last executing test programs: 31m24.336673811s ago: executing program 32 (id=319): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x301}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 26m31.348169318s ago: executing program 33 (id=1516): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x22020600) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$getflags(r3, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0xfffffffc, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0x2, 0x3, 0x3c76, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0xa, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10008, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019340)=@newsa={0x20c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x73}, {@in6=@mcast2, 0x4ce, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, {0x0, 0x192, 0x9ba3, 0xffff, 0x10008251c, 0x5, 0x81, 0xe02}, {0xffffffffffffffff, 0x0, 0x19, 0x4}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x109, 0x3, {{'deflate\x00'}, 0x608, "41f36a4be351117ffa4963176d5b2a662685c245968b9b7fd8df3008504f9532775a90c42766786840aab15a04bea058bc3624564e66fbb7b3e8393f407b3d7d180affde5fc8e173f47cc849d85ab9f03a0b234730564846b5ae78a6bcb76d715832cc23c8c86e0a29eddc3f755fde410000000000000002a280e148d7ef3089b3cf02cc7e877ae801aa8378aec14e033214bdba9119261aeb5f836a22c9e6c892aaf5de457ed84dae8148b68af4ebb2c92f5ca094f2428d31ec3131320c1bd49b"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28, 0xd2eb}}]}, 0x20c}}, 0x8c4) 14m53.372786716s ago: executing program 34 (id=4319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x9, 0xc, 0x3, 0x405, 0x1, 0x4, 0x1000, 0x7fffffff, 0x2, 0x8, 0x800, 0x5, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x400, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x0, 0xa, 0x8, 0x2, 0x1009, 0x804d81, 0x2, 0x8c00, 0x8, 0x939, 0x5, 0x9, 0x4, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x0, 0x5, 0x80000001, 0x6, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x1, 0x5, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x20003, 0x5, 0x9, 0x80, 0xb, 0x1, 0x3c, 0xa1, 0x100004, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xb, 0xffff3f15, 0xa, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1000001, 0xb, 0x8, 0x3, 0xfffffff7, 0x2, 0x24c, 0x800001ff, 0x9, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffa, 0x8, 0xff, 0x1, 0x8000, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x7, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10003, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x4, 0xff, 0x5, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x40, 0x8000, 0x8e, 0xf3, 0x80004, 0x8, 0x1, 0xfffdff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0x10, 0x1, 0x1, 0xc3, 0x4, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x6f68, 0x6, 0x80000002, 0x1, 0xfffffff3, 0xd077, 0x1, 0xffffffff, 0x1f, 0x81, 0x0, 0x6, 0x2, 0x200, 0x1000, 0x2, 0x66608000, 0x5, 0x7fb, 0x6, 0x3, 0xa476, 0x5, 0x29, 0x3, 0xd, 0x0, 0x1, 0x1, 0x8, 0x61, 0x200010, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x2, 0x8, 0x8, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x2, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x0, 0x3}) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r4, 0x4, 0x40800) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r7 = openat$cgroup_ro(r6, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05", @ANYRES8=r5, @ANYRES16=r7], 0x0) 14m53.237408392s ago: executing program 35 (id=4320): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'ip6tnl0\x00', @remote}) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000200)={0x0, 0x0, 0x0, @lost_msgs}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102399, 0xfffffe44) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4054084}, 0x20000004) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[], 0x318c) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x80002) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000006c0)) syz_clone(0x8c229300, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) socket$key(0xf, 0x3, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) 14m53.065697224s ago: executing program 36 (id=4317): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x304000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200000002) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f00000000c0), 0x0, r6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000300)={0x8, 0x0, r6}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000380)=@arm64) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) cachestat(r8, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r10, r11, 0x0) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x50]}, 0x2a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14m52.510407765s ago: executing program 37 (id=4322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb) 14m52.256209266s ago: executing program 38 (id=4321): bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x10880800, &(0x7f00000000c0)="6c3fb2de079c7822bb4d76730df5ec07790dfa458e7caf7032c70d0dee86a2bc54d41b0a8ad2345fa97c8f264d5684b61089cdb67ea7dcb8410c6a9d0b69256442e23c9f2b19c77a574d5de22b6810d91881f54912fd0ea0be829a047d153c638fbbac3fa3843a7c677a3ef56c86703c326ce573", 0x74, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000300)="83520842b2616521bb697f4b56eb164ba37bc6a3edb1b374c61afb2e9429666f5c23912bb301dfbcee390cf49e01b87fd86dad95004d86497197f7c8ab93a1922533ca") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000080)={[{@flock_strict}, {@dyn}]}) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xcb0a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r5 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) 11m39.81354164s ago: executing program 5 (id=5059): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$nl_route_sched(r3, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11m35.472810175s ago: executing program 39 (id=5026): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0xfffffffffffffffc) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x800) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000016000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 11m34.095153891s ago: executing program 5 (id=5075): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x5ce, 0x0, &(0x7f00000000c0), &(0x7f0000000480)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) acct(&(0x7f0000000080)='./cgroup\x00') 11m31.953263546s ago: executing program 5 (id=5077): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001600)=""/4096, 0x1000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) 11m31.601300855s ago: executing program 5 (id=5080): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030004ac0f00"], 0x58}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r4 = syz_open_dev$video4linux(&(0x7f0000000500), 0x7, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x94e, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_thresh={0x8, 0xb, 0xa6d0}]}, 0x10c}}, 0x4000084) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x10001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc010) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f00000002c0)={0x0, {0x7, 0x8001}}) 11m31.025740639s ago: executing program 5 (id=5081): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x1e, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0xf0ffffff}], 0x0, 0x0, 0x0}) 11m30.729134627s ago: executing program 5 (id=5083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20008040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x484041, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x9801) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p={0x18, 0x1, 0x0, 0x0, 0x25702090}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m15.476967481s ago: executing program 40 (id=5083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20008040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x484041, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x9801) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p={0x18, 0x1, 0x0, 0x0, 0x25702090}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m1.089544517s ago: executing program 7 (id=5430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}, 0x1, 0x0, 0xfeff}, 0x0) 10m0.817195625s ago: executing program 7 (id=5434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, r4, &(0x7f0000000400)='./file0\x00', 0x102) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xa8, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x14}, 0x8000804) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a40)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0xc040) sendmsg$nl_xfrm(r5, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c000280050001ffffff8400240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c0010"], 0x1f0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006"], 0x58}}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 9m59.120104541s ago: executing program 7 (id=5440): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 9m57.924514043s ago: executing program 7 (id=5445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a911f1e1c000000000000070000000900010073797a30"], 0xb0}}, 0x0) 9m56.376244944s ago: executing program 7 (id=5451): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0xfffffffffffffffb) capset(0x0, 0x0) syz_usb_ep_write(r0, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 9m51.052844677s ago: executing program 7 (id=5468): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0xfffffffffffffffc) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x800) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000001600010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 9m35.742481565s ago: executing program 41 (id=5468): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0xfffffffffffffffc) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x800) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000001600010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 9m13.887895956s ago: executing program 2 (id=5606): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x350000, 0x0) syz_io_uring_setup(0x5e16, &(0x7f0000000980)={0x0, 0xd6bd, 0x4, 0x0, 0x257, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000300)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) creat(0x0, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x41, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @generic={0xfe, 0x6, 0x9, 0x3, 0x4e}, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x3, 0x1, 0xc, 0x9, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r10, &(0x7f0000000340)=[{&(0x7f0000002180)=""/4082, 0xff2}], 0x1) 9m8.140252747s ago: executing program 2 (id=5620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socket$inet6(0xa, 0x4, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000300)=0x1f06) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xa51}]}) 9m6.893289556s ago: executing program 2 (id=5626): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x350000, 0x0) syz_io_uring_setup(0x5e16, &(0x7f0000000980)={0x0, 0xd6bd, 0x4, 0x0, 0x257, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000300)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) creat(0x0, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x41, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @generic={0xfe, 0x6, 0x9, 0x3, 0x4e}, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x3, 0x1, 0xc, 0x9, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r10, &(0x7f0000000340)=[{&(0x7f0000002180)=""/4082, 0xff2}], 0x1) 9m0.577592241s ago: executing program 2 (id=5639): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) pwrite64(r0, &(0x7f0000000500)="54b16a8a478be39a333f84f052aac3c8c3cc96f3fe344bf327b39459ed45c3a4ef94a16b3203fa0320f2bcdb54abf402161481d52191cb50c5192014a842918a0dcce2c90447ef", 0x47, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) r1 = syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) setpgid(0x0, r1) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) fcntl$setownex(r4, 0xf, &(0x7f0000000200)={0x0, r3}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000480)={'\x00', 0x2, 0x3, 0x7, 0x4, 0xd02, r3}) (async) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) open_tree(r6, &(0x7f00000000c0)='./file1\x00', 0x80000) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000180), 0x2, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf2505000000050002006e000000050006000d0000002000018008000100", @ANYRES32=r5, @ANYBLOB="140002006d616373656330000000000000000000050002000700000005000200000000000500060006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0x9, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r10, 0x80046402, 0x0) (async) close(r10) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r11}) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x80d02, 0x0) dup3(r12, r9, 0x0) 8m59.568469799s ago: executing program 2 (id=5641): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x4000280) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="0080", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 8m58.648222095s ago: executing program 2 (id=5647): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa}) 8m57.978906504s ago: executing program 42 (id=5647): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa}) 8m27.711230862s ago: executing program 3 (id=5805): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m27.571224922s ago: executing program 3 (id=5807): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee5", 0x44}], 0x1}}], 0x1, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x90, &(0x7f0000000100)=""/144}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 8m27.444828078s ago: executing program 3 (id=5811): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)={0x40, 0x21, 0x15, {0x15, 0x1, "5cc03ecca353976f2837ff70af796fbed3997d"}}, 0x0, 0x0, 0x0}, 0x0) 8m25.261366281s ago: executing program 3 (id=5832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x10a, 0x0, 0xd}, {0xb95, 0x0, 0x8}]}) 8m24.480749733s ago: executing program 3 (id=5835): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8m24.380696406s ago: executing program 3 (id=5838): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x787083, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m9.32086179s ago: executing program 43 (id=5838): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x787083, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m59.261157784s ago: executing program 4 (id=7864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000002ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000cb756d970000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14144300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000027f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m54.651428886s ago: executing program 4 (id=7876): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x28002, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r5, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x17f0, &(0x7f0000000140)={0x0, 0x4000aee0, 0x1000, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000240)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4200}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r9 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1m52.169165573s ago: executing program 4 (id=7884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nicvf0\x00'}) getpeername(r3, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1084}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000001680)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "55fa0a", 0x44, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, {}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x8e, 0x2, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x6, 0x3}, 0x2, {0xd, 0x5, 0x3, 0x13, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1m51.188871224s ago: executing program 4 (id=7888): epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260d, 0x4000, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) ptrace(0x4206, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009217297f0ebae8aa605000001220500090581030002000007"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00270510000300c94ffb00"], 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x83, 0x70, 0x9, 0x0}) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) syz_open_procfs(0x0, 0x0) io_setup(0x8, &(0x7f0000000680)) 1m46.493984904s ago: executing program 4 (id=7907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x0, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 1m45.905804475s ago: executing program 4 (id=7909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) syz_emit_ethernet(0xdff, &(0x7f00000019c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @random="202b25cac47d", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "944001", 0x0, 0x2c, 0x1, @mcast1, @local}}}}, 0x0) 1m45.446102597s ago: executing program 44 (id=7909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) syz_emit_ethernet(0xdff, &(0x7f00000019c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @random="202b25cac47d", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "944001", 0x0, 0x2c, 0x1, @mcast1, @local}}}}, 0x0) 8.572601966s ago: executing program 0 (id=8245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r4 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 7.492871411s ago: executing program 1 (id=8249): close(0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) mkdir(0x0, 0x2) (rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000001dc00)="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", 0x2000, 0x0) socket(0x2, 0x80805, 0x0) (async, rerun: 32) socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 32) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 32) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240), &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x6, 0x80000000, 0x7, 0xa00000, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000300)=0x6, 0x0, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async, rerun: 64) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async, rerun: 64) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 7.333654567s ago: executing program 1 (id=8252): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 7.288142984s ago: executing program 1 (id=8253): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005900)=[{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="55d006f20ffd8d6310db84c417d71fd6791b781cbb3f6dfb0baf1bfefb9df6a68f92d554a7a3bbe554", 0x29}], 0x2, 0x0, 0x0, 0x48090}], 0x1, 0x20008000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 7.019585132s ago: executing program 1 (id=8254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.745659937s ago: executing program 0 (id=8255): syz_emit_vhci(0x0, 0x0) 6.643677986s ago: executing program 8 (id=8256): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x4, 0x7, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1]}}}, @hoplimit={{0x14}}, @hopopts={{0x68, 0x29, 0x36, {0x5e, 0x9, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x1, '+'}]}}}], 0xd8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.595014672s ago: executing program 0 (id=8257): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{}, {}]}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, 0x0, 0x0, 0x12}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) nanosleep(&(0x7f0000000380), 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) 5.612888285s ago: executing program 0 (id=8260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)=0x8, 0x4) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5.103485415s ago: executing program 8 (id=8261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) recvmsg(r0, &(0x7f0000001a40)={&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}, 0x121) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x28, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @alu={0x7, 0x0, 0xc, 0x7, 0x9, 0x2, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f00000000c0)='GPL\x00', 0x52, 0xca, &(0x7f00000003c0)=""/202, 0x89aa78989724e9ba, 0x4, '\x00', 0x0, @fallback=0x19, r3, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x10, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x3, &(0x7f0000000540)=[r3, r2, r3], &(0x7f0000000580)=[{0x0, 0x1, 0xc, 0x8}, {0x2, 0x5, 0xf, 0x8}, {0x4, 0x2, 0xffffffff, 0x9}], 0x10, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000002ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000cb756d970000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14144300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000027f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.735370203s ago: executing program 6 (id=8264): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) pipe2(0x0, 0x184900) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x406f410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f00000002c0)=0x7b, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl(0xffffffffffffffff, 0xffffffff, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x2, {}, {0x1}, 0x1}], 0x20) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 4.557567808s ago: executing program 1 (id=8265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003780)={0x2020}, 0x2020) r3 = accept$inet(r2, 0x0, &(0x7f0000000900)) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000008c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000880)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r9, 0x0, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r6}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x25, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x2, 0x5, 0x7, 0xffffffffffffffe0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6f7d55fc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x21, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x9, 0x16845526d8029ef7, 0x6, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x65, &(0x7f0000000200)=""/101, 0x41000, 0x21, '\x00', r4, @fallback=0x2e, r7, 0x8, &(0x7f0000000580)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, 0xffffffffffffffff, 0x6, &(0x7f00000005c0)=[r1], &(0x7f0000000600)=[{0x1, 0x1, 0x1, 0xb}, {0x3, 0x5, 0x2}, {0x5, 0x4, 0xa, 0xa}, {0x1, 0x5, 0xe, 0xb}, {0x5, 0x4, 0x8, 0x4}, {0x1, 0x2, 0xc, 0xc}]}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r12}, 0x18) 4.55628712s ago: executing program 8 (id=8266): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000300)=ANY=[], 0x18c) r4 = open$dir(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40080, 0x4) fspick(r4, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) r5 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x14000, 0x87) unlinkat(r5, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 4.277856803s ago: executing program 9 (id=8269): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000180)=0x7) dup3(r1, r0, 0x0) 4.116846746s ago: executing program 9 (id=8270): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dff10b13a7fb93a1b67a21efd99774a3d2a231cd1d7e43cadd0848c0db6567233b347389449db108792a577254b3c3fe7ce14696f77e9845c1d8113c8e192143c68dec90bf1310b7b37aaa4ef936a822da217cc4d19fff67537f97761471df5619f9c2771810bc3dc50ee0d9c3c87fdc796be9f79aec628d8bb14a1c3612d67a039d02fb105dac73352cf93b78046e3dcbd9e226b0de526aa5480759d4acbe841a42503f9e0cd6b", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x21468872, 0x4, 0x7}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x1, 0x2, 0x0, 0x14000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x808, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r3, r4, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x38101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f000000f000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.095636501s ago: executing program 0 (id=8271): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x350000, 0x0) syz_io_uring_setup(0x5e16, &(0x7f0000000980)={0x0, 0xd6bd, 0x4, 0x0, 0x257, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000300)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) creat(0x0, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x41, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @generic={0xfe, 0x6, 0x9, 0x3, 0x4e}, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x3, 0x1, 0xc, 0x9, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r10, &(0x7f0000000340)=[{&(0x7f0000002180)=""/4082, 0xff2}], 0x1) 3.737465024s ago: executing program 9 (id=8272): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x2, 0x0, [{0x0, 0x77, &(0x7f0000000180)=""/119}, {0x8000000, 0x50, &(0x7f0000000580)=""/80}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.724599622s ago: executing program 9 (id=8273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffed0, &(0x7f0000000000)=[{0x2000, 0x5}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000300)={0x0, 0x22, 0xc7, {0xc7, 0x24, "de9492a69a477e30d1ea8e8ecf02f5143410ff935ddb9e9e07affc859772924cabfe54e145878199d61011dbaabf1e79e4a7dbdbfd21abf61f6ad0c1fd7e2007d83aee590d669b40be851e4dc9e20699658bca87f3e7a6c6c6009e6f71d0912b0367c4b69cc3a4acf71af161d718b92d0bb90b83d87d961e3d110ede0b577eac0adf6dfe6d51a82b63639f34d77b9751e4cda8a74cfcea0d62ad5c390d1d79b2357c76f94a4975ec00edf2884649d159c3640e569784817fd16d8be6c8304bc5b24fc956bc"}}, &(0x7f0000000100)={0x0, 0x3, 0x79, @string={0x79, 0x3, "804a1c1c9aa18b9e9a71862407b6ae98786ec487d8e69c54cb46ded51cb557d207db2419074c74d705fbe858b4ed68efdec45e264565cd894b0d4f5369efb682cf764034d283d38794684982a07ff62f200c29014ba7290cd54159bdba02c34c85a84e515b596d3e2edd4a487c5bf45eb86cc7fa0a8903"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x8, 0x2, 0x3, "5ad2b924", "9b0412f7"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x9, 0x0, 0x80, 0x10, 0x1000}}}, &(0x7f0000000980)={0x84, &(0x7f0000000a40)=ANY=[@ANYBLOB="4013d30000008dccc10b95f6aab9dfd82eed4b5ca11e5739411b1b2cec7cfca247355932e18fb4e098b747ff3321f40b2f16771cc56359f4e7f8e36a7a26a03c8a2beb1d8e7437685360f64962268ae2a15481bcd0b93b58ec6e5e1c7742cad33dcfe9f86a29ce5b365a89373fdf92d8e07db5f4b0c4e5fc4a9ad1ba7fc09a51b6219f6645aa32dd084d7e83026f3ea291075b04f05061372a4708570fbf18b8839c59b4cc9e0c86a8ef2b9c0887c17a821553b2361c7f310f64ba18e3ac58f121e08a7523d9587469004a7434c43ab4be8b92eb9e41d749a20dc1d84e"], &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0xc0, 0x80, [0xf780]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x5d}, &(0x7f0000000740)={0x40, 0xb, 0x2, "940d"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "9d2a"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x3985}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xff}}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.039736765s ago: executing program 8 (id=8274): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0x2ea}, &(0x7f0000000980)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x9000000, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) 2.115442511s ago: executing program 8 (id=8275): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3518, 0xaddf, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000040), 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x0, 0xfffffffe, 0x0, [{0x5, 0x4, 0x87, '\x00', 0xc}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xe, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfc, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0x4c, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x2}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000180), 0x8) 1.846181458s ago: executing program 6 (id=8276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x2e2}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xc}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 1.784802367s ago: executing program 6 (id=8277): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) recvmsg(r0, &(0x7f0000001a40)={&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}, 0x121) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x28, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @alu={0x7, 0x0, 0xc, 0x7, 0x9, 0x2, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f00000000c0)='GPL\x00', 0x52, 0xca, &(0x7f00000003c0)=""/202, 0x89aa78989724e9ba, 0x4, '\x00', 0x0, @fallback=0x19, r3, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x10, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x3, &(0x7f0000000540)=[r3, r2, r3], &(0x7f0000000580)=[{0x0, 0x1, 0xc, 0x8}, {0x2, 0x5, 0xf, 0x8}, {0x4, 0x2, 0xffffffff, 0x9}], 0x10, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000002ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000cb756d970000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14144300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000027f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.457680691s ago: executing program 1 (id=8278): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f00000010c0)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x3c}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140002019ff61c9f3024000000000000000000000900010073797a3200001b00"], 0x34}}, 0x800) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4041) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x400000f1, 0x0, 0x1}]}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.445890612s ago: executing program 6 (id=8279): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) (async) listen(r0, 0x7ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf8, 0x100, 0x5, 0x12}, &(0x7f00000000c0), &(0x7f0000000300)) (async) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf8, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4000, 0x40, 0x8}, 0x18) (async) r5 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4000, 0x40, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8}, @ldst={0x1, 0x2, 0x2, 0x7, 0x6, 0x0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x85, &(0x7f0000000580)=""/133, 0x40f00, 0xd, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x2, 0x5, 0x2, 0x9}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000400)=[r5, 0xffffffffffffffff, r6, r7, 0x1, r8], 0x0, 0x10, 0x4}, 0x94) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 495.182667ms ago: executing program 9 (id=8280): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000000000000c41000000140014"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x12, 0x0, &(0x7f0000000040)) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001380), &(0x7f00000013c0)=0x4) 317.487083ms ago: executing program 0 (id=8281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000009c0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0xffffffff}, @local, 0x0, 0x864, 0x5e, 0x200000000000, 0x100000000000006}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000005c0)=""/157, 0x9d}], 0x3}, 0x1}], 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) 107.610368ms ago: executing program 6 (id=8282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000500000008002600"], 0x40}}, 0x200040b4) 25.606162ms ago: executing program 6 (id=8283): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x2, 0x0, [{0x0, 0x77, &(0x7f0000000180)=""/119}, {0x8000000, 0x50, &(0x7f0000000580)=""/80}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 17.28628ms ago: executing program 8 (id=8284): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x63) r1 = dup(r0) getsockopt$inet_buf(r1, 0x118, 0x10, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="ec75b20b", @ANYRES16=r3, @ANYBLOB="010009bd7000fbdbdfa55500000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000b00000043000400"], 0x28}, 0x1, 0x0, 0x0, 0x40080a4}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGPHYS(r7, 0x40044583, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r6, 0x60}], 0x1, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x7, 0xc1, [@multicast1]}, @ssrr={0x89, 0x3, 0x21}]}}, @timestamp={0xd, 0x0, 0x0, 0xc, 0x3, 0xb, 0x401, 0x8000}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000ff7f00000200000002"], 0x50) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x200) 0s ago: executing program 9 (id=8285): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0x2ea}, &(0x7f0000000980)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x9000000, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.8.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa335d8f749 code=0x7fc00000 [ 1903.567999][ T30] audit: type=1400 audit(1910.536:2241): avc: denied { setopt } for pid=564 comm="syz.1.7886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1903.589018][ T566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7886'. [ 1903.953227][ T30] audit: type=1400 audit(1910.926:2242): avc: denied { write } for pid=580 comm="syz.1.7891" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1904.112451][ T30] audit: type=1326 audit(1911.076:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.8.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa335d8f749 code=0x7fc00000 [ 1904.151600][T32287] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1904.431572][ T30] audit: type=1326 audit(1911.076:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.8.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa335d8f749 code=0x7fc00000 [ 1904.455718][ T586] FAULT_INJECTION: forcing a failure. [ 1904.455718][ T586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1904.475480][ T586] CPU: 0 UID: 0 PID: 586 Comm: syz.6.7892 Tainted: G L syzkaller #0 PREEMPT(full) [ 1904.475500][ T586] Tainted: [L]=SOFTLOCKUP [ 1904.475503][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1904.475509][ T586] Call Trace: [ 1904.475513][ T586] [ 1904.475517][ T586] dump_stack_lvl+0x16c/0x1f0 [ 1904.475534][ T586] should_fail_ex+0x512/0x640 [ 1904.475552][ T586] _copy_from_user+0x2e/0xd0 [ 1904.475568][ T586] do_sock_getsockopt+0x3a1/0x410 [ 1904.475583][ T586] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1904.475595][ T586] ? __fget_files+0x204/0x3c0 [ 1904.475616][ T586] __sys_getsockopt+0x12f/0x260 [ 1904.475628][ T586] __x64_sys_getsockopt+0xbd/0x160 [ 1904.475637][ T586] ? do_syscall_64+0x91/0xf80 [ 1904.475650][ T586] ? lockdep_hardirqs_on+0x7c/0x110 [ 1904.475662][ T586] do_syscall_64+0xcd/0xf80 [ 1904.475676][ T586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.475687][ T586] RIP: 0033:0x7fe23a58f749 [ 1904.475696][ T586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1904.475706][ T586] RSP: 002b:00007fe23b4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1904.475717][ T586] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58f749 [ 1904.475723][ T586] RDX: 0000000000000005 RSI: 0000000000000006 RDI: 0000000000000004 [ 1904.475729][ T586] RBP: 00007fe23b4a9090 R08: 00002000000000c0 R09: 0000000000000000 [ 1904.475735][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.475741][ T586] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1904.475754][ T586] [ 1904.671617][T32287] usb 5-1: Using ep0 maxpacket: 16 [ 1904.797440][ T590] FAULT_INJECTION: forcing a failure. [ 1904.797440][ T590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1904.811599][ T590] CPU: 0 UID: 0 PID: 590 Comm: syz.6.7894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1904.811627][ T590] Tainted: [L]=SOFTLOCKUP [ 1904.811634][ T590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1904.811644][ T590] Call Trace: [ 1904.811650][ T590] [ 1904.811656][ T590] dump_stack_lvl+0x16c/0x1f0 [ 1904.811685][ T590] should_fail_ex+0x512/0x640 [ 1904.811708][ T590] _copy_from_user+0x2e/0xd0 [ 1904.811724][ T590] copy_msghdr_from_user+0x98/0x160 [ 1904.811736][ T590] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1904.811753][ T590] ___sys_sendmsg+0xfe/0x1d0 [ 1904.811764][ T590] ? __pfx____sys_sendmsg+0x10/0x10 [ 1904.811790][ T590] __sys_sendmsg+0x16d/0x220 [ 1904.811801][ T590] ? __pfx___sys_sendmsg+0x10/0x10 [ 1904.811819][ T590] do_syscall_64+0xcd/0xf80 [ 1904.811833][ T590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.811844][ T590] RIP: 0033:0x7fe23a58f749 [ 1904.811853][ T590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1904.811864][ T590] RSP: 002b:00007fe23b4a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.811875][ T590] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58f749 [ 1904.811881][ T590] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1904.811888][ T590] RBP: 00007fe23b4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.811894][ T590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.811899][ T590] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1904.811913][ T590] [ 1904.988867][T32287] usb 5-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 1904.999041][T32287] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1905.015732][T32287] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1905.024834][T32287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.049811][T32287] usb 5-1: config 0 descriptor?? [ 1905.432910][T32287] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1905.709489][T32386] Bluetooth: hci3: command 0x1003 tx timeout [ 1905.716073][T12879] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1906.364373][ T608] fuse: Bad value for 'rootmode' [ 1906.461985][ T5903] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1907.064046][ T5903] usb 2-1: config 7 has an invalid interface number: 175 but max is 0 [ 1907.080386][ T5903] usb 2-1: config 7 has no interface number 0 [ 1907.093884][ T5903] usb 2-1: config 7 interface 175 has no altsetting 0 [ 1907.109185][ T5903] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=1d.47 [ 1907.128017][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.144756][ T5903] usb 2-1: Product: syz [ 1907.151900][ T5903] usb 2-1: Manufacturer: syz [ 1907.156521][ T5903] usb 2-1: SerialNumber: syz [ 1908.081575][T21480] usb 5-1: USB disconnect, device number 88 [ 1908.117533][ T5903] peak_usb 2-1:7.175: probe with driver peak_usb failed with error 175 [ 1908.154344][ T5903] usb 2-1: USB disconnect, device number 67 [ 1908.493058][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1908.493074][ T30] audit: type=1400 audit(1915.456:2250): avc: denied { mounton } for pid=618 comm="syz.8.7905" path="/bus" dev="ramfs" ino=125672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1908.538164][ T626] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1908.548037][ T626] overlayfs: failed to set xattr on upper [ 1908.554366][ T626] overlayfs: ...falling back to redirect_dir=nofollow. [ 1908.561331][ T626] overlayfs: ...falling back to index=off. [ 1908.575053][T27403] syz_tun (unregistering): left allmulticast mode [ 1908.600250][ T626] overlayfs: ...falling back to uuid=null. [ 1908.771250][T15513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.991180][T15513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.048542][ T631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1909.154451][T15513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.420467][T15513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.445385][T32386] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1909.457374][T32386] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1909.465907][T32386] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1909.476658][T32386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1909.484529][T32386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1909.505955][ T645] binder: 644:645 unknown command 0 [ 1909.527470][ T645] binder: 644:645 ioctl c0306201 200000000080 returned -22 [ 1909.566941][ T645] binder: 644:645 unknown command 0 [ 1909.577318][ T642] lo speed is unknown, defaulting to 1000 [ 1909.591614][ T645] binder: 644:645 ioctl c0306201 2000000003c0 returned -22 [ 1909.814349][ T652] syzkaller1: entered promiscuous mode [ 1909.819882][ T652] syzkaller1: entered allmulticast mode [ 1909.895260][T15513] bridge_slave_1: left allmulticast mode [ 1909.901305][T15513] bridge_slave_1: left promiscuous mode [ 1909.907375][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.087501][T15513] bridge_slave_0: left allmulticast mode [ 1910.107625][T15513] bridge_slave_0: left promiscuous mode [ 1910.122982][ T660] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7906'. [ 1910.135131][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.604098][ T660] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7906'. [ 1910.862111][T15513] dvmrp8 (unregistering): left allmulticast mode [ 1911.279514][T15513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.301078][T15513] bond0 (unregistering): Released all slaves [ 1911.513989][T15513] tipc: Disabling bearer [ 1911.523671][T15513] tipc: Left network mode [ 1911.571786][T32386] Bluetooth: hci0: command tx timeout [ 1911.602096][ T686] fuse: Unknown parameter 'use00000000000000000000' [ 1911.658582][ T642] chnl_net:caif_netlink_parms(): no params data found [ 1911.680181][ T690] FAULT_INJECTION: forcing a failure. [ 1911.680181][ T690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1911.694075][ T690] CPU: 0 UID: 0 PID: 690 Comm: syz.6.7927 Tainted: G L syzkaller #0 PREEMPT(full) [ 1911.694102][ T690] Tainted: [L]=SOFTLOCKUP [ 1911.694108][ T690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1911.694116][ T690] Call Trace: [ 1911.694123][ T690] [ 1911.694129][ T690] dump_stack_lvl+0x16c/0x1f0 [ 1911.694154][ T690] should_fail_ex+0x512/0x640 [ 1911.694181][ T690] _copy_from_user+0x2e/0xd0 [ 1911.694206][ T690] copy_msghdr_from_user+0x98/0x160 [ 1911.694224][ T690] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1911.694254][ T690] ___sys_sendmsg+0xfe/0x1d0 [ 1911.694273][ T690] ? __pfx____sys_sendmsg+0x10/0x10 [ 1911.694320][ T690] __sys_sendmsg+0x16d/0x220 [ 1911.694336][ T690] ? __pfx___sys_sendmsg+0x10/0x10 [ 1911.694377][ T690] do_syscall_64+0xcd/0xf80 [ 1911.694400][ T690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.694418][ T690] RIP: 0033:0x7fe23a58f749 [ 1911.694431][ T690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1911.694447][ T690] RSP: 002b:00007fe23b4a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1911.694463][ T690] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58f749 [ 1911.694474][ T690] RDX: 0000000000004000 RSI: 0000200000000740 RDI: 0000000000000004 [ 1911.694484][ T690] RBP: 00007fe23b4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1911.694494][ T690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1911.694504][ T690] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1911.694529][ T690] [ 1912.219780][T15513] hsr_slave_0: left promiscuous mode [ 1912.233512][T15513] hsr_slave_1: left promiscuous mode [ 1912.868506][ T30] audit: type=1400 audit(1919.206:2251): avc: denied { watch } for pid=692 comm="syz.6.7928" path="/32/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1913.088756][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1913.124676][T15513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1913.142126][ T30] audit: type=1400 audit(1919.206:2252): avc: denied { watch_sb watch_reads } for pid=692 comm="syz.6.7928" path="/32/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1913.185011][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.213605][T15513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1913.520203][T15513] veth1_macvtap: left promiscuous mode [ 1913.538461][ T706] fuse: Unknown parameter 'user_i00000000000000000000' [ 1913.548111][T15513] veth0_macvtap: left promiscuous mode [ 1913.607082][T15513] veth1_vlan: left promiscuous mode [ 1913.641585][T32386] Bluetooth: hci0: command tx timeout [ 1913.802058][T15513] veth0_vlan: left promiscuous mode [ 1913.976053][ T715] FAULT_INJECTION: forcing a failure. [ 1913.976053][ T715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1914.049670][ T715] CPU: 1 UID: 0 PID: 715 Comm: syz.0.7934 Tainted: G L syzkaller #0 PREEMPT(full) [ 1914.049690][ T715] Tainted: [L]=SOFTLOCKUP [ 1914.049694][ T715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1914.049700][ T715] Call Trace: [ 1914.049704][ T715] [ 1914.049708][ T715] dump_stack_lvl+0x16c/0x1f0 [ 1914.049726][ T715] should_fail_ex+0x512/0x640 [ 1914.049744][ T715] _copy_from_user+0x2e/0xd0 [ 1914.049760][ T715] copy_msghdr_from_user+0x98/0x160 [ 1914.049771][ T715] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1914.049788][ T715] ___sys_sendmsg+0xfe/0x1d0 [ 1914.049799][ T715] ? __pfx____sys_sendmsg+0x10/0x10 [ 1914.049824][ T715] __sys_sendmsg+0x16d/0x220 [ 1914.049834][ T715] ? __pfx___sys_sendmsg+0x10/0x10 [ 1914.049853][ T715] do_syscall_64+0xcd/0xf80 [ 1914.049867][ T715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.049879][ T715] RIP: 0033:0x7fda7f58f749 [ 1914.049887][ T715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1914.049898][ T715] RSP: 002b:00007fda8040a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1914.049908][ T715] RAX: ffffffffffffffda RBX: 00007fda7f7e6090 RCX: 00007fda7f58f749 [ 1914.049915][ T715] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1914.049921][ T715] RBP: 00007fda8040a090 R08: 0000000000000000 R09: 0000000000000000 [ 1914.049927][ T715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.049933][ T715] R13: 00007fda7f7e6128 R14: 00007fda7f7e6090 R15: 00007fff181f8d98 [ 1914.049946][ T715] [ 1914.318572][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.731546][T32386] Bluetooth: hci0: command tx timeout [ 1915.972704][T15513] team0 (unregistering): Port device team_slave_1 removed [ 1916.101794][T15513] team0 (unregistering): Port device team_slave_0 removed [ 1916.637744][ T728] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1917.276754][ T642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.287427][ T642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.371754][ T642] bridge_slave_0: entered allmulticast mode [ 1917.431627][ T642] bridge_slave_0: entered promiscuous mode [ 1917.440160][ T642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.464005][ T642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.471256][ T642] bridge_slave_1: entered allmulticast mode [ 1917.495923][ T642] bridge_slave_1: entered promiscuous mode [ 1917.607461][ T642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1917.628690][ T642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1917.701962][ T642] team0: Port device team_slave_0 added [ 1917.719192][ T642] team0: Port device team_slave_1 added [ 1917.801636][T32386] Bluetooth: hci0: command tx timeout [ 1917.816470][ T642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1917.843502][ T642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1917.928659][ T642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1917.968664][ T642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1918.004448][ T642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.007565][ T30] audit: type=1400 audit(1924.976:2253): avc: denied { write } for pid=768 comm="syz.8.7947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1918.111869][ T642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1918.150257][T32386] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1918.485447][ T30] audit: type=1400 audit(1925.056:2254): avc: denied { lock } for pid=768 comm="syz.8.7947" path="socket:[127052]" dev="sockfs" ino=127052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1918.616595][ T642] hsr_slave_0: entered promiscuous mode [ 1918.643331][ T30] audit: type=1400 audit(1925.136:2255): avc: denied { getopt } for pid=772 comm="syz.1.7948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1918.645087][ T642] hsr_slave_1: entered promiscuous mode [ 1918.759294][ T30] audit: type=1400 audit(1925.446:2256): avc: denied { ioctl } for pid=776 comm="syz.0.7949" path="socket:[126551]" dev="sockfs" ino=126551 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1918.763517][ T642] debugfs: 'hsr0' already exists in 'hsr' [ 1918.858990][ T642] Cannot create hsr debugfs directory [ 1919.120335][ T30] audit: type=1400 audit(1925.836:2257): avc: denied { setopt } for pid=786 comm="syz.1.7953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1919.459362][ T801] FAULT_INJECTION: forcing a failure. [ 1919.459362][ T801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1919.495532][ T801] CPU: 0 UID: 0 PID: 801 Comm: syz.1.7954 Tainted: G L syzkaller #0 PREEMPT(full) [ 1919.495561][ T801] Tainted: [L]=SOFTLOCKUP [ 1919.495566][ T801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1919.495575][ T801] Call Trace: [ 1919.495582][ T801] [ 1919.495589][ T801] dump_stack_lvl+0x16c/0x1f0 [ 1919.495613][ T801] should_fail_ex+0x512/0x640 [ 1919.495640][ T801] _copy_from_user+0x2e/0xd0 [ 1919.495666][ T801] __sys_bpf+0x248/0x4980 [ 1919.495694][ T801] ? __pfx___sys_bpf+0x10/0x10 [ 1919.495724][ T801] ? find_held_lock+0x2b/0x80 [ 1919.495755][ T801] ? __mutex_unlock_slowpath+0x161/0x790 [ 1919.495792][ T801] ? fput+0x70/0xf0 [ 1919.495818][ T801] ? xfd_validate_state+0x61/0x180 [ 1919.495835][ T801] ? __pfx_ksys_write+0x10/0x10 [ 1919.495858][ T801] __x64_sys_bpf+0x78/0xc0 [ 1919.495880][ T801] ? lockdep_hardirqs_on+0x7c/0x110 [ 1919.495901][ T801] do_syscall_64+0xcd/0xf80 [ 1919.495923][ T801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.495940][ T801] RIP: 0033:0x7f9024f8f749 [ 1919.495954][ T801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1919.495970][ T801] RSP: 002b:00007f9025ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1919.495988][ T801] RAX: ffffffffffffffda RBX: 00007f90251e6180 RCX: 00007f9024f8f749 [ 1919.495998][ T801] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1919.496008][ T801] RBP: 00007f9025ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.496018][ T801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.496027][ T801] R13: 00007f90251e6218 R14: 00007f90251e6180 R15: 00007ffc60ad9de8 [ 1919.496052][ T801] [ 1919.776829][ T30] audit: type=1400 audit(1926.746:2258): avc: denied { bind } for pid=797 comm="syz.6.7955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1919.797339][ T30] audit: type=1400 audit(1926.766:2259): avc: denied { listen } for pid=797 comm="syz.6.7955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1919.816456][ T30] audit: type=1400 audit(1926.766:2260): avc: denied { accept } for pid=797 comm="syz.6.7955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1921.700811][ T821] lo speed is unknown, defaulting to 1000 [ 1922.169130][ T827] fuse: Unknown parameter 'use00000000000000000000' [ 1922.184943][ T642] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1922.255633][ T642] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1922.288649][ T642] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1922.386040][ T642] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1922.738357][ T642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1922.886715][ T642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1922.932029][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.939183][ T8311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.048437][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.055600][ T8311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.923422][ T642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1924.962222][ T870] fuse: Unknown parameter 'user_i00000000000000000000' [ 1925.254844][ T881] FAULT_INJECTION: forcing a failure. [ 1925.254844][ T881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1925.268347][ T881] CPU: 0 UID: 0 PID: 881 Comm: syz.8.7970 Tainted: G L syzkaller #0 PREEMPT(full) [ 1925.268373][ T881] Tainted: [L]=SOFTLOCKUP [ 1925.268377][ T881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1925.268383][ T881] Call Trace: [ 1925.268387][ T881] [ 1925.268391][ T881] dump_stack_lvl+0x16c/0x1f0 [ 1925.268409][ T881] should_fail_ex+0x512/0x640 [ 1925.268426][ T881] _copy_from_user+0x2e/0xd0 [ 1925.268442][ T881] __sys_bpf+0x248/0x4980 [ 1925.268459][ T881] ? __pfx___sys_bpf+0x10/0x10 [ 1925.268473][ T881] ? find_held_lock+0x2b/0x80 [ 1925.268492][ T881] ? find_held_lock+0x2b/0x80 [ 1925.268511][ T881] ? __mutex_unlock_slowpath+0x161/0x790 [ 1925.268533][ T881] ? fput+0x70/0xf0 [ 1925.268549][ T881] ? ksys_write+0x1ac/0x250 [ 1925.268562][ T881] ? __pfx_ksys_write+0x10/0x10 [ 1925.268577][ T881] __x64_sys_bpf+0x78/0xc0 [ 1925.268591][ T881] ? lockdep_hardirqs_on+0x7c/0x110 [ 1925.268603][ T881] do_syscall_64+0xcd/0xf80 [ 1925.268617][ T881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.268628][ T881] RIP: 0033:0x7fa335d8f749 [ 1925.268637][ T881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1925.268648][ T881] RSP: 002b:00007fa336c71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1925.268658][ T881] RAX: ffffffffffffffda RBX: 00007fa335fe5fa0 RCX: 00007fa335d8f749 [ 1925.268664][ T881] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 1925.268670][ T881] RBP: 00007fa336c71090 R08: 0000000000000000 R09: 0000000000000000 [ 1925.268676][ T881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.268682][ T881] R13: 00007fa335fe6038 R14: 00007fa335fe5fa0 R15: 00007ffcec224b58 [ 1925.268696][ T881] [ 1925.621622][T32287] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1925.656936][ T642] veth0_vlan: entered promiscuous mode [ 1925.666455][ T642] veth1_vlan: entered promiscuous mode [ 1925.694727][ T642] veth0_macvtap: entered promiscuous mode [ 1925.704627][ T642] veth1_macvtap: entered promiscuous mode [ 1925.719488][ T642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1925.746758][ T642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1925.763881][T15514] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.771630][T32287] usb 2-1: Invalid ep0 maxpacket: 64 [ 1925.807201][ T5949] usb 9-1: new low-speed USB device number 53 using dummy_hcd [ 1925.826842][T15514] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.854804][T15514] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.886577][T15514] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.931645][T32287] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1925.973312][ T5949] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1925.990867][ T5949] usb 9-1: config 0 has no interface number 0 [ 1926.011027][ T5949] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1926.036254][T15514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.041808][ T5949] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1926.054828][T15514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.055313][ T892] FAULT_INJECTION: forcing a failure. [ 1926.055313][ T892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1926.076318][ T5949] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1926.087671][ T892] CPU: 0 UID: 0 PID: 892 Comm: syz.6.7975 Tainted: G L syzkaller #0 PREEMPT(full) [ 1926.087702][ T892] Tainted: [L]=SOFTLOCKUP [ 1926.087707][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1926.087716][ T892] Call Trace: [ 1926.087721][ T892] [ 1926.087729][ T892] dump_stack_lvl+0x16c/0x1f0 [ 1926.087754][ T892] should_fail_ex+0x512/0x640 [ 1926.087781][ T892] _copy_from_user+0x2e/0xd0 [ 1926.087804][ T892] __sys_bpf+0x248/0x4980 [ 1926.087830][ T892] ? __pfx___sys_bpf+0x10/0x10 [ 1926.087852][ T892] ? find_held_lock+0x2b/0x80 [ 1926.087881][ T892] ? find_held_lock+0x2b/0x80 [ 1926.087911][ T892] ? __mutex_unlock_slowpath+0x161/0x790 [ 1926.087946][ T892] ? fput+0x70/0xf0 [ 1926.087969][ T892] ? ksys_write+0x1ac/0x250 [ 1926.087982][ T892] ? __pfx_ksys_write+0x10/0x10 [ 1926.087996][ T892] __x64_sys_bpf+0x78/0xc0 [ 1926.088011][ T892] ? lockdep_hardirqs_on+0x7c/0x110 [ 1926.088024][ T892] do_syscall_64+0xcd/0xf80 [ 1926.088037][ T892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.088048][ T892] RIP: 0033:0x7fe23a58f749 [ 1926.088057][ T892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1926.088068][ T892] RSP: 002b:00007fe23b4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1926.088078][ T892] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58f749 [ 1926.088085][ T892] RDX: 0000000000000028 RSI: 0000200000002bc0 RDI: 0000000000000012 [ 1926.088091][ T892] RBP: 00007fe23b4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1926.088097][ T892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1926.088103][ T892] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1926.088116][ T892] [ 1926.089703][ T5949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.276875][T32287] usb 2-1: Invalid ep0 maxpacket: 64 [ 1926.282396][T32287] usb usb2-port1: attempt power cycle [ 1926.292003][ T5949] usb 9-1: config 0 descriptor?? [ 1926.297877][ T884] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1926.307405][T22979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.318047][ T5949] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1926.329631][T22979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.570896][ T883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.579534][ T883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.498295][T32287] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1927.671595][ T30] audit: type=1400 audit(1934.526:2261): avc: denied { read write } for pid=897 comm="syz.9.7977" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1927.773189][ T30] audit: type=1400 audit(1934.526:2262): avc: denied { open } for pid=897 comm="syz.9.7977" path="/1/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1928.554044][T27429] syz_tun (unregistering): left allmulticast mode [ 1928.683074][T12879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1928.693105][T12879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1928.704452][T12879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1928.717516][T12879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1928.729204][T12879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1928.795835][ T419] usb 9-1: USB disconnect, device number 53 [ 1928.889829][ T928] fuse: Unknown parameter 'user_i00000000000000000000' [ 1928.906267][ T930] FAULT_INJECTION: forcing a failure. [ 1928.906267][ T930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.919395][ T930] CPU: 1 UID: 0 PID: 930 Comm: syz.9.7983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1928.919415][ T930] Tainted: [L]=SOFTLOCKUP [ 1928.919419][ T930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1928.919425][ T930] Call Trace: [ 1928.919429][ T930] [ 1928.919433][ T930] dump_stack_lvl+0x16c/0x1f0 [ 1928.919451][ T930] should_fail_ex+0x512/0x640 [ 1928.919469][ T930] _copy_from_user+0x2e/0xd0 [ 1928.919484][ T930] move_addr_to_kernel+0x65/0x170 [ 1928.919499][ T930] __sys_connect+0xb1/0x160 [ 1928.919514][ T930] ? __pfx___sys_connect+0x10/0x10 [ 1928.919534][ T930] ? __pfx_ksys_write+0x10/0x10 [ 1928.919550][ T930] __x64_sys_connect+0x72/0xb0 [ 1928.919564][ T930] ? lockdep_hardirqs_on+0x7c/0x110 [ 1928.919577][ T930] do_syscall_64+0xcd/0xf80 [ 1928.919591][ T930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.919602][ T930] RIP: 0033:0x7f05e838f749 [ 1928.919611][ T930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1928.919621][ T930] RSP: 002b:00007f05e9177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1928.919633][ T930] RAX: ffffffffffffffda RBX: 00007f05e85e5fa0 RCX: 00007f05e838f749 [ 1928.919639][ T930] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 1928.919645][ T930] RBP: 00007f05e9177090 R08: 0000000000000000 R09: 0000000000000000 [ 1928.919651][ T930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1928.919657][ T930] R13: 00007f05e85e6038 R14: 00007f05e85e5fa0 R15: 00007fff3f13c728 [ 1928.919670][ T930] [ 1929.116701][T32287] usb 2-1: device descriptor read/8, error -71 [ 1929.153270][T15514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.187832][ T919] lo speed is unknown, defaulting to 1000 [ 1929.249497][T15514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.393893][T15514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.898005][T15514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.927511][ T919] chnl_net:caif_netlink_parms(): no params data found [ 1930.081002][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.154270][ T419] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1930.240047][ T919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.254707][ T919] bridge_slave_0: entered allmulticast mode [ 1930.263695][ T919] bridge_slave_0: entered promiscuous mode [ 1930.289496][ T963] fuse: Bad value for 'fd' [ 1930.297742][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.305234][ T919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.313391][ T919] bridge_slave_1: entered allmulticast mode [ 1930.322833][ T919] bridge_slave_1: entered promiscuous mode [ 1930.383469][ T419] usb 9-1: Using ep0 maxpacket: 8 [ 1930.395672][ T419] usb 9-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.405358][ T919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1930.423906][ T919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.439936][T15514] bridge_slave_1: left allmulticast mode [ 1930.446524][T15514] bridge_slave_1: left promiscuous mode [ 1930.446929][ T419] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1930.459699][T15514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.459883][ T419] usb 9-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 1930.480913][ T419] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.481983][T15514] bridge_slave_0: left allmulticast mode [ 1930.494858][T15514] bridge_slave_0: left promiscuous mode [ 1930.500907][T15514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.501304][ T419] usb 9-1: config 0 descriptor?? [ 1930.578220][ T967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1930.636111][ T967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1930.924075][T12879] Bluetooth: hci2: command tx timeout [ 1931.301125][ T419] aquacomputer_d5next 0003:0C70:F012.001F: unknown main item tag 0x0 [ 1931.309624][ T419] aquacomputer_d5next 0003:0C70:F012.001F: unknown main item tag 0x0 [ 1931.325322][ T419] aquacomputer_d5next 0003:0C70:F012.001F: unknown main item tag 0x0 [ 1931.335028][ T419] aquacomputer_d5next 0003:0C70:F012.001F: unknown main item tag 0x0 [ 1931.343679][ T419] aquacomputer_d5next 0003:0C70:F012.001F: unknown main item tag 0x0 [ 1931.354505][ T419] aquacomputer_d5next 0003:0C70:F012.001F: unknown main item tag 0x0 [ 1931.362777][ T419] aquacomputer_d5next 0003:0C70:F012.001F: unknown main item tag 0x0 [ 1931.383555][ T419] aquacomputer_d5next 0003:0C70:F012.001F: hidraw0: USB HID v54.8a Device [HID 0c70:f012] on usb-dummy_hcd.8-1/input0 [ 1932.528787][T15514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.582264][T15514] bond0 (unregistering): Released all slaves [ 1932.605675][T15514] bond1 (unregistering): Released all slaves [ 1932.665873][ T419] usb 9-1: reset high-speed USB device number 54 using dummy_hcd [ 1932.748123][ T919] team0: Port device team_slave_0 added [ 1932.765407][T15514] tipc: Disabling bearer [ 1932.796746][T15514] tipc: Left network mode [ 1932.803231][ T919] team0: Port device team_slave_1 added [ 1932.804662][ T987] fuse: Unknown parameter 'user_i00000000000000000000' [ 1933.224208][T12879] Bluetooth: hci2: command tx timeout [ 1933.773687][ T919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1933.790054][ T919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1933.827302][ T919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1933.866826][ T919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1933.874064][ T919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1933.958120][ T919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1934.861356][T16104] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1935.311253][T12879] Bluetooth: hci2: command tx timeout [ 1935.490629][T16104] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1935.558940][ T7783] usb 9-1: USB disconnect, device number 54 [ 1935.639624][T16104] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1935.763938][T16104] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1935.813632][T16104] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1935.865703][T16104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.975389][T16104] usb 7-1: Product: syz [ 1935.986259][T16104] usb 7-1: Manufacturer: syz [ 1935.991311][T16104] usb 7-1: SerialNumber: syz [ 1936.003675][ T993] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1936.021734][ T993] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1936.160950][T15514] hsr_slave_0: left promiscuous mode [ 1936.182591][T15514] hsr_slave_1: left promiscuous mode [ 1936.192685][T15514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1936.200230][T15514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1936.235522][T15514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1936.255065][T15514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1936.321282][T15514] veth1_macvtap: left promiscuous mode [ 1936.339341][T15514] veth0_macvtap: left promiscuous mode [ 1936.351668][T15514] veth1_vlan: left promiscuous mode [ 1936.361817][T15514] veth0_vlan: left promiscuous mode [ 1937.369092][ T1021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1937.379848][ T1021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1937.402442][T12879] Bluetooth: hci2: command tx timeout [ 1938.581599][ T5883] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1938.973478][T16104] rtl8150 7-1:1.0: couldn't reset the device [ 1938.979969][T16104] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1939.064535][T15514] team0 (unregistering): Port device team_slave_1 removed [ 1939.103334][T15514] team0 (unregistering): Port device team_slave_0 removed [ 1939.112381][ T5883] usb 10-1: Using ep0 maxpacket: 8 [ 1939.119239][ T5883] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.130028][ T5883] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1939.140146][ T5883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.152025][ T5883] usb 10-1: config 0 descriptor?? [ 1939.159703][ T5883] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1939.241742][T16104] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1939.401593][T16104] usb 9-1: Using ep0 maxpacket: 32 [ 1939.409909][T16104] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1939.420577][T16104] usb 9-1: config 0 has no interface number 0 [ 1939.427954][T16104] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1939.440385][T16104] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1939.450281][T16104] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.458321][T16104] usb 9-1: Product: syz [ 1939.463879][T16104] usb 9-1: Manufacturer: syz [ 1939.468514][T16104] usb 9-1: SerialNumber: syz [ 1939.481429][T16104] usb 9-1: config 0 descriptor?? [ 1939.490594][T16104] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1939.500508][T16104] em28xx 9-1:0.132: Video interface 132 found: [ 1939.593479][ T919] hsr_slave_0: entered promiscuous mode [ 1939.599682][ T919] hsr_slave_1: entered promiscuous mode [ 1939.617188][T32287] lo speed is unknown, defaulting to 1000 [ 1939.641594][T32287] infiniband syz0: ib_query_port failed (-19) [ 1939.678993][T32287] usb 7-1: USB disconnect, device number 74 [ 1939.716058][ T1047] fuse: Unknown parameter 'user_id00000000000000000000' [ 1940.568706][ T5883] gspca_vc032x: reg_w err -110 [ 1940.856046][T16104] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1940.867570][ T5883] vc032x 10-1:0.0: probe with driver vc032x failed with error -110 [ 1940.999241][ T5883] usb 10-1: USB disconnect, device number 10 [ 1941.345178][ T1065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.936290][ T1065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.041879][T16104] em28xx 9-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1942.054070][ T1041] em28xx 9-1:0.132: failed to trigger write to i2c address 0x0 (error=-5) [ 1942.063105][T16104] em28xx 9-1:0.132: board has no eeprom [ 1942.112498][ T1072] kvm: kvm [1071]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000067) [ 1942.151900][T16104] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1942.195392][T16104] em28xx 9-1:0.132: analog set to bulk mode. [ 1942.234790][ T5883] em28xx 9-1:0.132: Registering V4L2 extension [ 1942.420154][ T5883] em28xx 9-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1942.511654][ T5883] em28xx 9-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1942.539957][ T5883] em28xx 9-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1942.563327][ T5883] em28xx 9-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1944.435664][ T919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1944.461748][ T419] usb 9-1: USB disconnect, device number 55 [ 1944.468223][ T419] em28xx 9-1:0.132: Disconnecting em28xx [ 1944.485113][ T919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1944.505496][ T919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1944.543627][ T919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1945.206794][ T5883] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1945.246760][ T5883] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1945.302456][ T5883] em28xx 9-1:0.132: No AC97 audio processor [ 1945.320539][ T5883] usb 9-1: Decoder not found [ 1945.351780][ T5883] em28xx 9-1:0.132: failed to create media graph [ 1945.358169][ T5883] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1945.402856][ T5883] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1945.443897][ T419] em28xx 9-1:0.132: Closing input extension [ 1945.494745][ T419] em28xx 9-1:0.132: Freeing device [ 1945.495971][ T919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1945.555237][ T919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1945.586309][T31719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.593454][T31719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1945.675800][T18312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.682915][T18312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1945.808639][ T919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1945.862616][ T919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1945.914851][ T1109] veth0: entered promiscuous mode [ 1945.933373][ T30] audit: type=1400 audit(1959.900:2263): avc: denied { watch_mount watch_reads } for pid=1108 comm="syz.8.8028" path="/200" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1946.338972][ T30] audit: type=1400 audit(1959.940:2264): avc: denied { watch_sb } for pid=1108 comm="syz.8.8028" path="/200" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1946.565301][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8029'. [ 1946.635836][ T919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1946.760045][ T1129] fuse: Unknown parameter 'user_id00000000000000000000' [ 1946.981245][ T919] veth0_vlan: entered promiscuous mode [ 1947.525969][ T919] veth1_vlan: entered promiscuous mode [ 1947.646395][ T919] veth0_macvtap: entered promiscuous mode [ 1948.661233][ T919] veth1_macvtap: entered promiscuous mode [ 1949.682464][ T919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1949.801541][ T977] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1950.172433][ T919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1950.210671][ T8311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.241861][T22979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.271369][T22979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.324522][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.332391][T22979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.357485][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1950.415779][ T977] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1950.521727][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.552203][ T977] usb 7-1: config 0 descriptor?? [ 1950.570428][T15490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.579415][ T1152] FAULT_INJECTION: forcing a failure. [ 1950.579415][ T1152] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.607978][T15490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.627880][ T1152] CPU: 1 UID: 0 PID: 1152 Comm: syz.8.8038 Tainted: G L syzkaller #0 PREEMPT(full) [ 1950.627908][ T1152] Tainted: [L]=SOFTLOCKUP [ 1950.627914][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1950.627924][ T1152] Call Trace: [ 1950.627929][ T1152] [ 1950.627936][ T1152] dump_stack_lvl+0x16c/0x1f0 [ 1950.627959][ T1152] should_fail_ex+0x512/0x640 [ 1950.627975][ T1152] ? fs_reclaim_acquire+0xae/0x150 [ 1950.627993][ T1152] should_failslab+0xc2/0x120 [ 1950.628013][ T1152] __kmalloc_noprof+0xeb/0x910 [ 1950.628037][ T1152] ? tomoyo_encode2+0x100/0x3e0 [ 1950.628062][ T1152] ? tomoyo_encode2+0x100/0x3e0 [ 1950.628078][ T1152] tomoyo_encode2+0x100/0x3e0 [ 1950.628094][ T1152] tomoyo_encode+0x29/0x50 [ 1950.628107][ T1152] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1950.628125][ T1152] tomoyo_path_number_perm+0x245/0x580 [ 1950.628137][ T1152] ? tomoyo_path_number_perm+0x237/0x580 [ 1950.628157][ T1152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1950.628176][ T1152] ? find_held_lock+0x2b/0x80 [ 1950.628218][ T1152] ? find_held_lock+0x2b/0x80 [ 1950.628233][ T1152] ? hook_file_ioctl_common+0x144/0x410 [ 1950.628252][ T1152] ? __fget_files+0x20e/0x3c0 [ 1950.628269][ T1152] security_file_ioctl+0x9b/0x240 [ 1950.628287][ T1152] __x64_sys_ioctl+0xb7/0x210 [ 1950.628308][ T1152] do_syscall_64+0xcd/0xf80 [ 1950.628335][ T1152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.628350][ T1152] RIP: 0033:0x7fa335d8f749 [ 1950.628363][ T1152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1950.628374][ T1152] RSP: 002b:00007fa336c71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1950.628384][ T1152] RAX: ffffffffffffffda RBX: 00007fa335fe5fa0 RCX: 00007fa335d8f749 [ 1950.628391][ T1152] RDX: 0000000000000000 RSI: 00000000ffff454b RDI: 0000000000000003 [ 1950.628396][ T1152] RBP: 00007fa336c71090 R08: 0000000000000000 R09: 0000000000000000 [ 1950.628402][ T1152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.628408][ T1152] R13: 00007fa335fe6038 R14: 00007fa335fe5fa0 R15: 00007ffcec224b58 [ 1950.628422][ T1152] [ 1950.628440][ T1152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1951.069674][ T8308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.087790][ T8308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.149518][ T977] hid-steam 0003:28DE:1142.0020: unknown main item tag 0x0 [ 1951.208010][ T1158] fuse: Unknown parameter '0x0000000000000005' [ 1951.215638][ T977] hid-steam 0003:28DE:1142.0020: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 1951.277214][ T1160] tipc: Started in network mode [ 1951.283083][ T1160] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1951.290447][ T1160] tipc: Enabled bearer , priority 0 [ 1951.311547][ T977] hid-steam 0003:28DE:1142.0020: Steam wireless receiver connected [ 1951.341159][ T977] hid-steam 0003:28DE:1142.0020: No HID_FEATURE_REPORT submitted - nothing to read [ 1951.374118][ T977] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 1951.407312][ T1166] fuse: Unknown parameter 'user_id00000000000000000000' [ 1951.445113][ T977] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 1951.780078][ T1173] netlink: 'syz.6.8034': attribute type 1 has an invalid length. [ 1951.795908][ T1173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1951.912750][ T977] usb 7-1: USB disconnect, device number 75 [ 1951.936756][ T977] hid-steam 0003:28DE:1142.0020: Steam wireless receiver disconnected [ 1952.058215][ T1179] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1952.107559][ T1179] FAULT_INJECTION: forcing a failure. [ 1952.107559][ T1179] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.139071][ T1179] CPU: 0 UID: 0 PID: 1179 Comm: syz.8.8045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1952.139100][ T1179] Tainted: [L]=SOFTLOCKUP [ 1952.139104][ T1179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1952.139110][ T1179] Call Trace: [ 1952.139114][ T1179] [ 1952.139118][ T1179] dump_stack_lvl+0x16c/0x1f0 [ 1952.139136][ T1179] should_fail_ex+0x512/0x640 [ 1952.139152][ T1179] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1952.139164][ T1179] should_failslab+0xc2/0x120 [ 1952.139178][ T1179] kmem_cache_alloc_noprof+0x83/0x770 [ 1952.139189][ T1179] ? getname_flags.part.0+0x4c/0x550 [ 1952.139202][ T1179] ? getname_flags.part.0+0x4c/0x550 [ 1952.139211][ T1179] getname_flags.part.0+0x4c/0x550 [ 1952.139223][ T1179] getname_flags+0x93/0xf0 [ 1952.139236][ T1179] __x64_sys_rename+0x58/0xa0 [ 1952.139246][ T1179] do_syscall_64+0xcd/0xf80 [ 1952.139261][ T1179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.139272][ T1179] RIP: 0033:0x7fa335d8f749 [ 1952.139281][ T1179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1952.139291][ T1179] RSP: 002b:00007fa336c71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1952.139311][ T1179] RAX: ffffffffffffffda RBX: 00007fa335fe5fa0 RCX: 00007fa335d8f749 [ 1952.139318][ T1179] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000440 [ 1952.139324][ T1179] RBP: 00007fa336c71090 R08: 0000000000000000 R09: 0000000000000000 [ 1952.139330][ T1179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.139336][ T1179] R13: 00007fa335fe6038 R14: 00007fa335fe5fa0 R15: 00007ffcec224b58 [ 1952.139349][ T1179] [ 1952.308119][ T419] tipc: Node number set to 11578026 [ 1952.516256][ T1114] veth0: left promiscuous mode [ 1953.012551][ T1186] netlink: set zone limit has 4 unknown bytes [ 1953.176135][ T1197] FAULT_INJECTION: forcing a failure. [ 1953.176135][ T1197] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.282678][ T1197] CPU: 0 UID: 0 PID: 1197 Comm: syz.9.8050 Tainted: G L syzkaller #0 PREEMPT(full) [ 1953.282710][ T1197] Tainted: [L]=SOFTLOCKUP [ 1953.282717][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1953.282727][ T1197] Call Trace: [ 1953.282733][ T1197] [ 1953.282740][ T1197] dump_stack_lvl+0x16c/0x1f0 [ 1953.282770][ T1197] should_fail_ex+0x512/0x640 [ 1953.282795][ T1197] ? fs_reclaim_acquire+0xae/0x150 [ 1953.282821][ T1197] should_failslab+0xc2/0x120 [ 1953.282844][ T1197] __kmalloc_noprof+0xeb/0x910 [ 1953.282870][ T1197] ? tomoyo_encode2+0x100/0x3e0 [ 1953.282898][ T1197] ? tomoyo_encode2+0x100/0x3e0 [ 1953.282919][ T1197] tomoyo_encode2+0x100/0x3e0 [ 1953.282945][ T1197] tomoyo_encode+0x29/0x50 [ 1953.282967][ T1197] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1953.282993][ T1197] ? tomoyo_profile+0x47/0x60 [ 1953.283022][ T1197] tomoyo_path_number_perm+0x245/0x580 [ 1953.283041][ T1197] ? tomoyo_path_number_perm+0x237/0x580 [ 1953.283060][ T1197] ? rcu_watching_snap_stopped_since+0xb4/0x110 [ 1953.283080][ T1197] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1953.283101][ T1197] ? rcu_is_watching+0x12/0xc0 [ 1953.283146][ T1197] ? find_held_lock+0x2b/0x80 [ 1953.283171][ T1197] ? hook_file_ioctl_common+0x144/0x410 [ 1953.283203][ T1197] ? __fget_files+0x20e/0x3c0 [ 1953.283231][ T1197] security_file_ioctl+0x9b/0x240 [ 1953.283256][ T1197] __x64_sys_ioctl+0xb7/0x210 [ 1953.283277][ T1197] do_syscall_64+0xcd/0xf80 [ 1953.283300][ T1197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.283317][ T1197] RIP: 0033:0x7f05e838f749 [ 1953.283332][ T1197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1953.283348][ T1197] RSP: 002b:00007f05e9177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1953.283365][ T1197] RAX: ffffffffffffffda RBX: 00007f05e85e5fa0 RCX: 00007f05e838f749 [ 1953.283377][ T1197] RDX: 0000200000000040 RSI: 000000004008b100 RDI: 0000000000000003 [ 1953.283386][ T1197] RBP: 00007f05e9177090 R08: 0000000000000000 R09: 0000000000000000 [ 1953.283396][ T1197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1953.283406][ T1197] R13: 00007f05e85e6038 R14: 00007f05e85e5fa0 R15: 00007fff3f13c728 [ 1953.283431][ T1197] [ 1953.691282][ T1197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1953.791550][ T1150] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1953.834944][ T1205] FAULT_INJECTION: forcing a failure. [ 1953.834944][ T1205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1953.878558][ T1205] CPU: 0 UID: 0 PID: 1205 Comm: syz.1.8052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1953.878586][ T1205] Tainted: [L]=SOFTLOCKUP [ 1953.878590][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1953.878599][ T1205] Call Trace: [ 1953.878605][ T1205] [ 1953.878612][ T1205] dump_stack_lvl+0x16c/0x1f0 [ 1953.878638][ T1205] should_fail_ex+0x512/0x640 [ 1953.878662][ T1205] _copy_from_iter+0x2a4/0x16c0 [ 1953.878690][ T1205] ? __pfx__copy_from_iter+0x10/0x10 [ 1953.878711][ T1205] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1953.878739][ T1205] copy_page_from_iter+0xde/0x180 [ 1953.878762][ T1205] tun_build_skb.constprop.0+0x2e8/0x1560 [ 1953.878793][ T1205] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1953.878813][ T1205] ? arch_stack_walk+0xa6/0x100 [ 1953.878847][ T1205] ? _kstrtoull+0x145/0x200 [ 1953.878868][ T1205] tun_get_user+0x149c/0x3cc0 [ 1953.878899][ T1205] ? __pfx_tun_get_user+0x10/0x10 [ 1953.878923][ T1205] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1953.878953][ T1205] ? find_held_lock+0x2b/0x80 [ 1953.878978][ T1205] ? tun_get+0x191/0x370 [ 1953.879004][ T1205] tun_chr_write_iter+0xdc/0x210 [ 1953.879028][ T1205] vfs_write+0x7d3/0x11d0 [ 1953.879050][ T1205] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1953.879074][ T1205] ? __pfx_vfs_write+0x10/0x10 [ 1953.879091][ T1205] ? find_held_lock+0x2b/0x80 [ 1953.879125][ T1205] ksys_write+0x12a/0x250 [ 1953.879151][ T1205] ? __pfx_ksys_write+0x10/0x10 [ 1953.879179][ T1205] do_syscall_64+0xcd/0xf80 [ 1953.879201][ T1205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.879217][ T1205] RIP: 0033:0x7f9024f8e1ff [ 1953.879231][ T1205] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1953.879245][ T1205] RSP: 002b:00007f9025f0f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1953.879260][ T1205] RAX: ffffffffffffffda RBX: 00007f90251e5fa0 RCX: 00007f9024f8e1ff [ 1953.879271][ T1205] RDX: 000000000000003e RSI: 0000200000000080 RDI: 00000000000000c8 [ 1953.879281][ T1205] RBP: 00007f9025f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1953.879291][ T1205] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 1953.879300][ T1205] R13: 00007f90251e6038 R14: 00007f90251e5fa0 R15: 00007ffc60ad9de8 [ 1953.879322][ T1205] [ 1954.423111][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8056'. [ 1954.550188][ T1150] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1954.569312][ T1150] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.589602][ T1150] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1954.608745][ T1150] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.629041][ T1150] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.810010][ T1150] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1954.995839][ T1150] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1955.028587][ T1150] usb 7-1: Product: syz [ 1955.043708][ T1150] usb 7-1: Manufacturer: syz [ 1955.190566][ T1150] cdc_wdm 7-1:1.0: skipping garbage [ 1955.208655][ T1150] cdc_wdm 7-1:1.0: skipping garbage [ 1955.221304][ T1150] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1955.229958][ T1150] cdc_wdm 7-1:1.0: Unknown control protocol [ 1955.456828][ T30] audit: type=1326 audit(1969.420:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.8.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa335d8f749 code=0x7fc00000 [ 1957.011228][ T1252] FAULT_INJECTION: forcing a failure. [ 1957.011228][ T1252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1957.036364][ T1252] CPU: 0 UID: 0 PID: 1252 Comm: syz.1.8066 Tainted: G L syzkaller #0 PREEMPT(full) [ 1957.036394][ T1252] Tainted: [L]=SOFTLOCKUP [ 1957.036401][ T1252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1957.036409][ T1252] Call Trace: [ 1957.036415][ T1252] [ 1957.036421][ T1252] dump_stack_lvl+0x16c/0x1f0 [ 1957.036446][ T1252] should_fail_ex+0x512/0x640 [ 1957.036474][ T1252] _copy_to_user+0x32/0xd0 [ 1957.036500][ T1252] simple_read_from_buffer+0xcb/0x170 [ 1957.036524][ T1252] proc_fail_nth_read+0x197/0x240 [ 1957.036543][ T1252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1957.036559][ T1252] ? rw_verify_area+0xcf/0x6c0 [ 1957.036576][ T1252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1957.036593][ T1252] vfs_read+0x1e4/0xcf0 [ 1957.036614][ T1252] ? __pfx___mutex_lock+0x10/0x10 [ 1957.036635][ T1252] ? __pfx_vfs_read+0x10/0x10 [ 1957.036657][ T1252] ? __fget_files+0x20e/0x3c0 [ 1957.036682][ T1252] ksys_read+0x12a/0x250 [ 1957.036698][ T1252] ? __pfx_ksys_read+0x10/0x10 [ 1957.036720][ T1252] do_syscall_64+0xcd/0xf80 [ 1957.036740][ T1252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.036757][ T1252] RIP: 0033:0x7f9024f8e15c [ 1957.036770][ T1252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1957.036784][ T1252] RSP: 002b:00007f9025f0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1957.036799][ T1252] RAX: ffffffffffffffda RBX: 00007f90251e5fa0 RCX: 00007f9024f8e15c [ 1957.036808][ T1252] RDX: 000000000000000f RSI: 00007f9025f0f0a0 RDI: 0000000000000004 [ 1957.036817][ T1252] RBP: 00007f9025f0f090 R08: 0000000000000000 R09: 000000000000001c [ 1957.036826][ T1252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.036835][ T1252] R13: 00007f90251e6038 R14: 00007f90251e5fa0 R15: 00007ffc60ad9de8 [ 1957.036855][ T1252] [ 1957.974885][ T1256] FAULT_INJECTION: forcing a failure. [ 1957.974885][ T1256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1957.991720][ T1256] CPU: 1 UID: 0 PID: 1256 Comm: syz.9.8067 Tainted: G L syzkaller #0 PREEMPT(full) [ 1957.991749][ T1256] Tainted: [L]=SOFTLOCKUP [ 1957.991756][ T1256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1957.991766][ T1256] Call Trace: [ 1957.991777][ T1256] [ 1957.991785][ T1256] dump_stack_lvl+0x16c/0x1f0 [ 1957.991811][ T1256] should_fail_ex+0x512/0x640 [ 1957.991841][ T1256] _copy_to_user+0x32/0xd0 [ 1957.991868][ T1256] simple_read_from_buffer+0xcb/0x170 [ 1957.991894][ T1256] proc_fail_nth_read+0x197/0x240 [ 1957.991913][ T1256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1957.991933][ T1256] ? rw_verify_area+0xcf/0x6c0 [ 1957.991952][ T1256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1957.991970][ T1256] vfs_read+0x1e4/0xcf0 [ 1957.991992][ T1256] ? __pfx___mutex_lock+0x10/0x10 [ 1957.992018][ T1256] ? __pfx_vfs_read+0x10/0x10 [ 1957.992044][ T1256] ? __fget_files+0x20e/0x3c0 [ 1957.992074][ T1256] ksys_read+0x12a/0x250 [ 1957.992107][ T1256] ? __pfx_ksys_read+0x10/0x10 [ 1957.992135][ T1256] do_syscall_64+0xcd/0xf80 [ 1957.992158][ T1256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.992176][ T1256] RIP: 0033:0x7f05e838e15c [ 1957.992190][ T1256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1957.992207][ T1256] RSP: 002b:00007f05e9177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1957.992224][ T1256] RAX: ffffffffffffffda RBX: 00007f05e85e5fa0 RCX: 00007f05e838e15c [ 1957.992236][ T1256] RDX: 000000000000000f RSI: 00007f05e91770a0 RDI: 0000000000000004 [ 1957.992247][ T1256] RBP: 00007f05e9177090 R08: 0000000000000000 R09: 0000000000000000 [ 1957.992257][ T1256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.992267][ T1256] R13: 00007f05e85e6038 R14: 00007f05e85e5fa0 R15: 00007fff3f13c728 [ 1957.992299][ T1256] [ 1958.260138][T16104] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1958.445777][ T30] audit: type=1400 audit(1972.310:2266): avc: denied { getopt } for pid=1261 comm="syz.1.8070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1958.521634][T16104] usb 9-1: Using ep0 maxpacket: 32 [ 1958.695814][T16104] usb 9-1: config 0 has an invalid interface number: 136 but max is 0 [ 1958.713166][T16104] usb 9-1: config 0 has no interface number 0 [ 1958.733580][T16104] usb 9-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 1958.745757][T16104] usb 9-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 1958.754964][T16104] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.763930][T16104] usb 9-1: Product: syz [ 1958.768168][T16104] usb 9-1: Manufacturer: syz [ 1958.769381][T32287] usb 7-1: USB disconnect, device number 76 [ 1958.773334][T16104] usb 9-1: SerialNumber: syz [ 1958.786921][T16104] usb 9-1: config 0 descriptor?? [ 1958.803094][ T1250] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1958.842181][T16104] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1958.931745][ T1150] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1959.472863][ T1250] netlink: 'syz.8.8065': attribute type 1 has an invalid length. [ 1959.517028][ T1278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8075'. [ 1959.526077][ T1278] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8075'. [ 1959.538287][ T1150] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.549894][ T1150] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.560243][ T1250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1959.562378][ T1150] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1959.577999][ T1150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.590737][ T1150] usb 10-1: config 0 descriptor?? [ 1959.644780][ T1250] netlink: 'syz.8.8065': attribute type 10 has an invalid length. [ 1959.664406][ T1250] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8065'. [ 1959.676987][ T1289] FAULT_INJECTION: forcing a failure. [ 1959.676987][ T1289] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.701858][ T1284] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1959.718624][ T1289] CPU: 1 UID: 0 PID: 1289 Comm: syz.6.8076 Tainted: G L syzkaller #0 PREEMPT(full) [ 1959.718653][ T1289] Tainted: [L]=SOFTLOCKUP [ 1959.718659][ T1289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1959.718669][ T1289] Call Trace: [ 1959.718675][ T1289] [ 1959.718681][ T1289] dump_stack_lvl+0x16c/0x1f0 [ 1959.718706][ T1289] should_fail_ex+0x512/0x640 [ 1959.718722][ T1289] ? fs_reclaim_acquire+0xae/0x150 [ 1959.718738][ T1289] should_failslab+0xc2/0x120 [ 1959.718752][ T1289] __kmalloc_noprof+0xeb/0x910 [ 1959.718770][ T1289] ? tomoyo_encode2+0x100/0x3e0 [ 1959.718794][ T1289] ? tomoyo_encode2+0x100/0x3e0 [ 1959.718813][ T1289] tomoyo_encode2+0x100/0x3e0 [ 1959.718836][ T1289] tomoyo_encode+0x29/0x50 [ 1959.718854][ T1289] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1959.718872][ T1289] tomoyo_path_number_perm+0x245/0x580 [ 1959.718884][ T1289] ? tomoyo_path_number_perm+0x237/0x580 [ 1959.718897][ T1289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1959.718909][ T1289] ? find_held_lock+0x2b/0x80 [ 1959.718953][ T1289] ? find_held_lock+0x2b/0x80 [ 1959.718975][ T1289] ? hook_file_ioctl_common+0x144/0x410 [ 1959.719000][ T1289] ? __fget_files+0x20e/0x3c0 [ 1959.719017][ T1289] security_file_ioctl+0x9b/0x240 [ 1959.719036][ T1289] __x64_sys_ioctl+0xb7/0x210 [ 1959.719049][ T1289] do_syscall_64+0xcd/0xf80 [ 1959.719068][ T1289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.719085][ T1289] RIP: 0033:0x7fe23a58f749 [ 1959.719098][ T1289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1959.719113][ T1289] RSP: 002b:00007fe23b4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1959.719128][ T1289] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58f749 [ 1959.719138][ T1289] RDX: 00000000000000d0 RSI: 000000000000ae03 RDI: 0000000000000003 [ 1959.719145][ T1289] RBP: 00007fe23b4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1959.719151][ T1289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1959.719157][ T1289] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1959.719171][ T1289] [ 1959.719181][ T1289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1959.971531][ T1150] usbhid 10-1:0.0: can't add hid device: -71 [ 1959.977721][ T1150] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1960.001109][ T1150] usb 10-1: USB disconnect, device number 11 [ 1960.015510][ T1250] dummy0: entered promiscuous mode [ 1960.131402][T27304] usb 9-1: USB disconnect, device number 56 [ 1961.304085][ T1306] 9p: Bad value for 'rfdno' [ 1962.380054][ T1320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8084'. [ 1962.612014][ T1332] FAULT_INJECTION: forcing a failure. [ 1962.612014][ T1332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1962.625338][ T1332] CPU: 0 UID: 0 PID: 1332 Comm: syz.6.8087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1962.625366][ T1332] Tainted: [L]=SOFTLOCKUP [ 1962.625373][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1962.625383][ T1332] Call Trace: [ 1962.625389][ T1332] [ 1962.625396][ T1332] dump_stack_lvl+0x16c/0x1f0 [ 1962.625424][ T1332] should_fail_ex+0x512/0x640 [ 1962.625453][ T1332] _copy_to_user+0x32/0xd0 [ 1962.625480][ T1332] simple_read_from_buffer+0xcb/0x170 [ 1962.625506][ T1332] proc_fail_nth_read+0x197/0x240 [ 1962.625526][ T1332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1962.625546][ T1332] ? rw_verify_area+0xcf/0x6c0 [ 1962.625565][ T1332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1962.625583][ T1332] vfs_read+0x1e4/0xcf0 [ 1962.625605][ T1332] ? __pfx___mutex_lock+0x10/0x10 [ 1962.625630][ T1332] ? __pfx_vfs_read+0x10/0x10 [ 1962.625658][ T1332] ? __fget_files+0x20e/0x3c0 [ 1962.625690][ T1332] ksys_read+0x12a/0x250 [ 1962.625711][ T1332] ? __pfx_ksys_read+0x10/0x10 [ 1962.625739][ T1332] do_syscall_64+0xcd/0xf80 [ 1962.625763][ T1332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.625780][ T1332] RIP: 0033:0x7fe23a58e15c [ 1962.625795][ T1332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1962.625810][ T1332] RSP: 002b:00007fe23b488030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1962.625827][ T1332] RAX: ffffffffffffffda RBX: 00007fe23a7e6090 RCX: 00007fe23a58e15c [ 1962.625839][ T1332] RDX: 000000000000000f RSI: 00007fe23b4880a0 RDI: 0000000000000002 [ 1962.625849][ T1332] RBP: 00007fe23b488090 R08: 0000000000000000 R09: 0000000000000000 [ 1962.625859][ T1332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1962.625869][ T1332] R13: 00007fe23a7e6128 R14: 00007fe23a7e6090 R15: 00007fffb73f1778 [ 1962.625894][ T1332] [ 1962.627338][ T1333] netlink: 'syz.8.8084': attribute type 1 has an invalid length. [ 1962.847257][ T1333] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8084'. [ 1963.520694][ T1347] FAULT_INJECTION: forcing a failure. [ 1963.520694][ T1347] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.533440][ T1347] CPU: 1 UID: 0 PID: 1347 Comm: syz.8.8090 Tainted: G L syzkaller #0 PREEMPT(full) [ 1963.533467][ T1347] Tainted: [L]=SOFTLOCKUP [ 1963.533473][ T1347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1963.533484][ T1347] Call Trace: [ 1963.533490][ T1347] [ 1963.533498][ T1347] dump_stack_lvl+0x16c/0x1f0 [ 1963.533523][ T1347] should_fail_ex+0x512/0x640 [ 1963.533547][ T1347] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1963.533568][ T1347] should_failslab+0xc2/0x120 [ 1963.533590][ T1347] kmem_cache_alloc_noprof+0x83/0x770 [ 1963.533606][ T1347] ? auditd_test_task+0x131/0x2f0 [ 1963.533630][ T1347] ? audit_log_start+0x29b/0x950 [ 1963.533660][ T1347] ? audit_log_start+0x29b/0x950 [ 1963.533685][ T1347] audit_log_start+0x29b/0x950 [ 1963.533713][ T1347] ? __pfx_audit_log_start+0x10/0x10 [ 1963.533744][ T1347] ? find_held_lock+0x2b/0x80 [ 1963.533776][ T1347] audit_seccomp+0x60/0x290 [ 1963.533802][ T1347] __seccomp_filter+0xa91/0x11f0 [ 1963.533830][ T1347] ? __pfx___seccomp_filter+0x10/0x10 [ 1963.533852][ T1347] ? lockdep_hardirqs_on+0x10/0x110 [ 1963.533877][ T1347] ? fput+0x70/0xf0 [ 1963.533901][ T1347] ? ksys_write+0x1ac/0x250 [ 1963.533924][ T1347] __secure_computing+0x287/0x3b0 [ 1963.533949][ T1347] syscall_trace_enter+0x89/0x220 [ 1963.533976][ T1347] do_syscall_64+0x42b/0xf80 [ 1963.533998][ T1347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.534016][ T1347] RIP: 0033:0x7fa335d8f749 [ 1963.534030][ T1347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1963.534046][ T1347] RSP: 002b:00007fa336c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 1963.534063][ T1347] RAX: ffffffffffffffda RBX: 00007fa335fe6180 RCX: 00007fa335d8f749 [ 1963.534074][ T1347] RDX: 0000000000000feb RSI: 0000200000001740 RDI: 0000200000000640 [ 1963.534084][ T1347] RBP: 00007fa336c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1963.534094][ T1347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.534104][ T1347] R13: 00007fa335fe6218 R14: 00007fa335fe6180 R15: 00007ffcec224b58 [ 1963.534129][ T1347] [ 1963.534151][ T1347] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1963.754522][ T1352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=1352 comm=syz.9.8092 [ 1963.755302][ T1347] audit: out of memory in audit_log_start [ 1963.768556][ T1354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=1354 comm=syz.9.8092 [ 1963.774245][ T30] audit: type=1326 audit(1977.480:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.8.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa335d8f749 code=0x7ffc0000 [ 1963.890014][ T30] audit: type=1326 audit(1977.480:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.8.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa335d8f749 code=0x7ffc0000 [ 1963.915391][ T1350] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8093'. [ 1963.924646][ T30] audit: type=1326 audit(1977.480:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.8.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa335d8f749 code=0x7ffc0000 [ 1963.948116][ T1350] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8093'. [ 1963.961097][ T30] audit: type=1326 audit(1977.480:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.8.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa335d8df90 code=0x7ffc0000 [ 1963.994821][ T30] audit: type=1326 audit(1977.480:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.8.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa335d8e1ff code=0x7ffc0000 [ 1964.348583][ T1368] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1964.357096][ T1369] fuse: Unknown parameter '0x0000000000000003' [ 1964.363865][ T30] audit: type=1400 audit(1977.720:2272): avc: denied { listen } for pid=1351 comm="syz.9.8092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1964.439600][ T1370] 9p: Bad value for 'rfdno' [ 1964.856961][ T1361] SELinux: Context system_u:object is not valid (left unmapped). [ 1964.897565][ T30] audit: type=1326 audit(1977.750:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.8.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa335d8e15c code=0x7ffc0000 [ 1964.929014][ T30] audit: type=1326 audit(1977.750:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.8.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa335d8e1ff code=0x7ffc0000 [ 1966.217571][T27304] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1966.236027][T21480] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1966.644310][ T1406] FAULT_INJECTION: forcing a failure. [ 1966.644310][ T1406] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.661718][ T1406] CPU: 1 UID: 0 PID: 1406 Comm: syz.9.8109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1966.661745][ T1406] Tainted: [L]=SOFTLOCKUP [ 1966.661751][ T1406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1966.661759][ T1406] Call Trace: [ 1966.661765][ T1406] [ 1966.661771][ T1406] dump_stack_lvl+0x16c/0x1f0 [ 1966.661794][ T1406] should_fail_ex+0x512/0x640 [ 1966.661816][ T1406] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1966.661837][ T1406] should_failslab+0xc2/0x120 [ 1966.661859][ T1406] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1966.661875][ T1406] ? __alloc_skb+0x156/0x410 [ 1966.661904][ T1406] ? __alloc_skb+0x156/0x410 [ 1966.661926][ T1406] __alloc_skb+0x156/0x410 [ 1966.661947][ T1406] ? __alloc_skb+0x35d/0x410 [ 1966.661970][ T1406] ? __pfx___alloc_skb+0x10/0x10 [ 1966.661993][ T1406] ? netlink_autobind.isra.0+0x158/0x370 [ 1966.662018][ T1406] netlink_alloc_large_skb+0x69/0x140 [ 1966.662041][ T1406] netlink_sendmsg+0x698/0xdd0 [ 1966.662063][ T1406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1966.662093][ T1406] ____sys_sendmsg+0xa5d/0xc30 [ 1966.662114][ T1406] ? copy_msghdr_from_user+0x10a/0x160 [ 1966.662131][ T1406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1966.662164][ T1406] ___sys_sendmsg+0x134/0x1d0 [ 1966.662181][ T1406] ? __pfx____sys_sendmsg+0x10/0x10 [ 1966.662226][ T1406] __sys_sendmsg+0x16d/0x220 [ 1966.662245][ T1406] ? __pfx___sys_sendmsg+0x10/0x10 [ 1966.662278][ T1406] do_syscall_64+0xcd/0xf80 [ 1966.662302][ T1406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.662319][ T1406] RIP: 0033:0x7f05e838f749 [ 1966.662334][ T1406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1966.662356][ T1406] RSP: 002b:00007f05e9177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1966.662373][ T1406] RAX: ffffffffffffffda RBX: 00007f05e85e5fa0 RCX: 00007f05e838f749 [ 1966.662385][ T1406] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 1966.662395][ T1406] RBP: 00007f05e9177090 R08: 0000000000000000 R09: 0000000000000000 [ 1966.662405][ T1406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.662415][ T1406] R13: 00007f05e85e6038 R14: 00007f05e85e5fa0 R15: 00007fff3f13c728 [ 1966.662440][ T1406] [ 1966.664709][T21480] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1967.041838][T27304] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1967.051858][T27304] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1967.081592][T27304] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1967.091162][T27304] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1967.121599][T27304] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1967.143013][T27304] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1967.161649][T27304] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1967.182273][T27304] usb 7-1: Product: syz [ 1967.189963][T27304] usb 7-1: Manufacturer: syz [ 1967.217951][T27304] cdc_wdm 7-1:1.0: skipping garbage [ 1967.245539][T27304] cdc_wdm 7-1:1.0: skipping garbage [ 1967.257438][T21480] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1967.283203][T27304] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1967.311946][T21480] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1967.609240][T21480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1967.660307][T21480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1967.776959][T21480] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1967.807486][T21480] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1967.873659][T21480] usb 2-1: Product: syz [ 1967.891224][T21480] usb 2-1: Manufacturer: syz [ 1967.962749][T21480] cdc_wdm 2-1:1.0: skipping garbage [ 1967.980413][T21480] cdc_wdm 2-1:1.0: skipping garbage [ 1968.001201][T21480] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1968.163425][ T1417] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1968.509704][ T1423] fuse: Unknown parameter '0x0000000000000003' [ 1969.197180][ T1429] ip6tnl1: entered promiscuous mode [ 1969.465709][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1969.468378][ T30] audit: type=1400 audit(1983.430:2283): avc: denied { getopt } for pid=1435 comm="syz.0.8117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1970.405271][T16104] usb 2-1: USB disconnect, device number 72 [ 1970.681917][ T1456] sd 0:0:1:0: device reset [ 1971.028122][T21480] usb 7-1: USB disconnect, device number 77 [ 1972.306229][ T30] audit: type=1400 audit(1986.270:2284): avc: denied { connect } for pid=1484 comm="syz.0.8130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1973.007737][ T1504] set match dimension is over the limit! [ 1975.287809][ T1514] FAULT_INJECTION: forcing a failure. [ 1975.287809][ T1514] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.311081][ T1514] CPU: 1 UID: 0 PID: 1514 Comm: syz.6.8139 Tainted: G L syzkaller #0 PREEMPT(full) [ 1975.311111][ T1514] Tainted: [L]=SOFTLOCKUP [ 1975.311117][ T1514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1975.311127][ T1514] Call Trace: [ 1975.311133][ T1514] [ 1975.311141][ T1514] dump_stack_lvl+0x16c/0x1f0 [ 1975.311166][ T1514] should_fail_ex+0x512/0x640 [ 1975.311190][ T1514] ? __kmalloc_noprof+0xca/0x910 [ 1975.311219][ T1514] should_failslab+0xc2/0x120 [ 1975.311242][ T1514] __kmalloc_noprof+0xeb/0x910 [ 1975.311267][ T1514] ? alloc_pipe_info+0x1ec/0x590 [ 1975.311302][ T1514] ? alloc_pipe_info+0x1ec/0x590 [ 1975.311324][ T1514] alloc_pipe_info+0x1ec/0x590 [ 1975.311349][ T1514] splice_direct_to_actor+0x77d/0xa30 [ 1975.311375][ T1514] ? __lock_acquire+0x436/0x2890 [ 1975.311394][ T1514] ? __pfx_direct_splice_actor+0x10/0x10 [ 1975.311420][ T1514] ? find_held_lock+0x2b/0x80 [ 1975.311445][ T1514] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1975.311470][ T1514] ? get_pid_task+0xfc/0x250 [ 1975.311493][ T1514] do_splice_direct+0x174/0x240 [ 1975.311514][ T1514] ? __pfx_do_splice_direct+0x10/0x10 [ 1975.311535][ T1514] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1975.311562][ T1514] ? rw_verify_area+0xcf/0x6c0 [ 1975.311582][ T1514] do_sendfile+0xb06/0xe50 [ 1975.311606][ T1514] ? __pfx_do_sendfile+0x10/0x10 [ 1975.311623][ T1514] ? __fget_files+0x20e/0x3c0 [ 1975.311652][ T1514] __x64_sys_sendfile64+0x1d8/0x220 [ 1975.311674][ T1514] ? ksys_write+0x1ac/0x250 [ 1975.311693][ T1514] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1975.311724][ T1514] do_syscall_64+0xcd/0xf80 [ 1975.311747][ T1514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.311763][ T1514] RIP: 0033:0x7fe23a58f749 [ 1975.311778][ T1514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1975.311795][ T1514] RSP: 002b:00007fe23b4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1975.311811][ T1514] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58f749 [ 1975.311823][ T1514] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1975.311832][ T1514] RBP: 00007fe23b4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1975.311842][ T1514] R10: 000000000000106f R11: 0000000000000246 R12: 0000000000000001 [ 1975.311851][ T1514] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1975.311876][ T1514] [ 1975.659326][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.933021][ T1523] FAULT_INJECTION: forcing a failure. [ 1975.933021][ T1523] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.971535][ T1523] CPU: 1 UID: 0 PID: 1523 Comm: syz.1.8143 Tainted: G L syzkaller #0 PREEMPT(full) [ 1975.971565][ T1523] Tainted: [L]=SOFTLOCKUP [ 1975.971571][ T1523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1975.971581][ T1523] Call Trace: [ 1975.971587][ T1523] [ 1975.971594][ T1523] dump_stack_lvl+0x16c/0x1f0 [ 1975.971619][ T1523] should_fail_ex+0x512/0x640 [ 1975.971640][ T1523] ? fs_reclaim_acquire+0xae/0x150 [ 1975.971663][ T1523] should_failslab+0xc2/0x120 [ 1975.971684][ T1523] __kmalloc_noprof+0xeb/0x910 [ 1975.971707][ T1523] ? tomoyo_encode2+0x100/0x3e0 [ 1975.971732][ T1523] ? tomoyo_encode2+0x100/0x3e0 [ 1975.971751][ T1523] tomoyo_encode2+0x100/0x3e0 [ 1975.971774][ T1523] tomoyo_encode+0x29/0x50 [ 1975.971794][ T1523] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1975.971821][ T1523] tomoyo_path_number_perm+0x245/0x580 [ 1975.971839][ T1523] ? tomoyo_path_number_perm+0x237/0x580 [ 1975.971861][ T1523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1975.971881][ T1523] ? find_held_lock+0x2b/0x80 [ 1975.971929][ T1523] ? find_held_lock+0x2b/0x80 [ 1975.971953][ T1523] ? hook_file_ioctl_common+0x144/0x410 [ 1975.971983][ T1523] ? __fget_files+0x20e/0x3c0 [ 1975.972009][ T1523] security_file_ioctl+0x9b/0x240 [ 1975.972031][ T1523] __x64_sys_ioctl+0xb7/0x210 [ 1975.972050][ T1523] do_syscall_64+0xcd/0xf80 [ 1975.972071][ T1523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.972087][ T1523] RIP: 0033:0x7f9024f8f749 [ 1975.972103][ T1523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1975.972119][ T1523] RSP: 002b:00007f9025f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1975.972137][ T1523] RAX: ffffffffffffffda RBX: 00007f90251e5fa0 RCX: 00007f9024f8f749 [ 1975.972148][ T1523] RDX: 0000200000000040 RSI: 00000000c0286405 RDI: 0000000000000003 [ 1975.972158][ T1523] RBP: 00007f9025f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1975.972168][ T1523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.972177][ T1523] R13: 00007f90251e6038 R14: 00007f90251e5fa0 R15: 00007ffc60ad9de8 [ 1975.972203][ T1523] [ 1975.972218][ T1523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1976.031551][ T5946] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1976.494285][ T1536] policy can only be matched on NF_INET_PRE_ROUTING [ 1976.494347][ T1536] unable to load match [ 1976.551235][ T1536] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1976.557861][ T1536] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1976.581427][ T1536] vhci_hcd vhci_hcd.0: Device attached [ 1976.671543][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 1976.842091][ T419] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1977.289991][ T1538] vhci_hcd: connection reset by peer [ 1977.315790][ T8143] vhci_hcd vhci_hcd.8: stop threads [ 1977.357152][ T8143] vhci_hcd vhci_hcd.8: release socket [ 1977.402668][ T8143] vhci_hcd vhci_hcd.8: disconnect device [ 1978.123657][ T5946] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1978.266190][ T5946] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1978.275769][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1978.287708][ T5946] usb 7-1: Product: syz [ 1978.291954][ T5946] usb 7-1: Manufacturer: syz [ 1978.296596][ T5946] usb 7-1: SerialNumber: syz [ 1978.303731][ T5946] usb 7-1: config 0 descriptor?? [ 1978.313443][ T1518] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1978.314601][ T1548] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8151'. [ 1978.340301][ T1548] batadv_slave_1: entered promiscuous mode [ 1979.153461][ T5946] usb 7-1: USB disconnect, device number 78 [ 1980.147932][ T30] audit: type=1400 audit(1994.110:2285): avc: denied { ioctl } for pid=1578 comm="syz.6.8164" path="socket:[130571]" dev="sockfs" ino=130571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1980.184879][ T1579] bond0: entered promiscuous mode [ 1980.190143][ T1579] bond_slave_0: entered promiscuous mode [ 1980.196095][ T1579] bond_slave_1: entered promiscuous mode [ 1980.201974][ T30] audit: type=1400 audit(1994.140:2286): avc: denied { watch } for pid=1578 comm="syz.6.8164" path="/79" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1980.223060][ T1579] batadv0: entered promiscuous mode [ 1980.230180][ T1579] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1980.236777][ T1580] FAULT_INJECTION: forcing a failure. [ 1980.236777][ T1580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1980.236832][ T1580] CPU: 0 UID: 0 PID: 1580 Comm: syz.9.8163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1980.236856][ T1580] Tainted: [L]=SOFTLOCKUP [ 1980.236862][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1980.236871][ T1580] Call Trace: [ 1980.236877][ T1580] [ 1980.236884][ T1580] dump_stack_lvl+0x16c/0x1f0 [ 1980.236907][ T1580] should_fail_ex+0x512/0x640 [ 1980.236932][ T1580] _copy_to_user+0x32/0xd0 [ 1980.236954][ T1580] simple_read_from_buffer+0xcb/0x170 [ 1980.236976][ T1580] proc_fail_nth_read+0x197/0x240 [ 1980.236993][ T1580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1980.237014][ T1580] ? rw_verify_area+0xcf/0x6c0 [ 1980.237030][ T1580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1980.237044][ T1580] vfs_read+0x1e4/0xcf0 [ 1980.237063][ T1580] ? __pfx___mutex_lock+0x10/0x10 [ 1980.237084][ T1580] ? __pfx_vfs_read+0x10/0x10 [ 1980.237107][ T1580] ? __fget_files+0x20e/0x3c0 [ 1980.237133][ T1580] ksys_read+0x12a/0x250 [ 1980.237150][ T1580] ? __pfx_ksys_read+0x10/0x10 [ 1980.237174][ T1580] do_syscall_64+0xcd/0xf80 [ 1980.237194][ T1580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.237209][ T1580] RIP: 0033:0x7f05e838e15c [ 1980.237222][ T1580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1980.237236][ T1580] RSP: 002b:00007f05e9156030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1980.237256][ T1580] RAX: ffffffffffffffda RBX: 00007f05e85e6090 RCX: 00007f05e838e15c [ 1980.237265][ T1580] RDX: 000000000000000f RSI: 00007f05e91560a0 RDI: 0000000000000003 [ 1980.237274][ T1580] RBP: 00007f05e9156090 R08: 0000000000000000 R09: 0000000000000000 [ 1980.237283][ T1580] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 1980.237291][ T1580] R13: 00007f05e85e6128 R14: 00007f05e85e6090 R15: 00007fff3f13c728 [ 1980.237314][ T1580] [ 1980.416198][ T5946] kernel read not supported for file /dsp (pid: 5946 comm: kworker/0:8) [ 1981.594835][ T1602] FAULT_INJECTION: forcing a failure. [ 1981.594835][ T1602] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.608385][ T1602] CPU: 0 UID: 0 PID: 1602 Comm: syz.8.8168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1981.608416][ T1602] Tainted: [L]=SOFTLOCKUP [ 1981.608422][ T1602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1981.608432][ T1602] Call Trace: [ 1981.608439][ T1602] [ 1981.608446][ T1602] dump_stack_lvl+0x16c/0x1f0 [ 1981.608474][ T1602] should_fail_ex+0x512/0x640 [ 1981.608499][ T1602] ? fs_reclaim_acquire+0xae/0x150 [ 1981.608526][ T1602] should_failslab+0xc2/0x120 [ 1981.608549][ T1602] __kmalloc_noprof+0xeb/0x910 [ 1981.608577][ T1602] ? tomoyo_encode2+0x100/0x3e0 [ 1981.608605][ T1602] ? tomoyo_encode2+0x100/0x3e0 [ 1981.608626][ T1602] tomoyo_encode2+0x100/0x3e0 [ 1981.608652][ T1602] tomoyo_encode+0x29/0x50 [ 1981.608674][ T1602] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1981.608708][ T1602] tomoyo_path_number_perm+0x245/0x580 [ 1981.608727][ T1602] ? tomoyo_path_number_perm+0x237/0x580 [ 1981.608749][ T1602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1981.608771][ T1602] ? find_held_lock+0x2b/0x80 [ 1981.608801][ T1602] ? lockdep_hardirqs_on+0x7c/0x110 [ 1981.608823][ T1602] ? irqentry_exit+0x1dd/0x8c0 [ 1981.608857][ T1602] ? hook_file_ioctl_common+0x36/0x410 [ 1981.608884][ T1602] ? hook_file_ioctl_common+0xab/0x410 [ 1981.608910][ T1602] ? hook_file_ioctl_common+0x144/0x410 [ 1981.608942][ T1602] ? __fget_files+0x20e/0x3c0 [ 1981.608971][ T1602] security_file_ioctl+0x9b/0x240 [ 1981.608996][ T1602] __x64_sys_ioctl+0xb7/0x210 [ 1981.609017][ T1602] do_syscall_64+0xcd/0xf80 [ 1981.609039][ T1602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1981.609057][ T1602] RIP: 0033:0x7fa335d8f749 [ 1981.609074][ T1602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1981.609090][ T1602] RSP: 002b:00007fa336c71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.609108][ T1602] RAX: ffffffffffffffda RBX: 00007fa335fe5fa0 RCX: 00007fa335d8f749 [ 1981.609119][ T1602] RDX: 0000200000000040 RSI: 00000000000007a8 RDI: 0000000000000003 [ 1981.609130][ T1602] RBP: 00007fa336c71090 R08: 0000000000000000 R09: 0000000000000000 [ 1981.609140][ T1602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1981.609150][ T1602] R13: 00007fa335fe6038 R14: 00007fa335fe5fa0 R15: 00007ffcec224b58 [ 1981.609176][ T1602] [ 1981.609394][ T1602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1981.971587][ T419] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1982.427874][ T5925] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 1982.663133][ T30] audit: type=1326 audit(1996.620:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ce18f749 code=0x7ffc0000 [ 1982.771283][ T30] audit: type=1326 audit(1996.620:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ce18f749 code=0x7ffc0000 [ 1982.834977][ T5925] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1982.860196][ T5925] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1982.861560][ T30] audit: type=1326 audit(1996.620:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2ce18df90 code=0x7ffc0000 [ 1982.973326][ T5925] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1982.989759][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.007118][ T30] audit: type=1326 audit(1996.620:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ce18f749 code=0x7ffc0000 [ 1983.199600][ T30] audit: type=1326 audit(1996.620:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2ce18f749 code=0x7ffc0000 [ 1983.283772][ T5925] usb 9-1: usb_control_msg returned -32 [ 1983.312108][ T5925] usbtmc 9-1:16.0: can't read capabilities [ 1983.318441][ T30] audit: type=1326 audit(1996.620:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ce18f749 code=0x7ffc0000 [ 1983.405903][ T30] audit: type=1326 audit(1996.620:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ce18f749 code=0x7ffc0000 [ 1983.508754][ T30] audit: type=1326 audit(1996.670:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.8175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2ce18f749 code=0x7ffc0000 [ 1983.563970][ T5925] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1984.612338][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.655286][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.903156][ T1640] netlink: 5340 bytes leftover after parsing attributes in process `syz.8.8174'. [ 1984.904158][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.921241][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.568912][ T1640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.851724][ T1640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.070583][T16104] usb 9-1: USB disconnect, device number 57 [ 1989.673796][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 1989.681374][ T5925] usb 2-1: chopping to 0 config(s) [ 1990.171700][ T5925] usb 2-1: can't read configurations, error -32 [ 1990.196723][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1990.196739][ T30] audit: type=1400 audit(2004.160:2309): avc: denied { read write } for pid=1665 comm="syz.0.8188" name="file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1990.431606][ T30] audit: type=1400 audit(2004.190:2310): avc: denied { open } for pid=1665 comm="syz.0.8188" path="/41/file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1990.483101][ T1669] FAULT_INJECTION: forcing a failure. [ 1990.483101][ T1669] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.531931][ T1669] CPU: 0 UID: 0 PID: 1669 Comm: syz.0.8191 Tainted: G L syzkaller #0 PREEMPT(full) [ 1990.531959][ T1669] Tainted: [L]=SOFTLOCKUP [ 1990.531965][ T1669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1990.531975][ T1669] Call Trace: [ 1990.531980][ T1669] [ 1990.531987][ T1669] dump_stack_lvl+0x16c/0x1f0 [ 1990.532013][ T1669] should_fail_ex+0x512/0x640 [ 1990.532035][ T1669] ? fs_reclaim_acquire+0xae/0x150 [ 1990.532058][ T1669] should_failslab+0xc2/0x120 [ 1990.532079][ T1669] __kmalloc_noprof+0xeb/0x910 [ 1990.532101][ T1669] ? tomoyo_encode2+0x100/0x3e0 [ 1990.532127][ T1669] ? tomoyo_encode2+0x100/0x3e0 [ 1990.532149][ T1669] tomoyo_encode2+0x100/0x3e0 [ 1990.532174][ T1669] tomoyo_encode+0x29/0x50 [ 1990.532195][ T1669] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1990.532230][ T1669] tomoyo_path_number_perm+0x245/0x580 [ 1990.532249][ T1669] ? tomoyo_path_number_perm+0x237/0x580 [ 1990.532269][ T1669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1990.532290][ T1669] ? find_held_lock+0x2b/0x80 [ 1990.532334][ T1669] ? find_held_lock+0x2b/0x80 [ 1990.532355][ T1669] ? hook_file_ioctl_common+0x144/0x410 [ 1990.532384][ T1669] ? __fget_files+0x20e/0x3c0 [ 1990.532411][ T1669] security_file_ioctl+0x9b/0x240 [ 1990.532434][ T1669] __x64_sys_ioctl+0xb7/0x210 [ 1990.532455][ T1669] do_syscall_64+0xcd/0xf80 [ 1990.532478][ T1669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.532496][ T1669] RIP: 0033:0x7ff2ce18f749 [ 1990.532511][ T1669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1990.532527][ T1669] RSP: 002b:00007ff2cef7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1990.532544][ T1669] RAX: ffffffffffffffda RBX: 00007ff2ce3e5fa0 RCX: 00007ff2ce18f749 [ 1990.532556][ T1669] RDX: 0000200000000380 RSI: 00000000c018643a RDI: 0000000000000003 [ 1990.532564][ T1669] RBP: 00007ff2cef7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1990.532575][ T1669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1990.532584][ T1669] R13: 00007ff2ce3e6038 R14: 00007ff2ce3e5fa0 R15: 00007fff400fce58 [ 1990.532606][ T1669] [ 1990.533850][ T1669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1990.778550][ T30] audit: type=1400 audit(2004.220:2311): avc: denied { ioctl } for pid=1665 comm="syz.0.8188" path="/41/file0" dev="tmpfs" ino=229 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1991.184787][ T1675] FAULT_INJECTION: forcing a failure. [ 1991.184787][ T1675] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.265045][ T1675] CPU: 0 UID: 0 PID: 1675 Comm: syz.9.8193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.265075][ T1675] Tainted: [L]=SOFTLOCKUP [ 1991.265082][ T1675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1991.265093][ T1675] Call Trace: [ 1991.265099][ T1675] [ 1991.265106][ T1675] dump_stack_lvl+0x16c/0x1f0 [ 1991.265134][ T1675] should_fail_ex+0x512/0x640 [ 1991.265160][ T1675] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1991.265182][ T1675] should_failslab+0xc2/0x120 [ 1991.265205][ T1675] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1991.265223][ T1675] ? __alloc_skb+0x156/0x410 [ 1991.265253][ T1675] ? __alloc_skb+0x156/0x410 [ 1991.265277][ T1675] __alloc_skb+0x156/0x410 [ 1991.265300][ T1675] ? __alloc_skb+0x35d/0x410 [ 1991.265328][ T1675] ? __pfx___alloc_skb+0x10/0x10 [ 1991.265362][ T1675] netlink_alloc_large_skb+0x69/0x140 [ 1991.265385][ T1675] netlink_sendmsg+0x698/0xdd0 [ 1991.265410][ T1675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1991.265440][ T1675] ____sys_sendmsg+0xa5d/0xc30 [ 1991.265464][ T1675] ? copy_msghdr_from_user+0x10a/0x160 [ 1991.265481][ T1675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1991.265509][ T1675] ? __lock_acquire+0x436/0x2890 [ 1991.265533][ T1675] ___sys_sendmsg+0x134/0x1d0 [ 1991.265553][ T1675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1991.265570][ T1675] ? lock_acquire+0x179/0x330 [ 1991.265618][ T1675] __sys_sendmsg+0x16d/0x220 [ 1991.265637][ T1675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1991.265653][ T1675] ? __pfx___schedule+0x10/0x10 [ 1991.265679][ T1675] ? rcu_is_watching+0x12/0xc0 [ 1991.265703][ T1675] do_syscall_64+0xcd/0xf80 [ 1991.265725][ T1675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.265743][ T1675] RIP: 0033:0x7f05e838f749 [ 1991.265758][ T1675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1991.265774][ T1675] RSP: 002b:00007f05e9177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1991.265792][ T1675] RAX: ffffffffffffffda RBX: 00007f05e85e5fa0 RCX: 00007f05e838f749 [ 1991.265807][ T1675] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1991.265817][ T1675] RBP: 00007f05e9177090 R08: 0000000000000000 R09: 0000000000000000 [ 1991.265828][ T1675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.265838][ T1675] R13: 00007f05e85e6038 R14: 00007f05e85e5fa0 R15: 00007fff3f13c728 [ 1991.265862][ T1675] [ 1993.241259][ T1692] overlayfs: overlapping lowerdir path [ 1993.322845][ T1692] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1994.763268][ T1705] FAULT_INJECTION: forcing a failure. [ 1994.763268][ T1705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1994.778479][ T1705] CPU: 1 UID: 0 PID: 1705 Comm: syz.6.8203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1994.778510][ T1705] Tainted: [L]=SOFTLOCKUP [ 1994.778516][ T1705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1994.778525][ T1705] Call Trace: [ 1994.778532][ T1705] [ 1994.778538][ T1705] dump_stack_lvl+0x16c/0x1f0 [ 1994.778564][ T1705] should_fail_ex+0x512/0x640 [ 1994.778591][ T1705] _copy_to_user+0x32/0xd0 [ 1994.778617][ T1705] simple_read_from_buffer+0xcb/0x170 [ 1994.778643][ T1705] proc_fail_nth_read+0x197/0x240 [ 1994.778662][ T1705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1994.778681][ T1705] ? rw_verify_area+0xcf/0x6c0 [ 1994.778699][ T1705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1994.778716][ T1705] vfs_read+0x1e4/0xcf0 [ 1994.778737][ T1705] ? __pfx___mutex_lock+0x10/0x10 [ 1994.778761][ T1705] ? __pfx_vfs_read+0x10/0x10 [ 1994.778786][ T1705] ? __fget_files+0x20e/0x3c0 [ 1994.778816][ T1705] ksys_read+0x12a/0x250 [ 1994.778835][ T1705] ? __pfx_ksys_read+0x10/0x10 [ 1994.778861][ T1705] do_syscall_64+0xcd/0xf80 [ 1994.778885][ T1705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.778902][ T1705] RIP: 0033:0x7fe23a58e15c [ 1994.778917][ T1705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1994.778933][ T1705] RSP: 002b:00007fe23b4a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1994.778951][ T1705] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58e15c [ 1994.778962][ T1705] RDX: 000000000000000f RSI: 00007fe23b4a90a0 RDI: 0000000000000003 [ 1994.778971][ T1705] RBP: 00007fe23b4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.778981][ T1705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.778991][ T1705] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1994.779016][ T1705] [ 1994.797527][ T1709] FAULT_INJECTION: forcing a failure. [ 1994.797527][ T1709] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.033959][ T1711] FAULT_INJECTION: forcing a failure. [ 1995.033959][ T1711] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.069183][ T1709] CPU: 0 UID: 0 PID: 1709 Comm: syz.9.8201 Tainted: G L syzkaller #0 PREEMPT(full) [ 1995.069213][ T1709] Tainted: [L]=SOFTLOCKUP [ 1995.069219][ T1709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1995.069228][ T1709] Call Trace: [ 1995.069234][ T1709] [ 1995.069241][ T1709] dump_stack_lvl+0x16c/0x1f0 [ 1995.069267][ T1709] should_fail_ex+0x512/0x640 [ 1995.069290][ T1709] ? fs_reclaim_acquire+0xae/0x150 [ 1995.069315][ T1709] should_failslab+0xc2/0x120 [ 1995.069337][ T1709] __kmalloc_noprof+0xeb/0x910 [ 1995.069363][ T1709] ? tomoyo_encode2+0x100/0x3e0 [ 1995.069390][ T1709] ? tomoyo_encode2+0x100/0x3e0 [ 1995.069410][ T1709] tomoyo_encode2+0x100/0x3e0 [ 1995.069435][ T1709] tomoyo_encode+0x29/0x50 [ 1995.069455][ T1709] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1995.069481][ T1709] tomoyo_path_number_perm+0x245/0x580 [ 1995.069497][ T1709] ? tomoyo_path_number_perm+0x237/0x580 [ 1995.069517][ T1709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1995.069538][ T1709] ? find_held_lock+0x2b/0x80 [ 1995.069584][ T1709] ? find_held_lock+0x2b/0x80 [ 1995.069605][ T1709] ? hook_file_ioctl_common+0x144/0x410 [ 1995.069636][ T1709] ? __fget_files+0x20e/0x3c0 [ 1995.069663][ T1709] security_file_ioctl+0x9b/0x240 [ 1995.069686][ T1709] __x64_sys_ioctl+0xb7/0x210 [ 1995.069708][ T1709] do_syscall_64+0xcd/0xf80 [ 1995.069731][ T1709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.069749][ T1709] RIP: 0033:0x7f05e838f749 [ 1995.069763][ T1709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1995.069778][ T1709] RSP: 002b:00007f05e9177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1995.069796][ T1709] RAX: ffffffffffffffda RBX: 00007f05e85e5fa0 RCX: 00007f05e838f749 [ 1995.069807][ T1709] RDX: 0000200000000000 RSI: 00000000c0205647 RDI: 0000000000000003 [ 1995.069817][ T1709] RBP: 00007f05e9177090 R08: 0000000000000000 R09: 0000000000000000 [ 1995.069827][ T1709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1995.069836][ T1709] R13: 00007f05e85e6038 R14: 00007f05e85e5fa0 R15: 00007fff3f13c728 [ 1995.069861][ T1709] [ 1995.069878][ T1709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1995.365532][ T1711] CPU: 1 UID: 0 PID: 1711 Comm: syz.6.8204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1995.365563][ T1711] Tainted: [L]=SOFTLOCKUP [ 1995.365570][ T1711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1995.365581][ T1711] Call Trace: [ 1995.365588][ T1711] [ 1995.365595][ T1711] dump_stack_lvl+0x16c/0x1f0 [ 1995.365622][ T1711] should_fail_ex+0x512/0x640 [ 1995.365649][ T1711] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1995.365679][ T1711] should_failslab+0xc2/0x120 [ 1995.365702][ T1711] __kmalloc_cache_noprof+0x80/0x800 [ 1995.365729][ T1711] ? ima_calc_file_hash_tfm+0x234/0x350 [ 1995.365758][ T1711] ? ima_calc_file_hash_tfm+0x234/0x350 [ 1995.365781][ T1711] ima_calc_file_hash_tfm+0x234/0x350 [ 1995.365806][ T1711] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1995.365859][ T1711] ? shmem_huge_global_enabled.constprop.0+0x16e/0x200 [ 1995.365886][ T1711] ? ima_alloc_tfm+0x21a/0x2e0 [ 1995.365907][ T1711] ? shmem_getattr+0x394/0x450 [ 1995.365932][ T1711] ima_calc_file_hash+0x1ba/0x490 [ 1995.365957][ T1711] ima_collect_measurement+0x8a6/0xa50 [ 1995.365980][ T1711] ? ksys_mmap_pgoff+0x32c/0x5c0 [ 1995.366007][ T1711] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1995.366028][ T1711] ? lock_acquire+0x179/0x330 [ 1995.366059][ T1711] ? do_raw_read_unlock+0x44/0xe0 [ 1995.366079][ T1711] ? _raw_read_unlock+0x28/0x50 [ 1995.366101][ T1711] ? vfs_getxattr_alloc+0xec/0x350 [ 1995.366129][ T1711] ? ima_get_hash_algo+0x27c/0x400 [ 1995.366148][ T1711] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1995.366173][ T1711] ? process_measurement+0x11b9/0x22d0 [ 1995.366193][ T1711] process_measurement+0x11b9/0x22d0 [ 1995.366220][ T1711] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1995.366245][ T1711] ? __pfx_process_measurement+0x10/0x10 [ 1995.366270][ T1711] ? __pfx_avc_has_perm+0x10/0x10 [ 1995.366301][ T1711] ? find_held_lock+0x2b/0x80 [ 1995.366347][ T1711] ? file_map_prot_check+0x1eb/0x360 [ 1995.366366][ T1711] ima_file_mmap+0x1ad/0x1d0 [ 1995.366385][ T1711] ? __pfx_ima_file_mmap+0x10/0x10 [ 1995.366405][ T1711] ? find_held_lock+0x2b/0x80 [ 1995.366434][ T1711] security_mmap_file+0x88c/0x990 [ 1995.366456][ T1711] vm_mmap_pgoff+0xec/0x470 [ 1995.366479][ T1711] ? find_held_lock+0x2b/0x80 [ 1995.366503][ T1711] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1995.366527][ T1711] ? __fget_files+0x20e/0x3c0 [ 1995.366556][ T1711] ksys_mmap_pgoff+0x32c/0x5c0 [ 1995.366574][ T1711] ? __pfx_ksys_write+0x10/0x10 [ 1995.366598][ T1711] __x64_sys_mmap+0x125/0x190 [ 1995.366620][ T1711] do_syscall_64+0xcd/0xf80 [ 1995.366643][ T1711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.366660][ T1711] RIP: 0033:0x7fe23a58f749 [ 1995.366676][ T1711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1995.366692][ T1711] RSP: 002b:00007fe23b4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1995.366708][ T1711] RAX: ffffffffffffffda RBX: 00007fe23a7e5fa0 RCX: 00007fe23a58f749 [ 1995.366718][ T1711] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 1995.366728][ T1711] RBP: 00007fe23b4a9090 R08: 0000000000000003 R09: 0000000000000000 [ 1995.366739][ T1711] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 1995.366750][ T1711] R13: 00007fe23a7e6038 R14: 00007fe23a7e5fa0 R15: 00007fffb73f1778 [ 1995.366775][ T1711] [ 1995.366908][ T30] audit: type=1800 audit(2009.330:2312): pid=1711 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.8204" name="file1" dev="tmpfs" ino=2 res=0 errno=0 [ 1996.323243][ T30] audit: type=1400 audit(2010.290:2313): avc: denied { getopt } for pid=1730 comm="syz.0.8210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1996.367630][ T1728] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8208'. [ 1996.445434][ T30] audit: type=1400 audit(2010.320:2314): avc: denied { read append } for pid=1727 comm="syz.6.8208" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1996.478166][ T30] audit: type=1400 audit(2010.320:2315): avc: denied { open } for pid=1727 comm="syz.6.8208" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1997.445937][ T1752] veth1_to_bond: entered allmulticast mode [ 1997.467206][ T1752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8215'. [ 1997.528220][ T1753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8213'. [ 1997.821691][T22629] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1998.018112][ T1752] bond0: (slave bond_slave_1): Releasing backup interface [ 1998.157441][T22629] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1998.181178][T22629] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1998.193185][T22629] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1998.614653][T12879] Bluetooth: hci5: command 0x0405 tx timeout [ 1998.988783][T22629] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1999.039403][ T1767] binder: 1765:1767 unknown command 0 [ 1999.048637][T22629] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.061767][T22629] usb 7-1: Product: syz [ 1999.061781][ T1767] binder: 1765:1767 ioctl c0306201 200000000080 returned -22 [ 1999.088437][T22629] usb 7-1: Manufacturer: syz [ 1999.093382][T22629] usb 7-1: SerialNumber: syz [ 1999.109199][ T1767] FAULT_INJECTION: forcing a failure. [ 1999.109199][ T1767] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.122025][ T1768] netlink: 'syz.0.8220': attribute type 4 has an invalid length. [ 1999.141629][ T1767] CPU: 0 UID: 0 PID: 1767 Comm: syz.1.8219 Tainted: G L syzkaller #0 PREEMPT(full) [ 1999.141652][ T1767] Tainted: [L]=SOFTLOCKUP [ 1999.141655][ T1767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1999.141662][ T1767] Call Trace: [ 1999.141666][ T1767] [ 1999.141671][ T1767] dump_stack_lvl+0x16c/0x1f0 [ 1999.141691][ T1767] should_fail_ex+0x512/0x640 [ 1999.141706][ T1767] ? fs_reclaim_acquire+0xae/0x150 [ 1999.141722][ T1767] should_failslab+0xc2/0x120 [ 1999.141736][ T1767] __kmalloc_noprof+0xeb/0x910 [ 1999.141752][ T1767] ? tomoyo_encode2+0x100/0x3e0 [ 1999.141769][ T1767] ? tomoyo_encode2+0x100/0x3e0 [ 1999.141782][ T1767] tomoyo_encode2+0x100/0x3e0 [ 1999.141797][ T1767] tomoyo_encode+0x29/0x50 [ 1999.141810][ T1767] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1999.141828][ T1767] tomoyo_path_number_perm+0x245/0x580 [ 1999.141840][ T1767] ? tomoyo_path_number_perm+0x237/0x580 [ 1999.141853][ T1767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1999.141865][ T1767] ? find_held_lock+0x2b/0x80 [ 1999.141892][ T1767] ? find_held_lock+0x2b/0x80 [ 1999.141907][ T1767] ? hook_file_ioctl_common+0x144/0x410 [ 1999.141926][ T1767] ? __fget_files+0x20e/0x3c0 [ 1999.141942][ T1767] security_file_ioctl+0x9b/0x240 [ 1999.141957][ T1767] __x64_sys_ioctl+0xb7/0x210 [ 1999.141970][ T1767] do_syscall_64+0xcd/0xf80 [ 1999.141984][ T1767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1999.141996][ T1767] RIP: 0033:0x7f9024f8f749 [ 1999.142005][ T1767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1999.142016][ T1767] RSP: 002b:00007f9025f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1999.142026][ T1767] RAX: ffffffffffffffda RBX: 00007f90251e5fa0 RCX: 00007f9024f8f749 [ 1999.142033][ T1767] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1999.142039][ T1767] RBP: 00007f9025f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1999.142045][ T1767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1999.142051][ T1767] R13: 00007f90251e6038 R14: 00007f90251e5fa0 R15: 00007ffc60ad9de8 [ 1999.142065][ T1767] [ 1999.142076][ T1767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1999.194918][T22629] usb 7-1: config 0 descriptor?? [ 2001.052538][T22629] powermate: unknown product id 0240 [ 2001.057857][T22629] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 2001.073093][T22629] powermate 7-1:0.0: probe with driver powermate failed with error -5 [ 2002.002918][T20957] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2002.171585][T20957] usb 2-1: Using ep0 maxpacket: 16 [ 2002.197392][T20957] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 2002.213161][T20957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.221190][T20957] usb 2-1: Product: syz [ 2002.233247][T20957] usb 2-1: Manufacturer: syz [ 2002.238212][T20957] usb 2-1: SerialNumber: syz [ 2002.261389][T20957] usb 2-1: config 0 descriptor?? [ 2002.282328][T20957] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 2002.496439][T20957] pwc: Warning: more than 1 configuration available. [ 2002.510912][T20957] pwc: Failed to set LED on/off time (-71) [ 2002.518047][T20957] pwc: send_video_command error -71 [ 2002.523456][T20957] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2002.531837][T20957] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2002.547735][T20957] usb 2-1: USB disconnect, device number 75 [ 2003.172162][T22629] usb 7-1: USB disconnect, device number 79 [ 2003.711884][T27304] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2003.931825][T27304] usb 7-1: Using ep0 maxpacket: 8 [ 2004.104704][T27304] usb 7-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=9a.32 [ 2004.257638][T27304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.277586][T27304] usb 7-1: config 0 descriptor?? [ 2004.285376][T27304] pcwd_usb: The device isn't a Human Interface Device [ 2004.571661][T27304] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2004.584566][ T1810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.749780][ T1810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.772326][T21480] usb 7-1: USB disconnect, device number 80 [ 2004.983995][T27304] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2004.995067][T27304] usb 2-1: config 8 has no interface number 0 [ 2005.001182][T27304] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2005.013320][T27304] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2005.071546][T22629] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 2005.929777][T27304] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2005.940520][T27304] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2005.949400][T27304] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2005.958619][T27304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.969626][ T1820] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2006.209647][T27304] usb 2-1: string descriptor 0 read error: -71 [ 2006.223540][T22629] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2006.224682][T27304] ir_toy 2-1:8.177: required endpoints not found [ 2006.289590][T22629] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2006.291836][T27304] usb 2-1: USB disconnect, device number 76 [ 2006.337720][T22629] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 2006.369496][T22629] usb 9-1: config 1 interface 1 has no altsetting 1 [ 2006.389363][T22629] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2006.410986][T22629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.427747][T22629] usb 9-1: Product: syz [ 2006.436395][T22629] usb 9-1: Manufacturer: syz [ 2006.446769][T22629] usb 9-1: SerialNumber: syz [ 2006.732319][T22629] usb 9-1: selecting invalid altsetting 1 [ 2006.750276][T22629] cdc_ncm 9-1:1.0: bind() failure [ 2006.753951][T22629] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 2006.753992][T22629] cdc_ncm 9-1:1.1: bind() failure [ 2006.760359][T22629] usb 9-1: USB disconnect, device number 58 [ 2007.124973][ T30] audit: type=1400 audit(2021.090:2316): avc: denied { create } for pid=1856 comm="syz.1.8249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2007.943603][T21480] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2008.194537][T21480] usb 2-1: Using ep0 maxpacket: 32 [ 2008.208024][T21480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.231516][T21480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.242015][T21480] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2008.251067][T21480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.318213][ T1881] 9p: Bad value for 'rfdno' [ 2008.693215][T21480] usb 2-1: config 0 descriptor?? [ 2008.699681][T21480] hub 2-1:0.0: USB hub found [ 2009.001256][T21480] hub 2-1:0.0: 1 port detected [ 2009.223627][T21480] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 2009.316816][T21480] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 2009.504428][T21480] usbhid 2-1:0.0: can't add hid device: -71 [ 2009.558241][T21480] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2009.683269][T21480] usb 2-1: USB disconnect, device number 77 [ 2010.428658][ T1920] input: syz0 as /devices/virtual/input/input34 [ 2010.533914][ T1924] fuse: Bad value for 'fd' [ 2010.711576][T20957] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 2010.942941][T20957] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2010.950951][T20957] usb 7-1: config 0 has no interface number 0 [ 2010.980514][T20957] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2011.012585][T20957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.035646][T20957] usb 7-1: config 0 descriptor?? [ 2011.052249][T20957] usb 7-1: selecting invalid altsetting 1 [ 2011.073511][T20957] dvb_ttusb_budget: ttusb_init_controller: error [ 2011.094234][T20957] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2011.185639][T20957] DVB: Unable to find symbol cx22700_attach() [ 2011.250306][T20957] DVB: Unable to find symbol tda10046_attach() [ 2011.274494][T20957] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2011.303298][T20957] usb 7-1: USB disconnect, device number 81 [ 2014.608340][ T1962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8284'. [ 2014.620553][ T30] audit: type=1400 audit(2028.580:2317): avc: denied { listen } for pid=1961 comm="syz.8.8284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2014.651824][T32386] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 2014.662069][T32386] CPU: 1 UID: 0 PID: 32386 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2014.662096][T32386] Tainted: [L]=SOFTLOCKUP [ 2014.662102][T32386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2014.662113][T32386] Workqueue: hci1 hci_rx_work [ 2014.662139][T32386] Call Trace: [ 2014.662146][T32386] [ 2014.662153][T32386] dump_stack_lvl+0x16c/0x1f0 [ 2014.662174][T32386] sysfs_warn_dup+0x7f/0xa0 [ 2014.662193][T32386] sysfs_create_dir_ns+0x24b/0x2b0 [ 2014.662211][T32386] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2014.662228][T32386] ? find_held_lock+0x2b/0x80 [ 2014.662253][T32386] ? do_raw_spin_unlock+0x172/0x230 [ 2014.662277][T32386] kobject_add_internal+0x2c4/0x9d0 [ 2014.662302][T32386] kobject_add+0x16e/0x240 [ 2014.662331][T32386] ? __pfx_kobject_add+0x10/0x10 [ 2014.662358][T32386] ? kobject_put+0xaf/0x6f0 [ 2014.662377][T32386] ? _raw_spin_unlock+0x28/0x50 [ 2014.662401][T32386] device_add+0x288/0x1980 [ 2014.662415][T32386] ? __pfx_dev_set_name+0x10/0x10 [ 2014.662427][T32386] ? __pfx_device_add+0x10/0x10 [ 2014.662438][T32386] ? mgmt_send_event_skb+0x2fb/0x460 [ 2014.662453][T32386] hci_conn_add_sysfs+0x1a8/0x260 [ 2014.662466][T32386] le_conn_complete_evt+0x11ed/0x1fa0 [ 2014.662481][T32386] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2014.662496][T32386] hci_le_conn_complete_evt+0x23c/0x3a0 [ 2014.662510][T32386] hci_le_meta_evt+0x357/0x610 [ 2014.662522][T32386] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2014.662535][T32386] hci_event_packet+0x685/0x1210 [ 2014.662546][T32386] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2014.662559][T32386] ? __pfx_hci_event_packet+0x10/0x10 [ 2014.662570][T32386] ? kcov_remote_start+0x399/0x680 [ 2014.662582][T32386] ? lockdep_hardirqs_on+0x7c/0x110 [ 2014.662597][T32386] hci_rx_work+0x2c9/0x1020 [ 2014.662610][T32386] process_one_work+0x9ba/0x1b20 [ 2014.662629][T32386] ? __pfx_process_one_work+0x10/0x10 [ 2014.662646][T32386] ? assign_work+0x1a0/0x250 [ 2014.662659][T32386] worker_thread+0x6c8/0xf10 [ 2014.662676][T32386] ? __kthread_parkme+0x19e/0x250 [ 2014.662688][T32386] ? __pfx_worker_thread+0x10/0x10 [ 2014.662700][T32386] kthread+0x3c5/0x780 [ 2014.662712][T32386] ? __pfx_kthread+0x10/0x10 [ 2014.662725][T32386] ? rcu_is_watching+0x12/0xc0 [ 2014.662735][T32386] ? __pfx_kthread+0x10/0x10 [ 2014.662748][T32386] ret_from_fork+0x983/0xb10 [ 2014.662760][T32386] ? __pfx_ret_from_fork+0x10/0x10 [ 2014.662772][T32386] ? __switch_to+0x7af/0x10d0 [ 2014.662785][T32386] ? __pfx_kthread+0x10/0x10 [ 2014.662797][T32386] ret_from_fork_asm+0x1a/0x30 [ 2014.662819][T32386] [ 2014.662834][T32386] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2015.102869][T32386] Bluetooth: hci1: failed to register connection device [ 2015.557180][T32386] ================================================================== [ 2015.565275][T32386] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe47/0x1010 [ 2015.573266][T32386] Read of size 8 at addr ffff88807b4cd480 by task kworker/u9:0/32386 [ 2015.581315][T32386] [ 2015.583624][T32386] CPU: 0 UID: 0 PID: 32386 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2015.583645][T32386] Tainted: [L]=SOFTLOCKUP [ 2015.583650][T32386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2015.583660][T32386] Workqueue: hci1 hci_rx_work [ 2015.583680][T32386] Call Trace: [ 2015.583686][T32386] [ 2015.583691][T32386] dump_stack_lvl+0x116/0x1f0 [ 2015.583709][T32386] print_report+0xcd/0x630 [ 2015.583729][T32386] ? __virt_addr_valid+0x81/0x610 [ 2015.583741][T32386] ? __phys_addr+0xe8/0x180 [ 2015.583754][T32386] ? l2cap_connect_cfm+0xe47/0x1010 [ 2015.583768][T32386] kasan_report+0xe0/0x110 [ 2015.583788][T32386] ? l2cap_connect_cfm+0xe47/0x1010 [ 2015.583803][T32386] l2cap_connect_cfm+0xe47/0x1010 [ 2015.583819][T32386] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2015.583836][T32386] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2015.583850][T32386] le_conn_complete_evt+0x1991/0x1fa0 [ 2015.583868][T32386] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2015.583884][T32386] hci_le_conn_complete_evt+0x23c/0x3a0 [ 2015.583899][T32386] hci_le_meta_evt+0x357/0x610 [ 2015.583915][T32386] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2015.583929][T32386] hci_event_packet+0x685/0x1210 [ 2015.583942][T32386] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2015.583958][T32386] ? __pfx_hci_event_packet+0x10/0x10 [ 2015.583972][T32386] ? kcov_remote_start+0x399/0x680 [ 2015.583987][T32386] ? lockdep_hardirqs_on+0x7c/0x110 [ 2015.584005][T32386] hci_rx_work+0x2c9/0x1020 [ 2015.584020][T32386] process_one_work+0x9ba/0x1b20 [ 2015.584040][T32386] ? __pfx_process_one_work+0x10/0x10 [ 2015.584059][T32386] ? assign_work+0x1a0/0x250 [ 2015.584075][T32386] worker_thread+0x6c8/0xf10 [ 2015.584094][T32386] ? __kthread_parkme+0x19e/0x250 [ 2015.584108][T32386] ? __pfx_worker_thread+0x10/0x10 [ 2015.584124][T32386] kthread+0x3c5/0x780 [ 2015.584139][T32386] ? __pfx_kthread+0x10/0x10 [ 2015.584154][T32386] ? rcu_is_watching+0x12/0xc0 [ 2015.584167][T32386] ? __pfx_kthread+0x10/0x10 [ 2015.584182][T32386] ret_from_fork+0x983/0xb10 [ 2015.584197][T32386] ? __pfx_ret_from_fork+0x10/0x10 [ 2015.584212][T32386] ? __switch_to+0x7af/0x10d0 [ 2015.584235][T32386] ? __pfx_kthread+0x10/0x10 [ 2015.584250][T32386] ret_from_fork_asm+0x1a/0x30 [ 2015.584274][T32386] [ 2015.584279][T32386] [ 2015.803304][T32386] Allocated by task 32386: [ 2015.807695][T32386] kasan_save_stack+0x33/0x60 [ 2015.812357][T32386] kasan_save_track+0x14/0x30 [ 2015.817011][T32386] __kasan_kmalloc+0xaa/0xb0 [ 2015.821581][T32386] l2cap_chan_create+0x44/0x930 [ 2015.826417][T32386] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 2015.832216][T32386] l2cap_sock_new_connection_cb+0x101/0x240 [ 2015.838119][T32386] l2cap_connect_cfm+0x4f0/0x1010 [ 2015.843124][T32386] le_conn_complete_evt+0x1991/0x1fa0 [ 2015.848472][T32386] hci_le_conn_complete_evt+0x23c/0x3a0 [ 2015.854014][T32386] hci_le_meta_evt+0x357/0x610 [ 2015.858776][T32386] hci_event_packet+0x685/0x1210 [ 2015.863702][T32386] hci_rx_work+0x2c9/0x1020 [ 2015.868181][T32386] process_one_work+0x9ba/0x1b20 [ 2015.873106][T32386] worker_thread+0x6c8/0xf10 [ 2015.877678][T32386] kthread+0x3c5/0x780 [ 2015.881725][T32386] ret_from_fork+0x983/0xb10 [ 2015.886299][T32386] ret_from_fork_asm+0x1a/0x30 [ 2015.891047][T32386] [ 2015.893346][T32386] Freed by task 1962: [ 2015.897302][T32386] kasan_save_stack+0x33/0x60 [ 2015.901974][T32386] kasan_save_track+0x14/0x30 [ 2015.906630][T32386] kasan_save_free_info+0x3b/0x60 [ 2015.911641][T32386] __kasan_slab_free+0x5f/0x80 [ 2015.916382][T32386] kfree+0x2f8/0x6e0 [ 2015.920259][T32386] l2cap_chan_put+0x1bb/0x310 [ 2015.924916][T32386] l2cap_sock_cleanup_listen+0x4d/0x2f0 [ 2015.930442][T32386] l2cap_sock_release+0x69/0x280 [ 2015.935359][T32386] __sock_release+0xb3/0x270 [ 2015.939927][T32386] sock_close+0x1c/0x30 [ 2015.944059][T32386] __fput+0x402/0xb70 [ 2015.948019][T32386] task_work_run+0x150/0x240 [ 2015.952598][T32386] exit_to_user_mode_loop+0xfb/0x540 [ 2015.957884][T32386] do_syscall_64+0x4ee/0xf80 [ 2015.962482][T32386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.968357][T32386] [ 2015.970658][T32386] The buggy address belongs to the object at ffff88807b4cd000 [ 2015.970658][T32386] which belongs to the cache kmalloc-2k of size 2048 [ 2015.984689][T32386] The buggy address is located 1152 bytes inside of [ 2015.984689][T32386] freed 2048-byte region [ffff88807b4cd000, ffff88807b4cd800) [ 2015.998647][T32386] [ 2016.000952][T32386] The buggy address belongs to the physical page: [ 2016.007340][T32386] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b4c8 [ 2016.016074][T32386] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2016.024557][T32386] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2016.032096][T32386] page_type: f5(slab) [ 2016.036064][T32386] raw: 00fff00000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 2016.044632][T32386] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 2016.053210][T32386] head: 00fff00000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 2016.061861][T32386] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 2016.070510][T32386] head: 00fff00000000003 ffffea0001ed3201 00000000ffffffff 00000000ffffffff [ 2016.079201][T32386] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2016.087927][T32386] page dumped because: kasan: bad access detected [ 2016.094336][T32386] page_owner tracks the page as allocated [ 2016.100025][T32386] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5818, tgid 5818 (syz-executor), ts 64008086706, free_ts 63975591020 [ 2016.120765][T32386] post_alloc_hook+0x1af/0x220 [ 2016.125544][T32386] get_page_from_freelist+0xd0b/0x31a0 [ 2016.130998][T32386] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 2016.136865][T32386] alloc_pages_mpol+0x1fb/0x550 [ 2016.141706][T32386] new_slab+0x2c3/0x430 [ 2016.145860][T32386] ___slab_alloc+0xe18/0x1c90 [ 2016.150531][T32386] __slab_alloc.constprop.0+0x63/0x110 [ 2016.155980][T32386] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 2016.162387][T32386] kmalloc_reserve+0xef/0x2c0 [ 2016.167057][T32386] __alloc_skb+0x186/0x410 [ 2016.171469][T32386] inet6_ifinfo_notify+0x77/0x150 [ 2016.176479][T32386] addrconf_notify+0x81a/0x19f0 [ 2016.181311][T32386] notifier_call_chain+0xbc/0x3e0 [ 2016.186314][T32386] call_netdevice_notifiers_info+0xbe/0x110 [ 2016.192208][T32386] __dev_notify_flags+0x12c/0x2e0 [ 2016.197228][T32386] netif_change_flags+0x108/0x160 [ 2016.202316][T32386] page last free pid 5819 tgid 5819 stack trace: [ 2016.208639][T32386] __free_frozen_pages+0x7df/0x1170 [ 2016.213821][T32386] qlist_free_all+0x4c/0xf0 [ 2016.218301][T32386] kasan_quarantine_reduce+0x195/0x1e0 [ 2016.223740][T32386] __kasan_slab_alloc+0x69/0x90 [ 2016.228570][T32386] __kmalloc_node_noprof+0x30d/0x930 [ 2016.233834][T32386] qdisc_alloc+0xb7/0xa50 [ 2016.238143][T32386] qdisc_create_dflt+0x94/0x460 [ 2016.242973][T32386] dev_activate+0x63f/0x12d0 [ 2016.247540][T32386] __dev_open+0x4f1/0x960 [ 2016.251842][T32386] __dev_change_flags+0x55d/0x6f0 [ 2016.256844][T32386] netif_change_flags+0x8d/0x160 [ 2016.261764][T32386] do_setlink.constprop.0+0xb53/0x4380 [ 2016.267223][T32386] rtnl_newlink+0x1376/0x1f50 [ 2016.271902][T32386] rtnetlink_rcv_msg+0x95e/0xe90 [ 2016.276824][T32386] netlink_rcv_skb+0x158/0x420 [ 2016.281570][T32386] netlink_unicast+0x5aa/0x870 [ 2016.286319][T32386] [ 2016.288619][T32386] Memory state around the buggy address: [ 2016.294230][T32386] ffff88807b4cd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2016.302268][T32386] ffff88807b4cd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2016.310307][T32386] >ffff88807b4cd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2016.318380][T32386] ^ [ 2016.322430][T32386] ffff88807b4cd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2016.330489][T32386] ffff88807b4cd580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2016.338537][T32386] ================================================================== [ 2016.407658][T32386] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2016.414891][T32386] CPU: 1 UID: 0 PID: 32386 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2016.426011][T32386] Tainted: [L]=SOFTLOCKUP [ 2016.430325][T32386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2016.440364][T32386] Workqueue: hci1 hci_rx_work [ 2016.445024][T32386] Call Trace: [ 2016.448279][T32386] [ 2016.451193][T32386] dump_stack_lvl+0x3d/0x1f0 [ 2016.455772][T32386] vpanic+0x640/0x6f0 [ 2016.459738][T32386] panic+0xca/0xd0 [ 2016.463455][T32386] ? __pfx_panic+0x10/0x10 [ 2016.467876][T32386] ? l2cap_connect_cfm+0xe47/0x1010 [ 2016.473065][T32386] ? preempt_schedule_common+0x44/0xc0 [ 2016.478512][T32386] ? preempt_schedule_thunk+0x16/0x30 [ 2016.483870][T32386] check_panic_on_warn+0xab/0xb0 [ 2016.488790][T32386] end_report+0x107/0x160 [ 2016.493096][T32386] kasan_report+0xee/0x110 [ 2016.497488][T32386] ? l2cap_connect_cfm+0xe47/0x1010 [ 2016.502661][T32386] l2cap_connect_cfm+0xe47/0x1010 [ 2016.507659][T32386] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2016.513104][T32386] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2016.518538][T32386] le_conn_complete_evt+0x1991/0x1fa0 [ 2016.523895][T32386] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2016.529587][T32386] hci_le_conn_complete_evt+0x23c/0x3a0 [ 2016.535122][T32386] hci_le_meta_evt+0x357/0x610 [ 2016.539952][T32386] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2016.545993][T32386] hci_event_packet+0x685/0x1210 [ 2016.550910][T32386] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2016.556168][T32386] ? __pfx_hci_event_packet+0x10/0x10 [ 2016.561516][T32386] ? kcov_remote_start+0x399/0x680 [ 2016.566614][T32386] ? lockdep_hardirqs_on+0x7c/0x110 [ 2016.571795][T32386] hci_rx_work+0x2c9/0x1020 [ 2016.576277][T32386] process_one_work+0x9ba/0x1b20 [ 2016.581218][T32386] ? __pfx_process_one_work+0x10/0x10 [ 2016.586582][T32386] ? assign_work+0x1a0/0x250 [ 2016.591178][T32386] worker_thread+0x6c8/0xf10 [ 2016.595802][T32386] ? __kthread_parkme+0x19e/0x250 [ 2016.600818][T32386] ? __pfx_worker_thread+0x10/0x10 [ 2016.605929][T32386] kthread+0x3c5/0x780 [ 2016.609989][T32386] ? __pfx_kthread+0x10/0x10 [ 2016.614570][T32386] ? rcu_is_watching+0x12/0xc0 [ 2016.619326][T32386] ? __pfx_kthread+0x10/0x10 [ 2016.623898][T32386] ret_from_fork+0x983/0xb10 [ 2016.628469][T32386] ? __pfx_ret_from_fork+0x10/0x10 [ 2016.633560][T32386] ? __switch_to+0x7af/0x10d0 [ 2016.638221][T32386] ? __pfx_kthread+0x10/0x10 [ 2016.642793][T32386] ret_from_fork_asm+0x1a/0x30 [ 2016.647546][T32386] [ 2016.650824][T32386] Kernel Offset: disabled [ 2016.655138][T32386] Rebooting in 86400 seconds..