e8 62 72 57 ff 90 48 c7 c7 c0 b7 a3 8b 4c 89 e6 e8 52 a5 15 ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 779.739328][T16816] RSP: 0018:ffffc9000214f9b8 EFLAGS: 00010282 [ 779.745599][T16816] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90012767000 [ 779.753874][T16816] RDX: 0000000000080000 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 779.762462][T16816] RBP: ffffffff8f273600 R08: 0000000000000001 R09: 0000000000000000 [ 779.770411][T16816] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1e67e0 [ 779.778964][T16816] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88805964d920 [ 779.787120][T16816] FS: 00007fab43aca6c0(0000) GS:ffff888124a0b000(0000) knlGS:0000000000000000 [ 779.796135][T16816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.802710][T16816] CR2: 000000110c40e62b CR3: 000000005f5b0000 CR4: 00000000003526f0 [ 779.810659][T16816] Call Trace: [ 779.813974][T16816] [ 779.816882][T16816] driver_remove_file+0x4a/0x60 [ 779.821725][T16816] bus_remove_driver+0x224/0x2c0 [ 779.826639][T16816] driver_unregister+0x76/0xb0 [ 779.831467][T16816] comedi_device_detach_locked+0x12f/0xa50 [ 779.837287][T16816] do_devconfig_ioctl+0x555/0x710 [ 779.842345][T16816] ? __mutex_lock+0x1c5/0x1060 [ 779.847091][T16816] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 779.852653][T16816] ? find_held_lock+0x2b/0x80 [ 779.857310][T16816] comedi_unlocked_ioctl+0x165d/0x2f00 [ 779.863175][T16816] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 779.868960][T16816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.875271][T16816] ? do_vfs_ioctl+0x128/0x14f0 [ 779.880016][T16816] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 779.885053][T16816] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 779.891909][T16816] ? hook_file_ioctl_common+0x145/0x410 [ 779.897434][T16816] ? selinux_file_ioctl+0x180/0x270 [ 779.902667][T16816] ? selinux_file_ioctl+0xb4/0x270 [ 779.907751][T16816] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 779.913653][T16816] __x64_sys_ioctl+0x18e/0x210 [ 779.918440][T16816] do_syscall_64+0xcd/0xfa0 [ 779.923016][T16816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.928905][T16816] RIP: 0033:0x7fab42b8efc9 [ 779.933392][T16816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.953394][T16816] RSP: 002b:00007fab43aca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.961872][T16816] RAX: ffffffffffffffda RBX: 00007fab42de5fa0 RCX: 00007fab42b8efc9 [ 779.970723][T16816] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 779.979483][T16816] RBP: 00007fab42c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 779.987497][T16816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.995554][T16816] R13: 00007fab42de6038 R14: 00007fab42de5fa0 R15: 00007ffd53a65b08 [ 780.003580][T16816] [ 780.006603][T16816] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 780.013876][T16816] CPU: 0 UID: 0 PID: 16816 Comm: syz.0.2362 Not tainted syzkaller #0 PREEMPT(full) [ 780.023239][T16816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 780.033286][T16816] Call Trace: [ 780.036541][T16816] [ 780.039446][T16816] dump_stack_lvl+0x3d/0x1f0 [ 780.044016][T16816] vpanic+0x640/0x6f0 [ 780.047984][T16816] ? kernfs_remove_by_name_ns+0xff/0x110 [ 780.053636][T16816] panic+0xca/0xd0 [ 780.057338][T16816] ? __pfx_panic+0x10/0x10 [ 780.061748][T16816] check_panic_on_warn+0xab/0xb0 [ 780.066693][T16816] __warn+0xf6/0x3c0 [ 780.070577][T16816] ? kernfs_remove_by_name_ns+0xff/0x110 [ 780.076189][T16816] report_bug+0x3c3/0x580 [ 780.080496][T16816] ? kernfs_remove_by_name_ns+0xff/0x110 [ 780.086121][T16816] handle_bug+0x184/0x210 [ 780.090434][T16816] exc_invalid_op+0x17/0x50 [ 780.094924][T16816] asm_exc_invalid_op+0x1a/0x20 [ 780.099751][T16816] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 780.105973][T16816] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 49 8f 32 ff eb b1 e8 62 72 57 ff 90 48 c7 c7 c0 b7 a3 8b 4c 89 e6 e8 52 a5 15 ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 780.125554][T16816] RSP: 0018:ffffc9000214f9b8 EFLAGS: 00010282 [ 780.131596][T16816] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90012767000 [ 780.139538][T16816] RDX: 0000000000080000 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 780.147481][T16816] RBP: ffffffff8f273600 R08: 0000000000000001 R09: 0000000000000000 [ 780.155435][T16816] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1e67e0 [ 780.163389][T16816] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88805964d920 [ 780.171337][T16816] ? __warn_printk+0x1a5/0x350 [ 780.176083][T16816] ? kernfs_remove_by_name_ns+0xfe/0x110 [ 780.181697][T16816] driver_remove_file+0x4a/0x60 [ 780.186520][T16816] bus_remove_driver+0x224/0x2c0 [ 780.191436][T16816] driver_unregister+0x76/0xb0 [ 780.196171][T16816] comedi_device_detach_locked+0x12f/0xa50 [ 780.201965][T16816] do_devconfig_ioctl+0x555/0x710 [ 780.206974][T16816] ? __mutex_lock+0x1c5/0x1060 [ 780.211711][T16816] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 780.217239][T16816] ? find_held_lock+0x2b/0x80 [ 780.221891][T16816] comedi_unlocked_ioctl+0x165d/0x2f00 [ 780.227325][T16816] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 780.233105][T16816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.238972][T16816] ? do_vfs_ioctl+0x128/0x14f0 [ 780.243727][T16816] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 780.248725][T16816] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 780.255547][T16816] ? hook_file_ioctl_common+0x145/0x410 [ 780.261068][T16816] ? selinux_file_ioctl+0x180/0x270 [ 780.266236][T16816] ? selinux_file_ioctl+0xb4/0x270 [ 780.271325][T16816] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 780.277115][T16816] __x64_sys_ioctl+0x18e/0x210 [ 780.281866][T16816] do_syscall_64+0xcd/0xfa0 [ 780.286356][T16816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.292218][T16816] RIP: 0033:0x7fab42b8efc9 [ 780.296604][T16816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.316181][T16816] RSP: 002b:00007fab43aca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.324563][T16816] RAX: ffffffffffffffda RBX: 00007fab42de5fa0 RCX: 00007fab42b8efc9 [ 780.332506][T16816] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 780.340445][T16816] RBP: 00007fab42c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 780.348384][T16816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.356328][T16816] R13: 00007fab42de6038 R14: 00007fab42de5fa0 R15: 00007ffd53a65b08 [ 780.364277][T16816] [ 780.367477][T16816] Kernel Offset: disabled [ 780.371773][T16816] Rebooting in 86400 seconds..