last executing test programs: 32m2.329001579s ago: executing program 32 (id=243): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 31m23.145353733s ago: executing program 33 (id=673): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000001140)="db", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) 31m20.570624241s ago: executing program 34 (id=691): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x4, 0xfffffffe, 0x82}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 29m30.064683653s ago: executing program 35 (id=1588): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 29m29.440463538s ago: executing program 36 (id=1595): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 28m59.422928985s ago: executing program 37 (id=1764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x880) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x82, 0x1, 0x20}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800244080ffffff050014100200000005000500020000000500010006000000991208b0149f3ffb5c3830d231ffd3ab9571b5504ff2a2ef1167c0b3a1771d1614d0d62059db6f003397a7a13490d043bafb6050e29ce6a00f441b06149bf6512a832cf85ca0c857850a946d505dbf9e26514265245c85a84b629563eda16b04dde5147278e19bd7ad12dc5baab4"], 0x6c}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 28m46.242524061s ago: executing program 38 (id=1857): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x400, 0x3, 0x17}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) 28m44.958969931s ago: executing program 39 (id=1871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000f80)="bad330fbc9b55400040000ea0756a85d9900", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 28m32.166898993s ago: executing program 40 (id=1928): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$COMEDI_CANCEL(r1, 0x6407) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x10500) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = mq_open(&(0x7f0000000200)='\xf2\x9a\xa8G@V\xa5\xea\xc2\xce\fl*h6#L\xc4v\xb0\xd9\x1e^c\xe5\xe4(>bxN\x9a\x9c\x80\xca\x1fE\x18v\x1c9\xc8\xcb7l\xb4\x87\ay\xc4\x8d\x1eSh\x85e@[\xbf\xb3]\x05\xd2Vz;\x7f\xd27\x18\xb7\x81\xe8\xf0H\x89_\xd8z\x05\xab\x81\xdc\xdb\xde\xf7^\x8d\xc4X\x01\xeaG\xe5\xc9\x8e\xc2\xc3\xf9\xa9a\x97[r\x0e\xf4\xb15\x9d\xe9C\"\x9e\xbfG9\xfc\x04\x03\xd6\xcf\xac\a\xab3\xb9\x9awE\xe0Gf\x84\xc8\xfa\xf1\x8d\xc1', 0x40, 0x46, &(0x7f0000000100)={0x1, 0x9, 0x5, 0x8}) mq_timedreceive(r6, &(0x7f00000002c0)=""/107, 0x6b, 0xfffffffffffffffe, &(0x7f0000000340)={0x77359400}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc851) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17m36.047953947s ago: executing program 6 (id=4729): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="c7b20c4080fd7dd104137ebef4009309ee7cb42a", 0x14}, {0x0}, {&(0x7f00000005c0)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872ecad570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f2728da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e", 0x80}, {&(0x7f0000000280)="ffa355d9c300000000fb5efee42cd565ca8b886d82df67b6659d3b161d8b732c8031432d5b359500001b6c5a68e2d3b2335a922381dc417c913a242af2d291da24546114fc6c5abe8e967c5697e08908cc8729c435439d124c1ae1a4dfef38e44e7c1623118667880a59c0944e4852610a267c4e2bd62764541debdf452cad44eb8bf60284bed58ce32298336d61909207000000000000000f372f70c0a1754cf664e38dc730507fc007447a", 0xac}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xad}], 0x5}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="01741dc7f2f28403584063835a4d71087b8771ce113ed1e6da6253443031e6c21b5714a6e393ca83bd641bce04fb3454e935f0e21351feff83e5", 0x3a}, {&(0x7f0000000340)}, {&(0x7f0000000440)="0d1064d4a301ff5e465d0ea542f69962b810669291dd9c83cc5dddc445131820f0b419ef46ba729ca6ee604d93", 0x2d}], 0x3}}], 0x3, 0x488c4) 17m35.835586506s ago: executing program 41 (id=4729): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="c7b20c4080fd7dd104137ebef4009309ee7cb42a", 0x14}, {0x0}, {&(0x7f00000005c0)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872ecad570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f2728da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e", 0x80}, {&(0x7f0000000280)="ffa355d9c300000000fb5efee42cd565ca8b886d82df67b6659d3b161d8b732c8031432d5b359500001b6c5a68e2d3b2335a922381dc417c913a242af2d291da24546114fc6c5abe8e967c5697e08908cc8729c435439d124c1ae1a4dfef38e44e7c1623118667880a59c0944e4852610a267c4e2bd62764541debdf452cad44eb8bf60284bed58ce32298336d61909207000000000000000f372f70c0a1754cf664e38dc730507fc007447a", 0xac}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xad}], 0x5}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="01741dc7f2f28403584063835a4d71087b8771ce113ed1e6da6253443031e6c21b5714a6e393ca83bd641bce04fb3454e935f0e21351feff83e5", 0x3a}, {&(0x7f0000000340)}, {&(0x7f0000000440)="0d1064d4a301ff5e465d0ea542f69962b810669291dd9c83cc5dddc445131820f0b419ef46ba729ca6ee604d93", 0x2d}], 0x3}}], 0x3, 0x488c4) 17m24.962273401s ago: executing program 42 (id=4782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x562d}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x40084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c000780050015001000"], 0x68}}, 0x0) 17m20.062408088s ago: executing program 43 (id=4807): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\x00\x00\x00\x00ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\x85n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r5 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r6, 0x0, 0x4000000) getpid() 16m40.036405832s ago: executing program 2 (id=5009): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 16m39.581853669s ago: executing program 2 (id=5011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000001000001000000000000000085000000a00000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000007b000000950000000000000000000000b20acb2a22d28cb562564cd34b0de47de3a563fbd23d120620c7be5d5d63d527c76bd1a6e159fca50656ea20e6cd4aaea93df6a88d9abde72a6527cd742be840447ee4124f22788c347648ee1c9d42208d05d3ffb9247a00a92fa0f2923743f3729866151f2ca8aa1b77c3f9d56bcc238793a51e49"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() prlimit64(r3, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x70, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x4}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x70}}, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1403c0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000200000012bbd7000ffdbdf25ff000000ffffffff000000000000000000000000fe8000000000000000000000000000384e2300404e2400000a00808033000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="1c000400feff4e22000000000000000e0000000000000000000000000c000f00010000000000000014000d00e000000200"/60], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 16m37.115803951s ago: executing program 2 (id=5020): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a791", 0x3c}], 0x2}, 0x4) setreuid(0xffffffffffffffff, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xc, 0x6]}, &(0x7f00000000c0)=0x8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(0xffffffffffffffff, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 16m36.558869539s ago: executing program 44 (id=5020): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a791", 0x3c}], 0x2}, 0x4) setreuid(0xffffffffffffffff, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xc, 0x6]}, &(0x7f00000000c0)=0x8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(0xffffffffffffffff, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 15m53.362406704s ago: executing program 45 (id=5173): r0 = eventfd2(0x0, 0x0) io_setup(0x81, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_pgetevents(0x0, 0x7, 0x0, &(0x7f00000008c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60122d9200083a0000000000000000000000ffffac1414aafe800000000000d60b000000000000aa0200907800"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x84, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x64}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x189}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params]}, 0x84}, 0x1, 0x0, 0x0, 0x400c014}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15m31.43415821s ago: executing program 46 (id=5259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e09f547ed3f02d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m30.955498985s ago: executing program 0 (id=5266): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@getlink={0x24, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[]) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1010040, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) 15m26.551648637s ago: executing program 0 (id=5279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300000000000004000007060000000000000000ab03a0d9508fb3ea13234f833f978cb376a210e52866e7d453e8b0e7063d23ba2c62659cf443bb6407497269fb494c3a57113c55862139eff3638ca41c84fb65eed3960ce766", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sched_cls=0x2e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000397000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000aeb000/0x1000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff37) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) creat(0x0, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 15m23.108339229s ago: executing program 0 (id=5287): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff], 0x9}, 0x10) 15m22.256327027s ago: executing program 0 (id=5291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 15m22.119641417s ago: executing program 0 (id=5292): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x1, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x6f, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 15m21.776103754s ago: executing program 0 (id=5294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x10ba, &(0x7f0000000240)=ANY=[], 0x0) 15m21.269280806s ago: executing program 47 (id=5294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x10ba, &(0x7f0000000240)=ANY=[], 0x0) 15m4.155004757s ago: executing program 6 (id=5260): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x802) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7004ffdbdf251a00000018000180140002006a657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000000e4000000"], 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="04"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0105b08, &(0x7f0000000040)) 14m59.376554021s ago: executing program 6 (id=5346): socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)='*', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000012b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10060, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xc4}}, 0x0) ftruncate(r6, 0x200004) r8 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 14m58.74238977s ago: executing program 6 (id=5351): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', 0x0, 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 14m58.627742589s ago: executing program 6 (id=5353): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff], 0x9}, 0x10) 14m58.235586132s ago: executing program 6 (id=5354): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xa00, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44007}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) 14m57.848878756s ago: executing program 48 (id=5354): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xa00, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44007}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) 14m53.129716827s ago: executing program 3 (id=5367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r4, 0x118, 0x4, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x20000000) syz_emit_ethernet(0x3e, &(0x7f0000002a40)=ANY=[@ANYBLOB="0180c200000300000000000008004500003000000000fb019078ac1e0001ac1414aa03009078032400004500003135ac88aa54460000010000000100077f"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="5d3d7a20a811232e31b64cf2479950aa2ef4a19793c79e384768f944aa164ddebb94ff7345218db208deaf5b20c5a00c641bd5804c9a75a0b2aecd3c72581f8feec2b4401859c1a7e9f3e191f5879834500db0b1087613edf368450255ebe8390e076442e7a5a654d752298cba30e9dbc96ed73efa581b689eed316e925daf298222fda81652bad7326c0672a0b0c40d24ec71f354d2", @ANYRESHEX=r2, @ANYBLOB=',mmap,posixacl,dfltuid=', @ANYRESHEX=r6, @ANYBLOB=',loose,noextend,nodevmap,cache=loose,smackfsroot=-#@},\x00']) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYRESOCT], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 14m52.069654467s ago: executing program 3 (id=5369): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='nfs\x00', 0x208000, 0x0) 14m51.780212973s ago: executing program 3 (id=5370): r0 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x50, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/155, 0x9b}], 0x1, &(0x7f0000000540)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac48243628", 0x1e}, {&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c244", 0x3e}, {0x0}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYRES16=r0], 0x2c8}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xb, @mcast1, 0xa08}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000240)="eab12e96e6dc14e2", 0x8}, {&(0x7f0000000600)="24834a373c8377a78d83e01ce7538b14a6531c432a4f0eea43cd6d196b179224a9be9902e7ed921bf25232b56347bffd8f5febcaca68b64e340ff7b551c4aa134a5b1255c3ccd9f97ff4dc5094bda3c3281519fdf8ef91f0c4c6a56bd1bdb18d21584554f0201eed9dfcf0fb1107719a70b4db1a6753cc9420370d7e0db228567c460b7ed1975346765a62a452358c8414a1b312c20f3c74ae91c37cb4042e0f7f38ae8888d6b8eaf37445f7f691b477090b2a5d7efb1295b23b02efe5efdd86c997ae80fe26ab14da54b4533edc933e511747b76117dc2161026cab", 0xdc}, {&(0x7f0000000300)="f38969408c4de6", 0x7}, {&(0x7f0000000440)="7c3b6f4f3cfc24bc13a4fbb6f527f97bafa41ce7687ed8731ad43c13aa89085814634dc08a994330b14dad90f9628aa969ac0d6129abf50d64ddec87", 0x3c}], 0x4, &(0x7f0000000780)=[@hopopts_2292={{0x50, 0x29, 0x36, {0x2f, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x200}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x67, 0x6, 0x0, 0x1, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x3b, 0x5, '\x00', [@calipso={0x7, 0x28, {0x5, 0x8, 0x6, 0x8, [0x1, 0x0, 0xff, 0x5]}}]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x5e, 0x9, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}, @generic={0x3, 0x30, "ebc5544363fb17e4e4de059c5f03a833139459019a6dc3d9c260ddf9e29b9477a75754d02efd0a50d8474b0a9bae7f18"}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x2, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}]}}}], 0x1a0}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0x1fdb2a78, @empty, 0x3ff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000500)="9d8d1d02973d36171b67aec87bc78e79393694ff002d486b619fc40d", 0x1c}], 0x1, &(0x7f0000000940)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x62, 0x8, 0x0, 0x9, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x31}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x62, 0x4, '\x00', [@enc_lim, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @local}]}}}], 0x98}}, {{&(0x7f0000000700)={0xa, 0x4e22, 0x2, @empty, 0x9}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000a00)="8ad569e210eee9d624d774e312e88859f6f5acdc2d9e615a5e30a58df1b40f07ebb89a87badf8ed7919f1b97b3091b864bd9a8ec34496d961e3abe3b97e13d7540b67561509814d4e0f00d0df9745d0e2efcaccd2e8dfbe7416e90223817db822528eb24757465b27c9a81961fc220cc62a7efebf5d94f62f63473a207ab80b0e7cbfa4ffdd391a36f2142b25bdb782b4df01003f48852211e6b8ffc0fba28c0a88fd30637f7f142704173d0746932af662992a4afdb3ba23f49e036331d9035aaeac706c7e1ffbd029a0c77872623994fd15e01f490c78e514909fb7f95c57ea58afa8f63f6ab3d45d53f7fc77d", 0xee}, {&(0x7f0000000b00)="ca844d50a5290bf5c2d4c307a174ed527f57c89e99a6f67273ada182f98a14398b8d9ae2", 0x24}], 0x2, &(0x7f0000000bc0)=[@hoplimit_2292={{0x14}}], 0x18}}, {{&(0x7f0000000c00)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000c40)="636753d4381ef5dedffd841b34", 0xd}, {&(0x7f0000000c80)="3ee44886b20aed692bf18fab71f8f40888010305663768a0885253da161f9136dac7244cfad52eadd150d3e94cbe70b46f11718a639b8c100285beeb7392e68cb763803e3386389746042b2ff566e1b870a80b81465a8eee0c844e8b7dc6ce4bb3fe174d2b9187617f1479bed1", 0x6d}, {&(0x7f0000000d00)="398e7adc21508dba188e15aabd624d54bb11b2420d7d357dd25841fda72325592b6e007edee3881695ae4031331913be4d2f70d2fa8c91bd562b00ad162cf113add5830b569a2f2baa0deb58fd868639280b230b4025a66582a07766ca576a65116aa94526af13d8a7502cd815302cee90c10c1e38dafb8e1e147766d542f36194ca81e332156e6859bf4216bede2ce158204aa11efbf854f6cec3cb480345d0ab794a05f84f98dcf4015b72bc60e1ca2c5f75e6184ec0c1977eff2f07b480eb940a6db23daee5359989eb5aa42c4c", 0xcf}, {&(0x7f0000000e00)="2c093d6db7135bdb2eab20bd007c", 0xe}, {&(0x7f0000000e40)="bcd614c4add8fc798c7f8e7bb69861b5187bbbb79c1c08311cb90bc1b58c228e39", 0x21}, {&(0x7f0000000e80)="0986a7009d3345753b4cd41011fce471591dbf7d01a097b1b04af085554ab9fee5659e5290fa7ab5c8c84cb0b2d9b95cb36386be4325bc6c34dcb9bf6de2b4b55266e5fe06e40d1d3384ef485480c0cddf92d4a08f08d9c2297872ec593e5db5dc106d677d2dab562768ab76", 0x6c}, {&(0x7f0000000f00)="d2ac2878ae2dcca6f8bb3fd9cb089dce9f7934a80e06c9cced31a6690a01abaff7008c23448f67630737d61bf50ea8bf70e6a776258c69e2a93b431e27eb88f1d9ac157f8ef655aa30937472", 0x4c}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000000f80)="aaa7f1aab039bd6cd3453b4260df6da5356a5d1fbf461b349eed5681c98d412b601d2e886f235b3095d1034cc5eced4e00"/59, 0x3b}, {&(0x7f0000000fc0)="3543739a3bf32f6992da493c5935b03bd4f63b6894783e5c333b118aac75291610f51e58585e886dd4b7ca47ab8106a4ee10b5695d8f7b77d9a1b24e34a94ff67d3cef4ab119f67a44863f13e2652be1", 0x50}], 0xa}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001100)="b5e107688ad1a5b5b7c8138330ef71c79484a4a1a4167d7e09afd98cf7e6af49fc9d26a042dd5980819d326a2746038542f62f4b291207d7524a5cc8fa5edb7120ec082b1611c5dffc3aa69af37d9070c61a74c3c3b9135798f5e2b3e8bc69aa191197287f3e2fb62eb48572c801a74ee178ddcc11bad679bfd1ebee7e369bce5738810bb5a0c74ddcc3b85fb3fcac38d9f4cf0f694f6dd7c03ebe363f6cc66c3b77d5173f1ae121bc680fbaa12f3e693443cf84168be6cbf2b4d2aab1ea3ef949507ada1bb9725de2d0d666b015a266802f8ea32829d7d31615adb52cb92921a3133836830f776efd0a", 0xea}, {&(0x7f0000001200)="a51ddf366be9a3804d2f6037c8691e7ffceca2e135840cf8aaa1695f6e32c64c4f13dceab26f0de2d9e91086648564bc733370e5beffe821", 0x38}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1b8}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000001440)="6db93f8eb707f62098b728e919b58c250056f9d1c2e3c221bedea889f78c1772feeae7126422c901defe3ea865fbd8cd360a0f733f0642b0e1d272231f1aded8b8dac344aeaa08bf419c0cda0bd77a917def789710327d605c9e25bacec8f3fe8fc86b69731ff51e4d1f9bd228bc4dfe0c8829e55f5965611e2aaa38967aae295903feca01829855d52ce5efdfbc2b4d4df6d52dda46595faa7982dfe71e58ae2cbc138235a1571fa6d22889ef01ab5d3cd5e700effdd96d6fba78dc73d733f0fcf335c60e543fd33d0db3", 0xcb}], 0x2}}], 0x7, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)}], 0x1, 0x40800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0x8004}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 14m50.264264728s ago: executing program 3 (id=5375): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 14m50.168477491s ago: executing program 3 (id=5376): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x0, 0x0, 0xbf}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x20000000, 0x0, 0x0, 0x0) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000010c0)={'system_u:object_r:pam_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x5}, 0x5d) 14m47.379670788s ago: executing program 3 (id=5382): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="100a050033c2050024001280090001006f6e64000000001400028005000100040000000600180001000000e1984ea9a6ecdf8c2edf4e474a9aa6c49e80bd3ea051c1395b25345abab1023dc75471984edee85aa5f5e47538ede48270151d5d29f253"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 14m46.979699481s ago: executing program 49 (id=5382): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="100a050033c2050024001280090001006f6e64000000001400028005000100040000000600180001000000e1984ea9a6ecdf8c2edf4e474a9aa6c49e80bd3ea051c1395b25345abab1023dc75471984edee85aa5f5e47538ede48270151d5d29f253"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 14m30.315494694s ago: executing program 2 (id=5385): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 14m30.094282523s ago: executing program 2 (id=5437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000003c0)=0x12, 0x80000) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect(r8, &(0x7f0000000540)=@isdn={0x22, 0x6, 0x2, 0x7, 0x2}, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000006", @ANYBLOB="00000000060000000a000300aaaaaaaaaa190000180012800e00010077697265677561726400000004000280"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket(0x2c, 0x3, 0x0) 14m28.629309289s ago: executing program 2 (id=5440): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x64, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xac1414bb}, "00186371ae9b1c03"}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$nci(r1, &(0x7f00000002c0)=""/152, 0x98) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0}) memfd_create(0x0, 0xe) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b19, &(0x7f0000000040)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000240)={0x1, 0x1, 0x1, 0x5, 0x0, 0x8}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}], 0x1, 0x40000008, 0x4e7b) 14m28.035218382s ago: executing program 50 (id=5440): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x64, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xac1414bb}, "00186371ae9b1c03"}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$nci(r1, &(0x7f00000002c0)=""/152, 0x98) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0}) memfd_create(0x0, 0xe) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b19, &(0x7f0000000040)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000240)={0x1, 0x1, 0x1, 0x5, 0x0, 0x8}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}], 0x1, 0x40000008, 0x4e7b) 5m23.911821146s ago: executing program 1 (id=7113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000000cf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @alu={0x7, 0x0, 0xd, 0x9, 0xa, 0x20, 0xfffffffffffffff0}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x68002, 0x0) ioctl$RTC_AIE_OFF(r5, 0x7002) 5m22.837268342s ago: executing program 1 (id=7115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r4, 0x118, 0x4, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e310000000000000000000000fa5565f48c8753f1251aaa7e58027307bf9bb77c8e92484137"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_emit_ethernet(0x3e, &(0x7f0000002a40)=ANY=[@ANYBLOB="0180c200000300000000000008004500003000000000fb019078ac1e0001ac1414aa03009078032400004500003135ac88aa54460000010000000100077f"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="5d3d7a20a811232e31b64cf2479950aa2ef4a19793c79e384768f944aa164ddebb94ff7345218db208deaf5b20c5a00c641bd5804c9a75a0b2aecd3c72581f8feec2b4401859c1a7e9f3e191f5879834500db0b1087613edf368450255ebe8390e076442e7a5a654d752298cba30e9dbc96ed73efa581b689eed316e925daf298222fda81652bad7326c0672a0b0c40d24ec71f354d2", @ANYRESHEX=r2, @ANYBLOB=',mmap,posixacl,dfltuid=', @ANYRESHEX=r6, @ANYBLOB=',loose,noextend,nodevmap,cache=loose,smackfsroot=-#@},\x00']) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYRESOCT], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 5m22.652158289s ago: executing program 1 (id=7118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r5) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, 0x0, 0x0}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$radio(0x0, 0x3, 0x2) writev(r7, &(0x7f000000a100)=[{0x0}], 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}}) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 5m22.118571968s ago: executing program 1 (id=7120): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000400), &(0x7f0000000440)='%ps \x00'}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x140075, 0x7ffe, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) 5m18.395053608s ago: executing program 1 (id=7138): io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000e00)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x9}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffd, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x428, 0xd0, 0x1b8, 0x1b8, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 5m17.388152844s ago: executing program 1 (id=7141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24040090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 5m1.039834731s ago: executing program 51 (id=7141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24040090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 10.994065688s ago: executing program 8 (id=8106): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000001300)) r5 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.573013753s ago: executing program 9 (id=8108): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2b, 0x0, 0xc, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x58) fallocate(r0, 0x0, 0x0, 0x8ffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000440)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000440009000000920000000003050000000800"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) r5 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x2, 0x21, &(0x7f0000000100)={0x0, 0xfffe, 0x3, 0xa3d}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000011000108000000000000", @ANYRES32=0x0, @ANYBLOB="0000000062000000080004004400000008001b00"], 0x30}}, 0x0) mq_timedreceive(r5, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000dc0)={0x37c, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@generic="1ff59547e203713a053c3d096d64f28fefe20c99a7e0d5ea070ad1e63239f46441f31838849706f5ec7d0297c6c41392d7dfbbc5ae7c449995d62be8a4b5efe0db3abdd19b0157bf2fefa1cd", @generic="73e0a6c3795069caa1f96e4c8795207a4c8039165a5b4cb8fb833250eec73095aa4944cd0ca50e1b2ad7d167c83dbe9a54d810bd01e6cba46d8ca85e5f2117d3368791b84200b06bbd5ab1c913050d48b178bb4e1fedf9fd10aa7623be292a0d188a87aa5c7bcacc25277657894f4b7a763aab50d93c80562ed96d23834a62c701f5cdccfb17470c83ba2d4265e1b6c2b9ef047c5c484685b109d34e3d5748fe98d2c343", @nested={0xc, 0x12d, 0x0, 0x1, [@nested={0x4, 0x11d}, @nested={0x4, 0xf4}]}, @nested={0xba, 0x1b, 0x0, 0x1, [@nested={0x4, 0xb0}, @generic="50147fbaa82458558adccf34741db6c4dc62aea81fd9c7a5", @nested={0x4, 0xd8}, @generic="4d3c4d072c4ddeafba29884950c20a47b49554e948542968e488995feef6d267c59d8aed9eac39a68d523a5ec459729dd7ab8e94eaf8d4f79b9614d7a7a396a1e578cf090d4303375c5f938420568f3ec6f3173a90aa88fd5f4f12e98f8a555db3e23b52960a7217636bea22650383246fd55e0a94547c6e244d21edf32eb26fed0f7397555c7992795000c318823de77487", @nested={0x4, 0xd5}]}, @nested={0x1ac, 0xd2, 0x0, 0x1, [@generic="744094167fb54b3b275b0ce17176bcf70252a69f6c2b908d446dfde9c0500a8ba75d05f71fd7cbbd5823a2a0aff5b7a5fa5de9fe5a20ad0170a9ee67f7e340efedb51f53f331766362b137103180e517e4c9d1f1006ed9b3aadc24fb9a417be3e54fe766795588e283300b9d88e3ecf832f6ae4252fa29c12efcca1e3e3073b56ecb98e25b135bded60e85a5a226248fe90122d8eb497d92713d112f926acdc67eb88d968372dba3496b0b64023226fe2de1e1c4ca6fe48a6d68a45a4c816cacd7a70a0ad7d597", @nested={0x4, 0x133}, @generic="cc693ce20319af7e533f8c165eac8e828a7fab115a63faca053bd7b022dbecb8c5782cc95adfe13f5c47d88459b00e1f7fcd1f7bfc9050194e1f9f859d6aa12e0a3cf698a325d90798ec1481529e2015a7d7e06780ed531899be2d0ef1c0cdf914a598b96f6bae236a23f90bdc13acb84a252a5db9f0741901b78e2c44fd1decc5f4ba42d0d2e498c794f4e515b3129dd24951f7031898219469584548e569c4e1fb1b8d14e25f12b8cd4f97ff", @typed={0x14, 0x10c, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x84}, @nested={0x4, 0x12e}, @typed={0x8, 0x13e, 0x0, 0x0, @uid}, @nested={0x4, 0x10e}, @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @typed={0x8, 0x36, 0x0, 0x0, @uid}]}, 0x37c}, {&(0x7f0000000380)={0xb8, 0x27, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@generic="34c0b0c1931c95c82bcfc15b7dd237001c164eb1435a54be97478bb4203e2d608ebff4ecd8e92b2010b64b4004418f9e533f30b49254c95ec8ac81fe303ebbb82087325ee9963b5cd14124d73e8401e2ce62a0c30f39fed7c0b13e3db139d178bbffa2f9f502e141b987dfa66018b0b3315ab61341cdffb58ea6f5bff7e7354033353ed4fbff37e578d1a4a7f9f0cd7a492f3c81e6fe1a22328634f6f70e1617e935e3fd8e58"]}, 0xb8}, {&(0x7f00000005c0)=ANY=[@ANYBLOB="100000001300100026bd4f00fddbdf25"], 0x10}, {&(0x7f0000001700)=ANY=[@ANYBLOB="100000003200000125bd7000fedbdf25d845d4f406672f613cb2f42c511f08e4013bbfb29e0b4145bb854332b2d4998a93f4ba23cbaefc9ec8ca8a81a117fd10d45f5d89fcef86d57bfa80c335184337443e95573a799b76426af5a4ef1e32e320036ff75ef29d1fc73220c72a42dcbf0f336afaf7a91cf4a73cd9a19c00cacd5b2bbe37cf542e6f311464fbbab257e858c41787c79ff52e6e5b518684eec004827f1d56e2afdfd63138e7da9789434f8134187a9dc87590b097137cf0cdb3bd8791023dc05da6ad013f8cd13cf0ff08307149fe9c318d1723"], 0x10}, {&(0x7f0000001140)={0x450, 0x16, 0x100, 0x70bd29, 0x25dfdbfb, "", [@generic="59a51032c98d0b61d04ce06b9a8ba922315101dae23c354ec83a6389870f2e99bf3b28b8dc476840e9e5accac7150ec70fad480572a8582f0276183919e62758c3aadfd8fc77c369a5bf2db67a63e516d978a678ea4dca88163e41c30378bc249f34845bd6", @nested={0x24a, 0xc4, 0x0, 0x1, [@nested={0x4, 0x13e}, @generic="4113cc41463c1525f99b4f4c8e7b13cdae9713832a26f2ce67e3c2ebfc1cf733785c7ee3fb0df59ba6db028f7e36ffeebc1f3995e78fa363ec2cacd7a8f3b57b566434b7c273a9975cf4076c0f5429a0c2de487edcb4da7781f3525748a0aa91574e25547ce4e958a043", @nested={0x4, 0x10d}, @generic="1dba6ef2326cdd5e62e74341e8ced2f0c46b5a353fab7cbd02be5e0cefd175e7ce76b4524d3efd941b35385469569b45f6386928292767aa30c5b7dd6fe4c3546bb56a363bcd7d608583ec142f965d6748567574cda6b5e5ed87b618240ad9ee603bf0daeb402197a5c69a0cc30eb379994a71bb14fb0494d2735078deb095653a498b858e09e411e265abf02546aa7cefd1427289f9e0670b71face69ef5763fcce8cab518866b89bb5880f880ac4b40310d35a7b345b2be183bf1c2f9a7e9cb4cdbce738bf35db3838e084a5442de634b74e53cd2c0a958e6dd5", @typed={0x8, 0xf1, 0x0, 0x0, @uid}, @generic="975591fecae872c275bd7829bee795eb1c5d8e8d2861f67047e9100df3a83d792a18226ae3d940f364a001009e0f4eb5a2b50e73aff53c1cf8e99b956f2d51db9d342d97454e1c88af010b1eb8e35a0229494ba12ed2f69dc0c11ab86e114a7b4606603a948151fff748146ba238fa401b3f9297e8e1b2163abfad1c5b7577ea43c8f6c775eeff430141d4adfb43242a9d540e9b09552519d54e20f5554ca417ab208fadb162cd9ed97e66ea7c8c7020382bb650d3cbe1b3c109bcfb4326b46d7c91145c00fad6d44dca4252975ef4f180ca", @generic="f3fd8d3b721a1e976bbbe2a59a5074fb0e117db4e9a100b995e1f9", @nested={0x4, 0x4}]}, @typed={0x6c, 0x39, 0x0, 0x0, @binary="40f32311f8deb59363869971c47552f4f477177b07ce8103ec32f0158ea348efdcc6894a0c7230ec8bcc023fcd486074f42ba160ee96337f69e9ea31e88e7340894627c77b77301a1816efe59153cbe2c9e49d8c1682aeb9e45523beb1d2bb7a2f0cebdbeea9de2d"}, @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@multicast1}, @generic="e4b174ff699a730b0578014b31cc8a453a3aabfcd723aacf5a620beb0bee187a848ab9563123ca059d2e0da3dd47bf34e730f4dab72242560ec0e1cf75dda4cf13fdf996e783484c13432c201f0ead4f6e973bfe66936288c4f31b8ee6cb8862c884fda0ada04fcdc50a46409941b88d6d862c148ab2764905bdd699edeb0676e22d9dd5c7255f60853cc4b3378adb7175623c9b6e586c24bf", @generic="b533ef602a1fb0dbafd7b0e307bae471d8344274d7ff3e3094b654a2019ec24043985250f6c2433f3c77630014f03019c2999854b26f3022e2869912cdc119e3ff61a80710430b88cc337832df3d460cb61a2ef9bbcc8723b5295418c101982c7c6356b9e1c5634159f804576c514d4d94c3d64f838047e32cbb7611403210"]}, 0x450}, {&(0x7f00000007c0)={0x1f8, 0x1f, 0x800, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0xaf, 0x0, 0x0, @uid}, @generic="0c5e6d8b150a0ba20e1f52af91434436418bbd00ddd28f24e40ce45eb1e87953ed51b7faee54b8f7a366e0910bd370a8a0fad3af74bc0ea965ce9ec77f9e29e0fc7c92dcf29999c5ae0e5f283cb8b4d3f96249ecee", @typed={0x8, 0x27, 0x0, 0x0, @u32=0x80000000}, @typed={0x8, 0x138, 0x0, 0x0, @uid}, @generic="317f0aebbcf2625334da654fa53048b355c3d6fafb05bb2203d301fa36cc6f362144be76e99892116dc29b85054ccd9a6c4aacb72dd5f104a1488f37d7d63b377f7d524a900cc76eaba733a62c5949ff2b2ba1201b102af6f1f6b3d38dfdfb28f870d348536bab2f0457257d3f55a08b047a6f0b1a204645e4c769a637333fdf8308c1d89103c083ef8069730416553c6e98648ce93d401b59ec5a1763e9be9a12fd8768e96b3faa76b8575429fcf8953f", @generic="c1ffae28cae250e16f558b84870a9eb2c47835106444c8a61f1fbab8d45c5dcebf77b61b665ceb0de00a642838fb1589afd0e4eae897397f60c597c72137761f7d8a8d8aaa3dbfb45d54660ea9f4cb61dffef6ff059945e627016bd73b0cf0804ef88dd1aba1fe2489f7b0fee74424001aace06afab3b708b41a3d476b64b9957628c926c7c1649d23c78c1133be9aa37971152d7c0548a32808f0fdd017d104bac02fa9f544b90068453d4961d332b1632698f62a69299310d309b142266a8f14db8e60585970"]}, 0x1f8}, {&(0x7f0000000640)={0x5c, 0x1c, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@generic="aaa6145cef8ac2d2abd242a2204c7fc073be67227c9c9ed6c2072c94a72614c96253929d1dc3871a17c35c96c1da2e40e582c71f3cac7cea2d73decd426ed1d0deb02bc1c8d8260bef"]}, 0x5c}, {&(0x7f0000001800)=ANY=[], 0xa0}], 0x8, 0x0, 0x0, 0x4000880}, 0x0) 9.940107776s ago: executing program 9 (id=8110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) capget(&(0x7f0000000100)={0x20080522, r0}, &(0x7f00000001c0)={0x1, 0xfffffffb, 0xfffff6ec, 0x8, 0x4, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 8.299445966s ago: executing program 8 (id=8112): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x0, 0x10}, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x628240, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1d) syz_io_uring_setup(0x4832, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x75) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) mkdir(0x0, 0x17) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 7.01546039s ago: executing program 8 (id=8117): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xa, &(0x7f0000000240)=@raw=[@alu={0x7, 0x0, 0x7, 0x2, 0x6, 0xfffffffffffffff8, 0xfffffffffffffffc}, @exit, @alu={0x7, 0x0, 0x0, 0x2, 0xd2e54bc58149be5d, 0x0, 0xfffffffffffffff0}, @generic={0x2, 0x5, 0xa, 0x3, 0x9}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], &(0x7f0000000400)='syzkaller\x00', 0x8001, 0xb7, &(0x7f0000000440)=""/183, 0x41000, 0x11, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000900)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xd, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[r7, r7, r7, r8], &(0x7f00000009c0)=[{0x2, 0x5, 0x5, 0xc}, {0x0, 0x1, 0x8, 0xb}, {0x0, 0x1, 0xa, 0x8}, {0x4, 0x5, 0x4, 0xb}, {0x5, 0x3, 0x2, 0x5}, {0x5, 0x4, 0xa, 0xa}, {0x3, 0x3, 0x3, 0x7}], 0x10, 0xc3}, 0x94) r9 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ftruncate(0xffffffffffffffff, 0x10000) ioctl$COMEDI_INSN(r9, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x1, 0xf0, 0x56, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d391"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x299, 0x7, 0x406, 0xfe}, {0x6, 0x24, 0x1a, 0x8, 0x5}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0xb, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x4a, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x7bf, 0x3, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xc, 0x84, 0xd9, 0x8, 0x7}, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="450f07655591c745050000"], 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0xc0, &(0x7f0000000680)=ANY=[@ANYBLOB="c00398f4b8e3d8c41e203aa3213228b48775a128f5a988fb1d7c3c15d5da3617b6631b8a5179a3000000000000000036db735db7a79f89e996228f629c29921d005b0ecb7695c337fc51affa7f4cd59b905d973ccee62a32dac1595793dde81739e7b9e97379de30ce9a8d784ffcea23f7b573c1f68eba5c5c85c39bb995dc131ab44a924f3a3608fda62d73867c4bc40ec1243c0983dd0946c9b73a8a3c62613b948f4a24d75fa9457fe23b5a16056e637209234b901fe38ebd69f91380b525"]}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "bc4367b911a1c4e6adad163ddf544bbfebada4547a35770e671f99821052c5bc8ffa11a6cd46800000000000000054b2e96634860b021bce8d393814bc25668a55e7d0a778449c74bc81fb7527584df0c68f6861f634bcc2003358d4de175abde177d81f4971a2bd9ab3ba3f311fefe9bd76137de067111922da92"}}, {0x79, &(0x7f0000000340)=@string={0x79, 0x3, "dee7545625d0be2bca596ea694a7801f8142fe61bc349f0ad2c4777887a6e206b39fea48eb34dddde6f1ce2a4161b85d6b825d2e0dd9e03e1eb5dd3bb1327396ddb71196f666c5e048dfc935e1f27c63df8d9ed592fedf0b611db01177342400a72042064c235e422fabc6536701c855faa30c42681d1d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x96, &(0x7f0000000740)=ANY=[@ANYBLOB="9603a53619e6bd80df4d91ad428f68122e04000000000000003f0c024e2066331e4cba71a74eeaed21cae4b181c5f1e8f164ae54118b40e6343562c97f9cac62d2dbf394bb3fd09292f7cf4feb05688cd8ce34872e6dd97d1dd539b4cb93402c221dc8df2af8698ebd3ffb5ebd39bb18e9cd65e5950c140e7910e6a2d301e5bebed2da94dc4d02783933f77f4c25cd25be19b088a2eec5851dc7c03030c1fec490bee2b3c5130fad0fa656073df608136760a189622bf3b4a410c1a3fd0993a6b6127d91"]}, {0x56, &(0x7f0000000500)=@string={0x56, 0x3, "d4c60b3e9cbc066344e0a7771c1f78ba3fc2782ba74ae151d4dd5920fde45cee68a4f04083df77f2f250140c2730be01b018254ae89c0732e2ce84739422cec24141d5f39ce44d0619b8dcb12982f9ddeb4fdd8f"}}]}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_usb_control_io$hid(r10, 0x0, 0x0) 6.627851852s ago: executing program 9 (id=8119): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54ce", 0xd9, 0x805, 0x0, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1, 0x0, 0x218}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 6.492654674s ago: executing program 5 (id=8120): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x23b, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 5.440915693s ago: executing program 5 (id=8123): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x95cc, 0xa041) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r3, 0x0, 0xa, 0x4, 0x81}) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000200)={0x0, 0x7}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000240)={0x1, r2, 0x5, 0xe, 0x1, 0x8, 0x1, 0x800, 0x10001}) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000280)=0x6a2c) (async, rerun: 64) r4 = dup(0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000049}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x64}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x72e}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000000) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x90) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000480)={0x1, 0x5}) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x2882, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000600)={0xcc, &(0x7f0000000500)=""/204}) (async) r7 = accept4$vsock_stream(r4, &(0x7f0000000640), 0x10, 0x80000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/softlockup_count', 0x700, 0x44) (async) r9 = timerfd_create(0x4, 0x80000) (async) r10 = syz_open_dev$sndpcmp(&(0x7f00000006c0), 0x2, 0x80722) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000780)={0x2, 0x0, &(0x7f0000000740)=[r4, r7, r9, r1, r10, r11, r5, r0, r1]}, 0x9) (async) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000007c0)={0x8, 0xb, 0x4, 0x7ff, 0x3, "45c0b4268910584f"}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000001e80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f00000008c0)={0x155c, r12, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_IE={0x12d2, 0x2a, [@supported_rates={0x1, 0x2, [{0x2}, {0x4}]}, @tim={0x5, 0xc7, {0x9, 0xad, 0x68, "29c689caf7fa790a0b838dde2b297417193d173ade4a8a5e38dae9dfc6bc55564bb09b78b8f85dc80260c542ea71dbbdda5ade8a4c6d0c11fa248623945a85c37240fdb15eb446a4c7c439bb5f78d5676b37736dd8672deac39b0d08b63a395ee29984090e6703b22e811b439d8cbb396b75a2f20d29a0d21402e3ee762a8eda7cd7c8208657c151d1e6ede7de1d75b8da6eb4faff0028bec4237a89f14b3fe71388ba588a3280afa9848bb546a9fc317908e76288e29a8521ea821546bfa850d262b50a"}}, @measure_req={0x26, 0x1003, {0x4, 0x2, 0xb6, "7b4c07b0a5dbcba2b171d77d82aec6679bcd289760afe3aeaf7f3ab7be3ef40e9cd79d436c2c69c20811ae2d18a82aef63dd4d885ec24490bd8369bff6b6357147dff42ef0338d0deed5b043e3424803bb5d4bc67f5973041a43c7b78f4aedc7cb82f73e17a7083c04b4b3d8b4579fe81fdcf3378ccca2079f526799dcabd1a7ce0bacc98a07ca6bac865a88b888130330a08467129cd8fdc6a3bb86616abe8d9fc620da10d6969d3b308131358e39c8bfddfbfa6d613e7fa4da8fb8fed8e1666aaa8bf51b1246e7f1c7029bbe892dd7902088ae157553db4b284b59cada6acff235d63394e404fb91e310cd959683d64e318d6a22dc76edcf772dd4ce2b9c157d48ae2168b719e25dcfa90ec107d53e730bc94ab307c4a9783fe106de09e9ef1eb7e5d37dba85b0f498755902a2493fe1f19c00ec67873d7332e9bf361769a4b0f9bd4eb422632545ad2c1bce0883595f4bf5995ff7e8b07ec5a36943e9c369d89a4f6cec215bfde9f1accdcb0a639ef21db77613fbef6c3d4b1457dba181b58b780cc848a24afe08c919f163d4a54bb1da8f3aa8b6303e82c5c372c296d29e61697b6e46d9592e54125357fe1a631c56a127e61cfb48725a158b5fbc82fb45d9b901811e02bcc442171b8c695d8c280a316ec5b17a8a1b4f5dff750997f05ac153bc95b7ccb08c3a2ec1cf63d8426d8121b6f2763170c035fc58b3bfa3bf23a962347158990604c84b4ef5f455835d674f2f9b0946d58e9a373e5d09c108fdfd382f44d3a55304918cc79c5e693b6a9fc83b7188c36481e26da05dbc8b85e3c403dc1e163327308e46959fc9986066d73de013b8502a655a5dc49baf21c6fea567fc9a752a9a9a22564226170a515f370131b01bd0d00b7d24a96a0cbf19ff768f6024a37cbdf77eeb782d000690e493d8016a8a8c32078171880fa79945ed2aa6087f6e35c31f143309a7b50b998dfbad2ffac7b9de73721bcae2a1ece22f9e4ddf3e8d25374d260eee3fb75b6a1b21ccf18d4ec10a5b16aab1f7373b055b34b7fbf9cc7be537a2a9e5b7fd1c9a20fa46bace328fca7730f5b4223a2265e134a2fbc7c90dceacf1b62e8d41f86b7f00a45da2d29618abde57044dcdd6bced08f3444aad4f2ec7559cd3fde73698981e85e745ba27809f2cdce59177c9382ea075fbd0568cbef665f33b36f33f61d315526dfefa8c20f6a7bb1a63cb65aedeaf855f48cbd1338734046b86a28560390a6fb1b0a23ad413d9035c212f01f970161dd4ae6aa081c4a3f37dab0d55fefaf112904d8b2aba312a68aaaf4469aa40dd5127b68deeb178b5ae8d57172bf3a538203f687757e641e4b89d4d91787572274b191c1c23b7c7641ee995ed058ad44d56c4f3397c9174993b65c9e03811f5942e94392f99bf12242f9c15ccdd87b735c3f1a3affdb968fd661ca84ed0bbfc8a75b401a78bbd1e89834db33c9e3ebb835b8918c2118029c17c16eb0f3d3e443802267ba58e5b5bc2f9e46dab5afec71f76b8f5c4386b7d245412dc94d7905aecdb1b9e116ab3bacdeeac4969b936ba4f57687201c74df4f3bda6fbd9b3630b3549c3c6970090e842f6b00fb94ec3162dde20698fa160cdbf72627547ab835e7239b38555f53e65a0a1a0bb8a6b6c9838528e5c71cf22643244503a369238c3fdcd30a780b35a4878bf077348a5d0817ebe64df07b8530cd5794a3d78dd2a980c35bab59312f1089727deb557e3d7ac7459fb35edec2f35eb0e88f55406050063ae7a676ff774105f116865cf711ca4ce95991fc662a04184ad3e44ae11cab25d3e4360d8721cce9b060ed1b4e85db6aaba707cbb86ff2f3a5366ef9f1ecddd096399163df95fa637afbccd477a5860112a8f753cafe9710674f11ca9b0b5327e1a6f8571aa6f0e270a0c10f92ff88aa0a7a94e2edbe1e4b08210e66bcf9b6a5d4b1e3180d0733faa214be7f4443264b092ec955db0ab6f4046447ee5753bcb097228ceb9bd68b66a926f49abe044a1e35a7e6dacd6946b4185331784c39a0c0e3423e5e930c588576d7b447a98664d156bcc2a33a1a902049223d3d9f7847f06dd0630b13a3f87104100ecc2d8173408bee65def6725cb0cf3480eb75153eeca480866d66eb1d32969b9964a5300f712f4fb06922a299f7809c1adcf79b1faf6f54b270d77db56f01104566fa2b703d29da6bab7beb3008639549f4a295b8502c4d78ca0734d644e23e953f529f31b33cd56d393cf6ef8e19d789d055870ec8ea663bf0efcc20ea0a289bef93167ebf670be1e822b136d7443b35be0b52b830055a951daecf96b68fe354d85a98b1ec6e663e14300fa34bbc00d5a2532896b66d70e9123b80b6e6925b4efd9e43d5a42c268ed07243b8d0b7c6f04213b3a307cfff990d860916259eece9dd0bb7ee96476a624ac3724b845fd6954f8dea39b97d831632ac48aecf9b5a1dc219d0db15d274796d11107fffa72b6479845368a6ebc433c522ecdc56dacafd37a23ea8c4058a57a35f9d2e3187aa4ef298316fec4429b7cb9ed73a15e807d0a529ffb2fb85bd552df6084b1cf3a4f7d34993bc3388d523acda9c74a2764eeac8221d6cfdefdf9c478cfa93972d6183e59fb2a56c9ae35c6ca08dfcd0a4a03480e22fd3e8228c52922af3d46bcdfe638d0c4e3c42939d096909ef9ae73821567433e6cd53d70d265d7d91c33beceedd46c538695825ffda1dba3a732e4788e54d57d929a95f64c4b400d2911e25b415e9f8e16bb75b247d99877336298178d693319c5dbd8264d276bb94442e46ad43a6c6c26db3582a827f51f76cfda90e55d992a42542e846d8e14d634cb323d3387525d69162486f600533ac771916abc6227dce71ae4ed29f012e7990f4ba0c333961430f8c1633d8faafa812a5193be1e888fd02c6a906dcf1e63ef773382535701d61e010dbf8b868c1fe895f2cf2712564cce43821eea42a2f275d33e7073a5fdd610a018e663d03229a3d2a32b6c63915af23c4bc4b5c8f0f4a758d7cbf7d3c1c01df333ce4fd3a1fd052d58c03556da87c7b662d0f48755449f7fe7c8225f919ec36e9a14fc72d8253e6a57a722e2fe5f6eba63d8329170499b89d05d1593ad456a2140f8b65b47031ccab46b193a8f06790c2b33d1c904abe4a8a64b726e1e5f9dc630827827146525ac401ab759e3f88becc29964ec27f0533290e7eb0a8f2396a92b3d1591471f449df0e72c0c6b8fb7abd88c74fd258fc8d2ee016edd9d610d641add7e0150a449f3fd1a3d94ef15fe946f6788eac6cfb3c627bae8b7fc2b2b68049bf49894a850e92cd55e75f40e887c2954555d97941ee308a917bf588cd63dffc55a3d7170b8e27fed43edc9e76251f9bd6099c9050dbb4c471b95e6a859b67fe7416eb5639505d854d54a72bdf0d54e08202f3425aed567a73e69f0164bff43b50bc1311d8ec7e4d674a480676ea16b93d87442815fb04170e57cdd28b63768999ffd995016a5d3d3a524b6aa84ec490622d80a8449d8a99ba4e9fe73cba346fcca6268fd5a572bbbb2b6ac8a35da3603e750013099e37b2def23ac698d0d4bc03a3f8fce2337aa1e3bc18722bd2ba07888569f703127f83145cc9b824b2c5e20660c7458f160ea7c6ba2f7633de58b6805e9bb95e62e5dd254aa0015f03317188f7e093c9f8d570d1782e23f805aec722a086ec8738226605db1d25e25ad031f55a9975f06b04dc40b3e9b3fa7bb2b29b56d240b7f04834221da01fae023b4374d0b944a2f5e4e0b66a325b7d4c346ecb65fd2a5dac9872cabd72191bffd94da8fad4e1cbba1a58fba94b6bf59cd1e2df7adb3a6f0cd38577b727b90088688cf630b9ee55303dcadd477d6cf6501fc1d6190f140a8ed71caa667e4d39eb8ba99d9c3d510b2a199def17f70c6292d733a841fa6077d42204d1a44546ff9cfef3276c0763f9bf08b9e10ed831b24f1e67e51aa892a57f495c0b2e806f244fe2456d3d059bb3ae593116cd5d3158f77602fe96bb8580098ab5dea890194296d680390194fe0422748142c38a28b02b3cc7b04b66f5c6f2f744317a7a578e9ac9702047227b366636a526cc8418909fe3a771d7a385f32f5b1bca2a9a0a8a4c199a92b06116dfe7d1fc0d711efff8f508b3d2113da4711571937c263cf5020d95f3b854b07228e079fe6a1a0e5a90ee852ea3727426cffc34bbc4e12208cfd5992796a691d6c886fbb7c444459dee20144e8692d10aba19f4af843ba203085e5e93d8c17f38646814247151924d4a9edc1dbc80ee984e51a49d748e295bbc66de27ffbb53d35cf611894f29babc2116462c7a7b841d5f0dc61711aed1639528c8a857bebfa9fd02bc73ae469938ade8d05462ede55a393e38037fb6b499eb8d5732a91516913b02c535e139614366f5f714f54914ae8c4bd543738d9a230994e7306bb93849394194eb0049fca63a389252059a3e259db5e95b01e084b8cb6681ea08491d22ac01c711d5e990cdd8e2f2a9e93e79bf89c5c4f746bd727e033a6681abc2a5079d4696431b9a4a250aa0d4c8a43f4137ba5b567fc9873fe0b571108a794cf86481d4d8757fbe952c848288348e78f749d710cb2dd56463f3a02963991f4fd77400aefaab19b6972f4f3ccd1a09d5ebcce50ceadee1e36abe3d23ec85089162aa4258aa9036bfea1ee89e49bda2caf5b2d0307b894066d2cb3499934c6d3459e95d8cc8a35e9f1bd7c3b4faaeb166c2ca38d42f66ea1c83d32429927df0a03ee07452cc272b66c3172cc2c0ff84a3759e655d0796ea268050d055e92e70fcad1e5d9505c6525bbf4c6217fccc5b144bedc8729d901990b910e61c8dff9f0b25e1d3f6e700185f11dda031697080c3cead3c36b7a5ba6602e364bf632bab8e2c8de1fe4717bac0e632993ff226dd12c87bfa949ac7cd95e1d8bfc410f50fc6ba779df0f07d4c4d9fd080991882521cd2fb93ecf0a29009c92f68ae1d2af4ff8fd731a90cd8aee4646ce8a8ed45aa5ce44899824276d146bb992ce520757eba5814bd6efb54f8f04e0b9cc2429ff77cc832a677047f8168c8b9f481b5e06434a1be49dbe83fdd9604b0eb58d829ef4e3f13f3523c4cef009224261248c360209f37324d08a0b88c69ce6200375efedf488d4228e040a554b27f7e0afab0aad876d29486e656c094e2b16726826399f51a0c1c13ac277523cf54652ac0547b0ace48f074f64bd6a2c95709c670e0dd74555f201c0a66c6cce90d6af77412859754f9aff16ca8ef1bb969d96bc46874b03ca8d9c741ca9544e3ffc770706de0156bf1bd9f8f9b11ba3c1c115216168f3dec483d874bf26dc0f65b47028310cb6f4f8efd5afec69c30d792025b4806596ebf199cf6904386115277975f3a99185f54819f2fd55e012b7bb639f1adc4b4bfe2026003dec4dc28d0f37cad4ccbdcffe14a077efc742e26854d3c7cc644595b8e78df1509bda44189a4ea5ee1f769b6c24fc2fe0d5603762fe150f33c42a95bfd84342d1bfa84133aa6f25e854ff061799ad5fcb926f08f73ab0dc7b89d8ba09b5703001026bd9350275b0a72ff97f3ee7798e4c70ab690fb83096fc971bb4dd4f72d1fdbe0686a85fd80ac3461911c64c9a1fc3325dd89e415c03bf6f8b60b35ca56a79846df7f7c99cfc28a355511ce9a4def8d942654914607c44ccb822bf334645b3f992bcadb22389f41a521b52fc03f149754518faea69cb08303e49a0c8bb5b500a92c9f144c517586e38475fc9107e41e4b146c43ebb7997617abd0cb5f2629f792e3f2f43b8a5af"}}, @measure_req={0x26, 0x8d, {0x79, 0x7, 0x6, "feb7526f8119c8df745edfb4997bb43e922c011dbeda89218be625dc7a49c445e0f5bc20564deaccf0f5cc68178aafcf160baf33f7204ead22ed76934ee8cbcb8a42001da6c3a9fc939683cc3b81cd22d5ee522eb4ffdbcb2543b702324523dd717e1c9d521a60b58b521a5522339a25a75074435b0946cc238e7fdc7fb3330d999a6e2923cd88a90095"}}, @supported_rates={0x1, 0x5, [{0x24, 0x1}, {0x60, 0x1}, {0x24, 0x1}, {0x2, 0x1}, {0x60}]}, @prep={0x83, 0x1f, {{}, 0x0, 0x4, @device_a, 0xffffffed, @void, 0x5, 0x5, @device_b, 0x5}}, @tim={0x5, 0xa3, {0xe, 0xc5, 0x17, "58d906185eb77a765173f62eeec08d750741fa5fb0e282ee8d025ceadcd55995839334fe119f302cfc6a22f63c9f48055b19850bceba8dfae7b976375fa2875395e74462d5aeef3d0bec1f45e3dcbd59b74a600bb7c9df2bb9f0e5e9a51150665d4f318116860963dfa3ca8e43f46674e9a621a8e18f016eaefd72b351c3b3a0624d194dc959feeb924502044a7a7792b367307eba4ba646fa3abc93d67fe3b1"}}, @random_vendor={0xdd, 0x9e, "8426c73e0da5153bbfc4be98bee3331be2828e6b6cf74f4cd83c378b2664a49d405ab579213854aff70c1f2a2713d1b113b8e40b64c0f6f58e815605d5595097913d103ea6415693d6f317fc8b0326b330d725b6ca5e5edc508214e63dfb8f38982203c46e41e4ef0c428425794df45933b0b37e689be93c46e9abf6400f7138a850ab3e49dd0cefb4ce191eacdc026d46706840aa3d4fd33c01de037ef3"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4ec6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x6, 0x5, @device_b, 0x1ff, 0xffff, 0xa8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8e3}, @NL80211_ATTR_IE={0x1f2, 0x2a, [@random_vendor={0xdd, 0xd1, "448da764a0fe658f6a15677ead1e63aa5a151a6dc1a4f107e507769bf02857f95300ab08bf11af01638e51e049983ec3e8aa29bc7d419b7c1a9b9e06a7c605beac535335878e7e9f8f17781184246daa601ab5517627e54ef9015301ae65695a22b5d0956bcd8b5bab127cf3bf870c9d9f713e5a17b248af5e5fd3b0114ee6f0a4f5b1420051cc50efbb45d74d40fbec418c73106fbc083d145ef4a109bbbcaa585dcec5442889d3c2c294c6fe68ddd04603fe6bb9d7c776777f3e19005dafd5943f79636a43ed91fa1979181c69f43019"}, @tim={0x5, 0x71, {0x2, 0xaf, 0x8, "a294b9f3f8d336a6d56ebda07bbc6c78043caaff07954e674ddcad780c1d70993fd04a2c6ec61f38860d07c5296f47974a8aa476e0d173b6b02e35eab4bdf4bd3850e8e56e59f01cbd990ae6fac1aea87b726372b504f19ff9966198c1d43d6ebe818c16f3ac4f063726805064f3"}}, @rann={0x7e, 0x15, {{0x1, 0x78}, 0xe, 0x8, @broadcast, 0x5, 0x4b, 0x7fff}}, @random={0x80, 0x52, "9277afc7aa55ce8887e781c2629fd4af597238f6e04da7f4909f27e4d139fc7f32b5670292fc5511eaf7c7bcec93cf0f272c2421790ce7a80090553601ffd40b71404fa9e309fb9cf98b0e5990608912a715"}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0xf, 0x0, @device_a, 0xd5, 0x1000, 0x2}}, @supported_rates={0x1, 0x4, [{0x5}, {0x16}, {0x1, 0x1}, {0x1b, 0x1}]}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0xc, 0x4, @broadcast, 0x80, 0x4da, 0x1}}, @challenge={0x10, 0x1, 0xb5}, @chsw_timing={0x68, 0x4, {0xc772, 0x4}}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@challenge={0x10, 0x1, 0x9e}, @chsw_timing={0x68, 0x4, {0x5, 0x14be}}, @rann={0x7e, 0x15, {{0x1, 0x41}, 0x3, 0x10, @device_a, 0x7, 0x8, 0x8000}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x155c}, 0x1, 0x0, 0x0, 0x40}, 0x40000010) (async) r14 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) connect$vsock_stream(r14, &(0x7f0000001f00)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_io_uring_setup(0x3335, &(0x7f0000001f40)={0x0, 0xeac4, 0x1000, 0x1, 0x3db, 0x0, r5}, &(0x7f0000001fc0), &(0x7f0000002000)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000002040), 0x6000, 0x0) (async) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) 5.130672856s ago: executing program 5 (id=8124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x4040000) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_usbip_server_init(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0x10, r1, 0x1}) pidfd_getfd(r3, r2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x7fffe, 0x5, {0x0, 0x5, 0x8, 0x0, 0x0, 0xffffff7ffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, r6, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000"], 0x94}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 5.111873181s ago: executing program 4 (id=8125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='btrfs_handle_em_exist\x00', r3}, 0xfffffffffffffcd6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 4.816611371s ago: executing program 7 (id=8127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='btrfs_handle_em_exist\x00', r3}, 0xfffffffffffffcd6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 4.009074296s ago: executing program 9 (id=8128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.582929969s ago: executing program 9 (id=8129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) capget(&(0x7f0000000100)={0x20080522, r0}, &(0x7f00000001c0)={0x1, 0xfffffffb, 0xfffff6ec, 0x8, 0x4, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2.888741418s ago: executing program 5 (id=8130): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000400), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x140075, 0x7ffe, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) 2.860568148s ago: executing program 8 (id=8131): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r2, 0x5418, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000001300)) r3 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.580805486s ago: executing program 4 (id=8132): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0x14) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000010"]) 2.405538744s ago: executing program 7 (id=8133): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) fanotify_init(0xf00, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x300, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) syz_open_dev$evdev(0x0, 0x1c5d600000000000, 0x2002) 2.404114592s ago: executing program 8 (id=8134): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2.013724825s ago: executing program 7 (id=8135): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xc0ce8000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) shmat(0x0, &(0x7f00005fb000/0x4000)=nil, 0x1000) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xdc}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffe}, 0x70bd25, 0x0, 0x2, 0x1}}, 0xf0}}, 0x8080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000300)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.711794628s ago: executing program 7 (id=8136): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xa, &(0x7f0000000240)=@raw=[@alu={0x7, 0x0, 0x7, 0x2, 0x6, 0xfffffffffffffff8, 0xfffffffffffffffc}, @exit, @alu={0x7, 0x0, 0x0, 0x2, 0xd2e54bc58149be5d, 0x0, 0xfffffffffffffff0}, @generic={0x2, 0x5, 0xa, 0x3, 0x9}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000400)='syzkaller\x00', 0x8001, 0xb7, &(0x7f0000000440)=""/183, 0x41000, 0x11, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000900)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xd, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[r4, r4, r4, r5], &(0x7f00000009c0)=[{0x2, 0x5, 0x5, 0xc}, {0x0, 0x1, 0x8, 0xb}, {0x0, 0x1, 0xa, 0x8}, {0x4, 0x5, 0x4, 0xb}, {0x5, 0x3, 0x2, 0x5}, {0x5, 0x4, 0xa, 0xa}, {0x3, 0x3, 0x3, 0x7}], 0x10, 0xc3}, 0x94) ftruncate(0xffffffffffffffff, 0x10000) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x1, 0xf0, 0x56, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d391"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x299, 0x7, 0x406, 0xfe}, {0x6, 0x24, 0x1a, 0x8, 0x5}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0xb, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x4a, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x7bf, 0x3, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xc, 0x84, 0xd9, 0x8, 0x7}, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="450f07655591c745050000"], 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0xc0, &(0x7f0000000680)=ANY=[@ANYBLOB="c00398f4b8e3d8c41e203aa3213228b48775a128f5a988fb1d7c3c15d5da3617b6631b8a5179a3000000000000000036db735db7a79f89e996228f629c29921d005b0ecb7695c337fc51affa7f4cd59b905d973ccee62a32dac1595793dde81739e7b9e97379de30ce9a8d784ffcea23f7b573c1f68eba5c5c85c39bb995dc131ab44a924f3a3608fda62d73867c4bc40ec1243c0983dd0946c9b73a8a3c62613b948f4a24d75fa9457fe23b5a16056e637209234b901fe38ebd69f91380b525"]}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "bc4367b911a1c4e6adad163ddf544bbfebada4547a35770e671f99821052c5bc8ffa11a6cd46800000000000000054b2e96634860b021bce8d393814bc25668a55e7d0a778449c74bc81fb7527584df0c68f6861f634bcc2003358d4de175abde177d81f4971a2bd9ab3ba3f311fefe9bd76137de067111922da92"}}, {0x79, &(0x7f0000000340)=@string={0x79, 0x3, "dee7545625d0be2bca596ea694a7801f8142fe61bc349f0ad2c4777887a6e206b39fea48eb34dddde6f1ce2a4161b85d6b825d2e0dd9e03e1eb5dd3bb1327396ddb71196f666c5e048dfc935e1f27c63df8d9ed592fedf0b611db01177342400a72042064c235e422fabc6536701c855faa30c42681d1d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x96, &(0x7f0000000740)=ANY=[@ANYBLOB="9603a53619e6bd80df4d91ad428f68122e04000000000000003f0c024e2066331e4cba71a74eeaed21cae4b181c5f1e8f164ae54118b40e6343562c97f9cac62d2dbf394bb3fd09292f7cf4feb05688cd8ce34872e6dd97d1dd539b4cb93402c221dc8df2af8698ebd3ffb5ebd39bb18e9cd65e5950c140e7910e6a2d301e5bebed2da94dc4d02783933f77f4c25cd25be19b088a2eec5851dc7c03030c1fec490bee2b3c5130fad0fa656073df608136760a189622bf3b4a410c1a3fd0993a6b6127d91"]}, {0x56, &(0x7f0000000500)=@string={0x56, 0x3, "d4c60b3e9cbc066344e0a7771c1f78ba3fc2782ba74ae151d4dd5920fde45cee68a4f04083df77f2f250140c2730be01b018254ae89c0732e2ce84739422cec24141d5f39ce44d0619b8dcb12982f9ddeb4fdd8f"}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_usb_control_io$hid(r6, 0x0, 0x0) 1.603877792s ago: executing program 4 (id=8137): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001100)={0x6, 0xe, 0x2, "134604cea438bf704c006a2300ffee9300", 0x41415270}) 1.501222453s ago: executing program 4 (id=8138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r5) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, 0x0, 0x0}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$radio(0x0, 0x3, 0x2) writev(r7, &(0x7f000000a100)=[{0x0}], 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}}) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 1.174568085s ago: executing program 4 (id=8139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.107129019s ago: executing program 8 (id=8140): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 1.099251474s ago: executing program 5 (id=8141): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x4, 0x3013, 0x1, 0x4, 0x1, 0x1, 0x4}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x1403, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = semget$private(0x0, 0x20000000102, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) getpid() syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.032038529s ago: executing program 4 (id=8142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='btrfs_handle_em_exist\x00', r3}, 0xfffffffffffffcd6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 931.292844ms ago: executing program 7 (id=8143): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488) 506.994126ms ago: executing program 5 (id=8144): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x3) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x109080, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/148, 0x94, 0xff8, &(0x7f0000000180)={0x77359400}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') (async) acct(0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x26) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x48840) 3.479276ms ago: executing program 9 (id=8145): getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0, 0x7, 0x328, 0x80000000, 0x4, 0x9}, &(0x7f0000000440)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0xa032314ad7695bb, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121802, 0x0) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x423ff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000300)={0xc, 0x5, 0xffb}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@can_delroute={0x34, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "0400"}, 0x3}}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x34}}, 0x2000c000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 0s ago: executing program 7 (id=8146): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1}, 0x180) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) r3 = socket$kcm(0x1e, 0x4, 0x0) ptrace$peekuser(0x3, r1, 0xfffffffffffff800) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000004be882, 0x0) dup(0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x33, 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=r4, @ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='bcache_read\x00', r6, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x80000000) r7 = getpid() sched_setscheduler(r7, 0x3, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x0, 0x9, 0xc, 0xfffd}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r11, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) kernel console output (not intermixed with test programs): ommufd_mock0: Adding to iommu group 0 [ 1843.278907][ T3669] netlink: 'syz.8.7528': attribute type 4 has an invalid length. [ 1843.333655][ T3669] netlink: 'syz.8.7528': attribute type 4 has an invalid length. [ 1844.252835][T32433] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1844.414699][T32433] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1844.434141][T32433] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1844.512006][T32433] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1844.591224][T32433] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1844.603463][ T3679] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1844.617381][T32433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.652095][T32433] usb 5-1: Product: syz [ 1844.665997][T32433] usb 5-1: Manufacturer: syz [ 1844.672437][T32433] usb 5-1: SerialNumber: syz [ 1844.704297][T32433] usb 5-1: config 0 descriptor?? [ 1845.656454][ T3672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1845.663658][ T3672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1845.727710][T32433] usb 5-1: ucan: probing device on interface #0 [ 1846.000882][ T3688] netlink: 'syz.5.7533': attribute type 4 has an invalid length. [ 1846.061532][ T3689] netlink: 'syz.5.7533': attribute type 4 has an invalid length. [ 1846.473602][ T1080] lo speed is unknown, defaulting to 1000 [ 1846.480894][T32739] lo speed is unknown, defaulting to 1000 [ 1846.505384][T32433] usb 5-1: ucan: could not read protocol version, ret=-71 [ 1846.550297][T32433] usb 5-1: ucan: probe failed; try to update the device firmware [ 1846.575127][ T3692] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1846.610889][T32433] usb 5-1: USB disconnect, device number 26 [ 1847.001514][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7535'. [ 1847.409933][ T3697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=3697 comm=syz.8.7536 [ 1847.483910][ T3705] FAULT_INJECTION: forcing a failure. [ 1847.483910][ T3705] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.502023][ T3705] CPU: 1 UID: 0 PID: 3705 Comm: syz.7.7538 Not tainted syzkaller #0 PREEMPT(full) [ 1847.502049][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1847.502061][ T3705] Call Trace: [ 1847.502068][ T3705] [ 1847.502075][ T3705] dump_stack_lvl+0x16c/0x1f0 [ 1847.502108][ T3705] should_fail_ex+0x512/0x640 [ 1847.502134][ T3705] ? fs_reclaim_acquire+0xae/0x150 [ 1847.502164][ T3705] should_failslab+0xc2/0x120 [ 1847.502192][ T3705] __kmalloc_noprof+0xdd/0x8f0 [ 1847.502211][ T3705] ? trace_kmalloc+0x2b/0xb0 [ 1847.502233][ T3705] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1847.502260][ T3705] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1847.502284][ T3705] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1847.502308][ T3705] ? tomoyo_fill_path_info+0x233/0x420 [ 1847.502340][ T3705] tomoyo_mount_acl+0x1ae/0x850 [ 1847.502361][ T3705] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1847.502388][ T3705] ? kernel_text_address+0x8d/0x100 [ 1847.502416][ T3705] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1847.502436][ T3705] ? arch_stack_walk+0xa6/0x100 [ 1847.502488][ T3705] ? tomoyo_domain+0xba/0x150 [ 1847.502513][ T3705] ? tomoyo_profile+0x47/0x60 [ 1847.502541][ T3705] tomoyo_mount_permission+0x16d/0x420 [ 1847.502562][ T3705] ? tomoyo_mount_permission+0x14f/0x420 [ 1847.502584][ T3705] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1847.502621][ T3705] security_sb_mount+0x9b/0x260 [ 1847.502643][ T3705] path_mount+0x158/0x23a0 [ 1847.502663][ T3705] ? rcu_is_watching+0x12/0xc0 [ 1847.502685][ T3705] ? __pfx_path_mount+0x10/0x10 [ 1847.502704][ T3705] ? kmem_cache_free+0x2d8/0x770 [ 1847.502724][ T3705] ? putname+0xf5/0x1a0 [ 1847.502747][ T3705] ? putname+0xf5/0x1a0 [ 1847.502761][ T3705] ? putname+0xf5/0x1a0 [ 1847.502780][ T3705] ? __x64_sys_mount+0x293/0x310 [ 1847.502799][ T3705] __x64_sys_mount+0x293/0x310 [ 1847.502821][ T3705] ? __pfx___x64_sys_mount+0x10/0x10 [ 1847.502849][ T3705] do_syscall_64+0xcd/0xf80 [ 1847.502876][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.502893][ T3705] RIP: 0033:0x7f682698f749 [ 1847.502908][ T3705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1847.502925][ T3705] RSP: 002b:00007f68277d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1847.502942][ T3705] RAX: ffffffffffffffda RBX: 00007f6826be5fa0 RCX: 00007f682698f749 [ 1847.502953][ T3705] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1847.502969][ T3705] RBP: 00007f68277d3090 R08: 0000200000000000 R09: 0000000000000000 [ 1847.502977][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1847.502986][ T3705] R13: 00007f6826be6038 R14: 00007f6826be5fa0 R15: 00007ffce17faf28 [ 1847.503011][ T3705] [ 1847.861811][ T3705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1847.977113][ T30] audit: type=1400 audit(1764.376:1850): avc: denied { write } for pid=3711 comm="syz.5.7540" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1848.177148][T22977] Bluetooth: Wrong link type (-71) [ 1849.087628][T28161] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1849.097163][T28161] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1849.340761][ T3724] FAULT_INJECTION: forcing a failure. [ 1849.340761][ T3724] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.354268][ T3724] CPU: 1 UID: 0 PID: 3724 Comm: syz.7.7542 Not tainted syzkaller #0 PREEMPT(full) [ 1849.354293][ T3724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1849.354304][ T3724] Call Trace: [ 1849.354311][ T3724] [ 1849.354319][ T3724] dump_stack_lvl+0x16c/0x1f0 [ 1849.354350][ T3724] should_fail_ex+0x512/0x640 [ 1849.354375][ T3724] ? kmem_cache_alloc_noprof+0x62/0x760 [ 1849.354399][ T3724] should_failslab+0xc2/0x120 [ 1849.354427][ T3724] kmem_cache_alloc_noprof+0x75/0x760 [ 1849.354446][ T3724] ? kasan_save_stack+0x42/0x60 [ 1849.354470][ T3724] ? kasan_save_stack+0x33/0x60 [ 1849.354493][ T3724] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1849.354521][ T3724] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1849.354543][ T3724] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1849.354570][ T3724] idr_get_free+0x528/0xa30 [ 1849.354604][ T3724] idr_alloc_u32+0x190/0x2f0 [ 1849.354630][ T3724] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1849.354664][ T3724] idr_alloc_cyclic+0x10b/0x230 [ 1849.354690][ T3724] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1849.354713][ T3724] ? afs_alloc_vlserver_list+0x24/0xa0 [ 1849.354742][ T3724] ? lockdep_init_map_type+0x5c/0x270 [ 1849.354769][ T3724] ? __rwlock_init+0x37/0x150 [ 1849.354799][ T3724] afs_lookup_cell+0x11d1/0x1900 [ 1849.354834][ T3724] ? __pfx_afs_lookup_cell+0x10/0x10 [ 1849.354863][ T3724] ? fs_param_is_string+0xc5/0x200 [ 1849.354887][ T3724] ? irqentry_exit+0x1dd/0x8c0 [ 1849.354914][ T3724] ? __pfx_fs_param_is_string+0x10/0x10 [ 1849.354937][ T3724] ? __fs_parse+0x278/0x960 [ 1849.354956][ T3724] ? __pfx_rcu_is_watching+0x10/0x10 [ 1849.354984][ T3724] afs_parse_param+0x5c4/0x970 [ 1849.355011][ T3724] ? __pfx_afs_parse_param+0x10/0x10 [ 1849.355036][ T3724] ? static_key_count+0x5a/0x70 [ 1849.355060][ T3724] ? __pfx_afs_parse_param+0x10/0x10 [ 1849.355086][ T3724] vfs_parse_fs_param+0x20b/0x3c0 [ 1849.355110][ T3724] __do_sys_fsconfig+0x930/0xbe0 [ 1849.355137][ T3724] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1849.355161][ T3724] ? fput+0x70/0xf0 [ 1849.355192][ T3724] do_syscall_64+0xcd/0xf80 [ 1849.355226][ T3724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.355244][ T3724] RIP: 0033:0x7f682698f749 [ 1849.355259][ T3724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1849.355276][ T3724] RSP: 002b:00007f6827791038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1849.355295][ T3724] RAX: ffffffffffffffda RBX: 00007f6826be6180 RCX: 00007f682698f749 [ 1849.355307][ T3724] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 1849.355319][ T3724] RBP: 00007f6827791090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.355329][ T3724] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1849.355341][ T3724] R13: 00007f6826be6218 R14: 00007f6826be6180 R15: 00007ffce17faf28 [ 1849.355367][ T3724] [ 1849.355599][ T3724] kAFS: unable to lookup cell '(' [ 1849.661850][ T3723] kAFS: unable to lookup cell '(,c¾ûL' [ 1850.025726][ T6049] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1850.196866][T28161] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1850.615656][ T6049] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1850.633693][ T6049] usb 9-1: config 0 has no interface number 0 [ 1850.647651][ T6049] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1850.658902][ T6049] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.685108][ T6049] usb 9-1: Product: syz [ 1850.694312][ T6049] usb 9-1: Manufacturer: syz [ 1850.699992][ T6049] usb 9-1: SerialNumber: syz [ 1850.708440][ T6049] usb 9-1: config 0 descriptor?? [ 1850.717007][ T6049] yurex 9-1:0.50: Could not find endpoints [ 1850.800251][ T3742] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1850.825730][T28161] usb 5-1: Using ep0 maxpacket: 16 [ 1850.844951][T28161] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.856246][T28161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1850.883551][T28161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1850.895600][T28161] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1850.906615][T28161] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1851.022340][T28161] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1851.032337][ T3744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=3744 comm=syz.5.7549 [ 1851.047442][T28161] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1851.158244][T28161] usb 5-1: Manufacturer: syz [ 1851.211168][T28161] usb 5-1: config 0 descriptor?? [ 1851.222144][ T3726] kvm: kvm [3722]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1851.314413][ T3753] netlink: 'syz.9.7550': attribute type 4 has an invalid length. [ 1851.374952][ T3754] netlink: 'syz.9.7550': attribute type 4 has an invalid length. [ 1851.614354][ T3726] kvm: kvm [3722]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1851.673526][ T6049] usb 9-1: USB disconnect, device number 13 [ 1851.673779][ T3757] FAULT_INJECTION: forcing a failure. [ 1851.673779][ T3757] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.694922][ T3757] CPU: 1 UID: 0 PID: 3757 Comm: syz.5.7552 Not tainted syzkaller #0 PREEMPT(full) [ 1851.694944][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1851.694956][ T3757] Call Trace: [ 1851.694962][ T3757] [ 1851.694969][ T3757] dump_stack_lvl+0x16c/0x1f0 [ 1851.695000][ T3757] should_fail_ex+0x512/0x640 [ 1851.695022][ T3757] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1851.695051][ T3757] should_failslab+0xc2/0x120 [ 1851.695077][ T3757] kmem_cache_alloc_noprof+0x75/0x760 [ 1851.695097][ T3757] ? skb_clone+0x190/0x3f0 [ 1851.695120][ T3757] ? skb_clone+0x190/0x3f0 [ 1851.695136][ T3757] skb_clone+0x190/0x3f0 [ 1851.695153][ T3757] netlink_deliver_tap+0xabd/0xd30 [ 1851.695186][ T3757] netlink_unicast+0x71f/0x870 [ 1851.695212][ T3757] ? __pfx_netlink_unicast+0x10/0x10 [ 1851.695232][ T3757] ? __pfx_tc_get_qdisc+0x10/0x10 [ 1851.695265][ T3757] netlink_ack+0x696/0xb80 [ 1851.695298][ T3757] netlink_rcv_skb+0x332/0x420 [ 1851.695320][ T3757] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1851.695344][ T3757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1851.695379][ T3757] ? netlink_deliver_tap+0x1ae/0xd30 [ 1851.695406][ T3757] netlink_unicast+0x5aa/0x870 [ 1851.695431][ T3757] ? __pfx_netlink_unicast+0x10/0x10 [ 1851.695466][ T3757] netlink_sendmsg+0x8c8/0xdd0 [ 1851.695492][ T3757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1851.695527][ T3757] ____sys_sendmsg+0xa5d/0xc30 [ 1851.695551][ T3757] ? copy_msghdr_from_user+0x10a/0x160 [ 1851.695568][ T3757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1851.695589][ T3757] ? __lock_acquire+0x433/0x22f0 [ 1851.695628][ T3757] ___sys_sendmsg+0x134/0x1d0 [ 1851.695646][ T3757] ? __pfx____sys_sendmsg+0x10/0x10 [ 1851.695663][ T3757] ? __lock_acquire+0x433/0x22f0 [ 1851.695716][ T3757] __sys_sendmsg+0x16d/0x220 [ 1851.695732][ T3757] ? __pfx___sys_sendmsg+0x10/0x10 [ 1851.695766][ T3757] do_syscall_64+0xcd/0xf80 [ 1851.695793][ T3757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.695811][ T3757] RIP: 0033:0x7f39c3b8f749 [ 1851.695827][ T3757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1851.695844][ T3757] RSP: 002b:00007f39c4b0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1851.695862][ T3757] RAX: ffffffffffffffda RBX: 00007f39c3de5fa0 RCX: 00007f39c3b8f749 [ 1851.695873][ T3757] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1851.695885][ T3757] RBP: 00007f39c4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.695895][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.695906][ T3757] R13: 00007f39c3de6038 R14: 00007f39c3de5fa0 R15: 00007fffc6537fc8 [ 1851.695931][ T3757] [ 1852.014468][T28161] rc_core: IR keymap rc-hauppauge not found [ 1852.020402][T28161] Registered IR keymap rc-empty [ 1852.025833][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.046616][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.082757][T28161] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1852.084562][T28161] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input101 [ 1852.092311][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.110829][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.142701][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.250050][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.283159][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.438264][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.439559][ T3736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.853041][ T3736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.903369][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.945560][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1853.061990][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1853.095134][T28161] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1853.117553][T28161] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1853.155589][T28161] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1853.296357][T28161] usb 5-1: USB disconnect, device number 27 [ 1853.299011][ T6049] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1853.590356][ T3782] kAFS: unable to lookup cell '(' [ 1853.595611][ T3784] kAFS: unable to lookup cell '(,c¾ûL' [ 1853.664833][ T3785] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1853.700119][ T6049] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1853.906638][ T3790] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1854.353882][ T3786] fido_id[3786]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1854.446075][ T3795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=3795 comm=syz.4.7562 [ 1854.719399][ T3797] netlink: 'syz.5.7563': attribute type 1 has an invalid length. [ 1854.730120][ T30] audit: type=1400 audit(1770.568:1851): avc: denied { mounton } for pid=3796 comm="syz.5.7563" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1854.773486][ T3801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7563'. [ 1855.054395][ T30] audit: type=1400 audit(1770.998:1852): avc: denied { append } for pid=3798 comm="syz.4.7564" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1855.078744][ T3799] loop6: detected capacity change from 0 to 524288000 [ 1855.105052][ T3802] erspan0: left promiscuous mode [ 1855.110009][ T3802] erspan0: left allmulticast mode [ 1855.122221][ T3802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1855.148205][ T3799] loop6: detected capacity change from 524288000 to 0 [ 1855.527140][ T3811] fuse: Bad value for 'rootmode' [ 1855.738082][ T3823] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1856.015916][ T3826] : entered promiscuous mode [ 1856.124716][ T3829] /dev/nullb0: Can't open blockdev [ 1856.704644][ T3832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=3832 comm=syz.9.7574 [ 1856.810572][ T3840] [U]  [ 1856.815187][ T3840] [U] K{‘ [ 1856.818335][ T3840] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1856.826229][ T3840] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1856.844527][ T3840] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1856.857262][ T3840] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1856.895886][ T3840] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1856.921880][ T3840] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1856.934755][ T3840] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1856.947428][ T3840] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 1857.049330][ T3845] xt_connbytes: Forcing CT accounting to be enabled [ 1857.056244][ T3845] Cannot find set identified by id 0 to match [ 1857.093829][ T3840] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 1857.293829][ T3840] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1857.315557][ T3840] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1857.596179][ T3840] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1857.626231][ T3840] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1857.636049][ T3840] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1857.644907][ T3840] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1857.651665][ T3840] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1857.862276][ T3840] [U] ¹ EC [ 1857.867310][ T3840] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 1858.003047][ T3840] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1858.263637][ T3859] No source specified [ 1858.396812][ T1080] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1858.446819][ T3871] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1858.728577][ T1080] usb 6-1: Using ep0 maxpacket: 16 [ 1858.849835][ T1080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.886030][ T1080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.108254][ T3876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1859.129048][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7584'. [ 1859.138574][ T1080] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1859.169453][ T1080] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1859.210020][ T1080] usb 6-1: Manufacturer: syz [ 1859.225473][ T1080] usb 6-1: config 0 descriptor?? [ 1859.349634][ T3883] Bluetooth: MGMT ver 1.23 [ 1860.451104][ T1080] mcp2221 0003:04D8:00DD.0080: unknown main item tag 0x0 [ 1860.482761][ T3890] virtio-fs: tag not found [ 1860.488108][ T1080] mcp2221 0003:04D8:00DD.0080: unknown main item tag 0x0 [ 1860.506769][ T1080] mcp2221 0003:04D8:00DD.0080: unknown main item tag 0x0 [ 1860.535025][ T1080] mcp2221 0003:04D8:00DD.0080: unknown main item tag 0x0 [ 1860.557399][ T30] audit: type=1400 audit(1776.143:1853): avc: denied { mount } for pid=3891 comm="syz.8.7593" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1860.563903][ T1080] mcp2221 0003:04D8:00DD.0080: unknown main item tag 0x0 [ 1860.644250][ T30] audit: type=1400 audit(1776.180:1854): avc: denied { mounton } for pid=3891 comm="syz.8.7593" path="/73/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1860.645065][ T3892] xt_bpf: check failed: parse error [ 1860.672476][ T1080] mcp2221 0003:04D8:00DD.0080: USB HID v0.05 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1860.700110][ T1894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1860.712819][ T1894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1860.721422][ T1894] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1860.729519][ T1894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1860.740918][ T30] audit: type=1400 audit(1776.199:1855): avc: denied { remount } for pid=3891 comm="syz.8.7593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1860.928345][ T3899] netlink: 'syz.5.7580': attribute type 10 has an invalid length. [ 1861.004132][ T3899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1861.004343][ T1894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1861.039942][ T3899] bond0: (slave team0): Enslaving as an active interface with an up link [ 1861.438033][ T3902] /dev/nullb0: Can't open blockdev [ 1861.823609][ T30] audit: type=1400 audit(1777.322:1856): avc: denied { unmount } for pid=1891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1861.887079][ T3906] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1861.991556][ T3894] lo speed is unknown, defaulting to 1000 [ 1862.043112][ T3857] bridge0: entered promiscuous mode [ 1862.049489][ T3857] bridge0: left promiscuous mode [ 1862.117045][ T1080] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 1862.459337][T32433] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1862.578162][ T3894] chnl_net:caif_netlink_parms(): no params data found [ 1862.630068][T32433] usb 9-1: Using ep0 maxpacket: 8 [ 1862.656349][T32433] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.712506][T32433] usb 9-1: config 0 has no interfaces? [ 1862.741757][T32433] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1862.769023][T32433] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.804646][T32433] usb 9-1: Product: syz [ 1863.042658][T32739] usb 6-1: USB disconnect, device number 19 [ 1863.046153][T32433] usb 9-1: Manufacturer: syz [ 1863.085813][T32433] usb 9-1: SerialNumber: syz [ 1863.138769][T32433] usb 9-1: config 0 descriptor?? [ 1863.357453][T22977] Bluetooth: hci1: command tx timeout [ 1863.435818][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.919696][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.936019][ T3894] bridge_slave_0: entered allmulticast mode [ 1863.951993][ T3894] bridge_slave_0: entered promiscuous mode [ 1863.985702][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.331785][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.342717][ T3894] bridge_slave_1: entered allmulticast mode [ 1864.363419][ T3894] bridge_slave_1: entered promiscuous mode [ 1864.514727][ T30] audit: type=1400 audit(1779.847:1857): avc: denied { write } for pid=3937 comm="syz.5.7602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1864.756027][ T36] bridge_slave_1: left allmulticast mode [ 1864.964018][ T36] bridge_slave_1: left promiscuous mode [ 1864.988368][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.013764][ T36] bridge_slave_0: left allmulticast mode [ 1865.026225][ T36] bridge_slave_0: left promiscuous mode [ 1865.044820][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.591329][T22977] Bluetooth: hci1: command tx timeout [ 1865.615882][ T3939] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1865.624050][ T3939] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1865.630012][T26203] usb 9-1: USB disconnect, device number 14 [ 1865.914393][ T30] audit: type=1400 audit(1781.101:1858): avc: denied { ioctl } for pid=3954 comm="syz.5.7606" path="socket:[152846]" dev="sockfs" ino=152846 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1866.223832][ T3970] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1866.356311][T32433] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1866.724509][T32433] usb 6-1: Using ep0 maxpacket: 32 [ 1866.768760][ T3974] netlink: 'syz.8.7609': attribute type 4 has an invalid length. [ 1866.829617][ T3975] netlink: 'syz.8.7609': attribute type 4 has an invalid length. [ 1867.080229][T32433] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1867.091812][T32433] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1867.103673][T32433] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1867.113020][T32433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.121759][T32433] usb 6-1: Product: syz [ 1867.126062][T32433] usb 6-1: Manufacturer: syz [ 1867.130768][T32433] usb 6-1: SerialNumber: syz [ 1867.137693][T32433] usb 6-1: config 0 descriptor?? [ 1867.297586][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1867.310459][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1867.321369][ T36] bond0 (unregistering): (slave team0): Releasing backup interface [ 1867.330197][ T36] bond0 (unregistering): Released all slaves [ 1868.174854][T22977] Bluetooth: hci1: command tx timeout [ 1868.320918][ T36] bond1 (unregistering): Released all slaves [ 1868.457771][ T36] bond2 (unregistering): Released all slaves [ 1868.593087][ T36] bond3 (unregistering): Released all slaves [ 1868.730157][ T36] bond4 (unregistering): Released all slaves [ 1868.860621][ T36] bond5 (unregistering): Released all slaves [ 1868.993257][ T36] bond6 (unregistering): Released all slaves [ 1869.118005][ T36] bond7 (unregistering): (slave dummy0): Releasing active interface [ 1869.127026][ T36] bond7 (unregistering): Released all slaves [ 1869.141007][ T3894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.234807][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7607'. [ 1869.389847][ T3894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.397671][T32433] usb 6-1: USB disconnect, device number 20 [ 1869.512965][ T3894] team0: Port device team_slave_0 added [ 1869.529380][T22977] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 1869.530666][ T3894] team0: Port device team_slave_1 added [ 1869.556967][ T30] audit: type=1400 audit(1784.552:1859): avc: denied { append } for pid=3989 comm="syz.4.7613" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1869.586993][ T3990] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1869.640052][ T3894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.659811][ T3894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.685718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1869.710718][ T3894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1869.714128][ T3994] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1869.758204][ T3894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.819937][ T3894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.845868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1869.879182][ T3894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.983208][ T3894] hsr_slave_0: entered promiscuous mode [ 1870.065094][ T3894] hsr_slave_1: entered promiscuous mode [ 1870.138718][ T3894] debugfs: 'hsr0' already exists in 'hsr' [ 1870.160048][ T3894] Cannot create hsr debugfs directory [ 1870.372593][T22977] Bluetooth: hci1: command tx timeout [ 1871.191502][ T3894] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1871.235286][ T3894] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1871.279905][ T3894] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1871.289404][T32739] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1871.313486][ T3894] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1871.567104][T32739] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1871.585896][ T3894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1871.599348][T32739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.626494][T32739] usb 6-1: config 0 descriptor?? [ 1871.694048][T32739] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1871.720080][ T3894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1871.799327][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.806463][ T6468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1871.852420][T13740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.859582][T13740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1872.470443][T32739] gspca_sunplus: reg_w_riv err -110 [ 1872.510084][T32739] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1873.268606][ T4064] netlink: 'syz.8.7621': attribute type 4 has an invalid length. [ 1873.328022][ T4065] netlink: 'syz.8.7621': attribute type 4 has an invalid length. [ 1873.732236][ T3894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.359022][ T5820] usb 6-1: USB disconnect, device number 21 [ 1874.475920][T18339] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1874.539727][ T1080] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1874.809063][T18339] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1874.828049][T18339] usb 9-1: config 0 has no interface number 0 [ 1874.837703][T18339] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1874.919377][ T1080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.234561][T18339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.246784][T18339] usb 9-1: Product: syz [ 1875.251091][T18339] usb 9-1: Manufacturer: syz [ 1875.273088][T18339] usb 9-1: SerialNumber: syz [ 1875.284527][ T1080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.295893][T18339] usb 9-1: config 0 descriptor?? [ 1875.308081][ T1080] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1875.311194][T18339] yurex 9-1:0.50: Could not find endpoints [ 1875.336709][ T1080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.361463][ T1080] usb 5-1: config 0 descriptor?? [ 1875.460415][ T3894] veth0_vlan: entered promiscuous mode [ 1875.476085][ T3894] veth1_vlan: entered promiscuous mode [ 1875.516470][ T3894] veth0_macvtap: entered promiscuous mode [ 1875.532073][ T3894] veth1_macvtap: entered promiscuous mode [ 1875.549189][ T868] usb 9-1: USB disconnect, device number 15 [ 1875.570433][ T3894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1875.582139][ T3894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.602385][T13742] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.617066][T13742] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.653640][T13742] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.701230][T13742] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.734242][ T4098] FAULT_INJECTION: forcing a failure. [ 1875.734242][ T4098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.750638][ T4098] CPU: 1 UID: 0 PID: 4098 Comm: syz.5.7629 Not tainted syzkaller #0 PREEMPT(full) [ 1875.750661][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1875.750674][ T4098] Call Trace: [ 1875.750680][ T4098] [ 1875.750686][ T4098] dump_stack_lvl+0x16c/0x1f0 [ 1875.750713][ T4098] should_fail_ex+0x512/0x640 [ 1875.750736][ T4098] _copy_to_user+0x32/0xd0 [ 1875.750757][ T4098] simple_read_from_buffer+0xcb/0x170 [ 1875.750781][ T4098] proc_fail_nth_read+0x197/0x240 [ 1875.750800][ T4098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1875.750821][ T4098] ? rw_verify_area+0xcf/0x6c0 [ 1875.750840][ T4098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1875.750858][ T4098] vfs_read+0x1e4/0xcf0 [ 1875.750881][ T4098] ? __pfx___mutex_lock+0x10/0x10 [ 1875.750907][ T4098] ? __pfx_vfs_read+0x10/0x10 [ 1875.750934][ T4098] ? __fget_files+0x20e/0x3c0 [ 1875.750962][ T4098] ksys_read+0x12a/0x250 [ 1875.750983][ T4098] ? __pfx_ksys_read+0x10/0x10 [ 1875.751010][ T4098] do_syscall_64+0xcd/0xf80 [ 1875.751032][ T4098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.751047][ T4098] RIP: 0033:0x7f39c3b8e15c [ 1875.751060][ T4098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1875.751075][ T4098] RSP: 002b:00007f39c4b0e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1875.751089][ T4098] RAX: ffffffffffffffda RBX: 00007f39c3de5fa0 RCX: 00007f39c3b8e15c [ 1875.751099][ T4098] RDX: 000000000000000f RSI: 00007f39c4b0e0a0 RDI: 0000000000000005 [ 1875.751108][ T4098] RBP: 00007f39c4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.751116][ T4098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.751124][ T4098] R13: 00007f39c3de6038 R14: 00007f39c3de5fa0 R15: 00007fffc6537fc8 [ 1875.751146][ T4098] [ 1875.935943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1876.014068][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.067639][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.125192][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.157663][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.214089][ T4105] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1876.486066][ T4106] netlink: 'syz.4.7625': attribute type 2 has an invalid length. [ 1876.493869][ T4106] netlink: 'syz.4.7625': attribute type 1 has an invalid length. [ 1876.550219][ T4106] netlink: 'syz.4.7625': attribute type 1 has an invalid length. [ 1876.589984][T13742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.599800][T13742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.681175][ T1080] usbhid 5-1:0.0: can't add hid device: -71 [ 1876.714188][ T1080] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1876.733540][ T1080] usb 5-1: USB disconnect, device number 28 [ 1877.497489][T32739] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1877.982586][T22977] Bluetooth: Wrong link type (-71) [ 1878.052064][T32739] usb 9-1: Using ep0 maxpacket: 8 [ 1878.110978][T32739] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1878.129266][T32739] usb 9-1: config 179 has no interface number 0 [ 1878.136889][T32739] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1878.149348][T32739] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1878.162444][T32739] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1878.174119][T32739] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1878.195025][T32739] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1878.282764][T32739] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1878.398150][ T4129] delete_channel: no stack [ 1878.774973][T32739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.814364][ T4113] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1878.856239][ T4135] dummy0: entered allmulticast mode [ 1879.199906][ T30] audit: type=1400 audit(1793.579:1860): avc: denied { read } for pid=4132 comm="syz.9.7637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1879.420505][ T4141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.657051][ T4141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.751214][ T4113] lo speed is unknown, defaulting to 1000 [ 1879.843737][ T4137] lo speed is unknown, defaulting to 1000 [ 1880.124638][ T30] audit: type=1400 audit(1794.449:1861): avc: denied { ioctl } for pid=4147 comm="syz.7.7641" path="socket:[153614]" dev="sockfs" ino=153614 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1880.301799][ T4153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7643'. [ 1880.313458][ T4153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4153 comm=syz.4.7643 [ 1880.326063][ T4153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4153 comm=syz.4.7643 [ 1880.719207][ T1894] Bluetooth: hci1: command 0x0405 tx timeout [ 1880.745820][ T4158] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7644'. [ 1880.759938][ T4158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4158 comm=syz.9.7644 [ 1880.772742][ T4158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4158 comm=syz.9.7644 [ 1881.774152][ T1894] Bluetooth: Wrong link type (-71) [ 1882.857636][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7651'. [ 1883.166724][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1883.173554][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1883.447016][ T1894] Bluetooth: Wrong link type (-71) [ 1884.231714][ T4198] FAULT_INJECTION: forcing a failure. [ 1884.231714][ T4198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.244876][ T4198] CPU: 0 UID: 0 PID: 4198 Comm: syz.5.7654 Not tainted syzkaller #0 PREEMPT(full) [ 1884.244903][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1884.244913][ T4198] Call Trace: [ 1884.244920][ T4198] [ 1884.244927][ T4198] dump_stack_lvl+0x16c/0x1f0 [ 1884.244956][ T4198] should_fail_ex+0x512/0x640 [ 1884.244977][ T4198] _copy_from_user+0x2e/0xd0 [ 1884.244992][ T4198] memdup_user+0x6b/0xe0 [ 1884.245009][ T4198] strndup_user+0x78/0xe0 [ 1884.245030][ T4198] __x64_sys_mount+0x136/0x310 [ 1884.245052][ T4198] ? __pfx___x64_sys_mount+0x10/0x10 [ 1884.245079][ T4198] do_syscall_64+0xcd/0xf80 [ 1884.245104][ T4198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.245120][ T4198] RIP: 0033:0x7f39c3b8f749 [ 1884.245130][ T4198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.245141][ T4198] RSP: 002b:00007f39c4acc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1884.245152][ T4198] RAX: ffffffffffffffda RBX: 00007f39c3de6180 RCX: 00007f39c3b8f749 [ 1884.245159][ T4198] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 1884.245166][ T4198] RBP: 00007f39c4acc090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.245172][ T4198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.245181][ T4198] R13: 00007f39c3de6218 R14: 00007f39c3de6180 R15: 00007fffc6537fc8 [ 1884.245206][ T4198] [ 1884.759578][T32433] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1885.112581][T32433] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.129037][T32433] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1885.172283][T32433] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1885.218356][T32433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.284760][T32433] usb 6-1: config 0 descriptor?? [ 1885.305227][T32433] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1885.334142][T32433] dvb-usb: bulk message failed: -22 (3/0) [ 1885.362691][T32433] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1885.404713][T32433] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1885.437322][T32433] usb 6-1: media controller created [ 1885.455119][T32433] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1885.504996][ T4208] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7658'. [ 1885.520028][T32433] dvb-usb: bulk message failed: -22 (6/0) [ 1885.534236][T32433] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1885.558680][ T4210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4210 comm=syz.7.7658 [ 1885.571723][ T4210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4210 comm=syz.7.7658 [ 1885.597860][T32433] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input102 [ 1886.110582][T32433] dvb-usb: schedule remote query interval to 150 msecs. [ 1886.143285][T32433] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1886.320520][T32433] usb 6-1: USB disconnect, device number 22 [ 1886.326643][ T8773] dvb-usb: bulk message failed: -22 (1/0) [ 1886.337929][ T8773] dvb-usb: error while querying for an remote control event. [ 1886.415985][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7660'. [ 1886.453868][T32433] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1886.681325][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1886.689652][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1886.712436][ T868] usb 9-1: USB disconnect, device number 16 [ 1887.122558][ T4233] netlink: 'syz.4.7666': attribute type 4 has an invalid length. [ 1887.182131][ T4234] netlink: 'syz.4.7666': attribute type 4 has an invalid length. [ 1887.318710][T26203] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1887.453638][ T868] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1887.480270][ T4239] netlink: 'syz.7.7668': attribute type 2 has an invalid length. [ 1887.488317][ T4239] netlink: 'syz.7.7668': attribute type 1 has an invalid length. [ 1887.496619][T26203] usb 10-1: Using ep0 maxpacket: 8 [ 1887.499201][ T4239] netlink: 'syz.7.7668': attribute type 1 has an invalid length. [ 1887.516317][T26203] usb 10-1: no configurations [ 1887.529279][T26203] usb 10-1: can't read configurations, error -22 [ 1887.624826][ T868] usb 9-1: Using ep0 maxpacket: 16 [ 1887.638268][ T868] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 1887.646985][ T868] usb 9-1: config 1 has no interface number 0 [ 1887.654306][ T868] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1887.665264][ T868] usb 9-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1887.675314][ T868] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1887.688480][T26203] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1887.719212][ T868] usb 9-1: config 1 interface 105 has no altsetting 0 [ 1887.790902][ T868] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1887.800839][ T868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.816769][ T868] usb 9-1: Product: syz [ 1887.839643][ T868] usb 9-1: Manufacturer: syz [ 1887.844854][ T868] usb 9-1: SerialNumber: syz [ 1887.855144][ T4228] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1887.892341][T26203] usb 10-1: Using ep0 maxpacket: 8 [ 1887.976072][T26203] usb 10-1: no configurations [ 1888.572591][ T4228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.636898][ T4228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.702670][ T868] aqc111 9-1:1.105: probe with driver aqc111 failed with error -22 [ 1888.912987][ T4248] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7671'. [ 1888.923128][ T4248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4248 comm=syz.7.7671 [ 1888.935639][ T4248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4248 comm=syz.7.7671 [ 1889.236327][T26203] usb 10-1: can't read configurations, error -22 [ 1889.390337][T26203] usb usb10-port1: attempt power cycle [ 1889.400373][ T868] usb 9-1: USB disconnect, device number 17 [ 1889.759453][ T4258] delete_channel: no stack [ 1889.776626][T26203] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1890.356313][ T4260] delete_channel: no stack [ 1890.685720][T26203] usb 10-1: device not accepting address 66, error -71 [ 1891.021591][ T4270] netlink: 'syz.9.7675': attribute type 4 has an invalid length. [ 1891.082483][ T4271] netlink: 'syz.9.7675': attribute type 4 has an invalid length. [ 1892.852466][T26203] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1892.964940][ T4293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7682'. [ 1892.979171][ T4293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4293 comm=syz.4.7682 [ 1892.991968][ T4293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4293 comm=syz.4.7682 [ 1893.239589][T26203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.255459][T26203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1893.267953][T26203] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1893.277967][T26203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.304314][T26203] usb 6-1: config 0 descriptor?? [ 1893.573878][ T4306] netlink: 'syz.8.7685': attribute type 4 has an invalid length. [ 1893.635756][ T4307] netlink: 'syz.8.7685': attribute type 4 has an invalid length. [ 1893.860641][ T4310] dummy0: entered allmulticast mode [ 1893.953907][ T4290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.962714][ T4290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.043320][ T4311] netlink: 'syz.5.7681': attribute type 2 has an invalid length. [ 1894.062938][ T4311] netlink: 'syz.5.7681': attribute type 1 has an invalid length. [ 1894.077320][ T4311] netlink: 'syz.5.7681': attribute type 1 has an invalid length. [ 1894.113880][T26203] usbhid 6-1:0.0: can't add hid device: -71 [ 1894.124089][T26203] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1894.135543][T26203] usb 6-1: USB disconnect, device number 23 [ 1895.334546][ T4337] netlink: 'syz.5.7694': attribute type 4 has an invalid length. [ 1895.356143][T32433] lo speed is unknown, defaulting to 1000 [ 1895.362057][T32433] syz0: Port: 1 Link DOWN [ 1895.368691][ T4337] netlink: 'syz.5.7694': attribute type 4 has an invalid length. [ 1895.379518][T10013] lo speed is unknown, defaulting to 1000 [ 1895.394147][T10013] syz0: Port: 1 Link ACTIVE [ 1895.451920][ T4343] x_tables: duplicate underflow at hook 1 [ 1895.561797][ T4351] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1895.571679][ T4351] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1895.585795][ T30] audit: type=1400 audit(1808.901:1862): avc: denied { firmware_load } for pid=4347 comm="syz.7.7698" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1895.589114][ T4351] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1896.091854][T32433] usb 10-1: new low-speed USB device number 68 using dummy_hcd [ 1896.723495][ T4362] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1896.883302][T32433] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.011597][T32433] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1897.032674][T32433] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1897.050851][T32433] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1897.088944][T32433] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1897.103771][T32433] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.128351][ T4350] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1897.138550][T32433] hub 10-1:1.0: bad descriptor, ignoring hub [ 1897.145561][T32433] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1897.164126][ T4370] dummy0: entered allmulticast mode [ 1897.172880][T32433] cdc_wdm 10-1:1.0: skipping garbage [ 1897.188409][T32433] cdc_wdm 10-1:1.0: skipping garbage [ 1897.199819][T32433] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1897.396298][ T4378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7707'. [ 1897.571236][ T4375] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1898.153027][ T4388] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1898.463042][ T868] usb 10-1: USB disconnect, device number 68 [ 1898.786258][ T868] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1899.012261][ T868] usb 10-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.039399][ T868] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1899.055203][ T868] usb 10-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 1899.190471][ T868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.830086][ T868] usb 10-1: config 0 descriptor?? [ 1901.358544][ T868] usbhid 10-1:0.0: can't add hid device: -71 [ 1901.365203][ T868] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1901.377814][ T868] usb 10-1: USB disconnect, device number 69 [ 1901.489915][ T4411] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1902.238643][ T4432] FAULT_INJECTION: forcing a failure. [ 1902.238643][ T4432] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.254947][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.9.7724 Not tainted syzkaller #0 PREEMPT(full) [ 1902.254971][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1902.254981][ T4432] Call Trace: [ 1902.254988][ T4432] [ 1902.254994][ T4432] dump_stack_lvl+0x16c/0x1f0 [ 1902.255020][ T4432] should_fail_ex+0x512/0x640 [ 1902.255036][ T4432] ? fs_reclaim_acquire+0xae/0x150 [ 1902.255055][ T4432] should_failslab+0xc2/0x120 [ 1902.255072][ T4432] __kmalloc_noprof+0xdd/0x8f0 [ 1902.255084][ T4432] ? tomoyo_encode2+0x100/0x3e0 [ 1902.255100][ T4432] ? tomoyo_encode2+0x100/0x3e0 [ 1902.255112][ T4432] tomoyo_encode2+0x100/0x3e0 [ 1902.255128][ T4432] tomoyo_encode+0x29/0x50 [ 1902.255140][ T4432] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1902.255158][ T4432] tomoyo_path2_perm+0x2a1/0x710 [ 1902.255169][ T4432] ? tomoyo_path2_perm+0x293/0x710 [ 1902.255181][ T4432] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1902.255192][ T4432] ? rcu_is_watching+0x12/0xc0 [ 1902.255204][ T4432] ? trace_sched_exit_tp+0xd1/0x110 [ 1902.255233][ T4432] ? irqentry_exit+0x1dd/0x8c0 [ 1902.255248][ T4432] ? lockdep_hardirqs_on+0x7c/0x110 [ 1902.255264][ T4432] ? irqentry_exit+0x1dd/0x8c0 [ 1902.255281][ T4432] tomoyo_path_link+0xae/0x100 [ 1902.255296][ T4432] ? __pfx_tomoyo_path_link+0x10/0x10 [ 1902.255317][ T4432] ? security_path_link+0x7b/0x2b0 [ 1902.255332][ T4432] security_path_link+0x12f/0x2b0 [ 1902.255343][ T4432] do_linkat+0x428/0x5d0 [ 1902.255358][ T4432] ? __pfx_do_linkat+0x10/0x10 [ 1902.255369][ T4432] ? strncpy_from_user+0x203/0x2e0 [ 1902.255385][ T4432] ? getname_flags.part.0+0x1c5/0x550 [ 1902.255401][ T4432] __x64_sys_link+0x7d/0xa0 [ 1902.255413][ T4432] do_syscall_64+0xcd/0xf80 [ 1902.255430][ T4432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.255441][ T4432] RIP: 0033:0x7fd8cb38f749 [ 1902.255451][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1902.255462][ T4432] RSP: 002b:00007fd8cc1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1902.255473][ T4432] RAX: ffffffffffffffda RBX: 00007fd8cb5e6090 RCX: 00007fd8cb38f749 [ 1902.255481][ T4432] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 1902.255488][ T4432] RBP: 00007fd8cc1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.255494][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.255500][ T4432] R13: 00007fd8cb5e6128 R14: 00007fd8cb5e6090 R15: 00007ffe6ae49c78 [ 1902.255515][ T4432] [ 1902.255545][ T4432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1903.175125][ T4445] delete_channel: no stack [ 1903.600372][ T30] audit: type=1800 audit(1816.403:1863): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.7729" name="file0" dev="tmpfs" ino=2450 res=0 errno=0 [ 1903.620911][T10013] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1904.496197][T10013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1904.515927][T10013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1904.525722][T10013] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1904.783040][T10013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.979548][ T4458] netlink: 'syz.7.7731': attribute type 4 has an invalid length. [ 1905.080822][ T4454] netlink: 'syz.7.7731': attribute type 4 has an invalid length. [ 1905.169010][ T4463] netlink: 'syz.8.7733': attribute type 4 has an invalid length. [ 1905.229962][ T4464] netlink: 'syz.8.7733': attribute type 4 has an invalid length. [ 1905.473992][T10013] usb 6-1: config 0 descriptor?? [ 1906.032692][ T4478] netlink: 'syz.7.7736': attribute type 4 has an invalid length. [ 1906.097732][ T4474] netlink: 'syz.7.7736': attribute type 4 has an invalid length. [ 1906.273232][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.372433][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.488464][ T4482] netlink: 'syz.5.7726': attribute type 2 has an invalid length. [ 1906.501585][ T4482] netlink: 'syz.5.7726': attribute type 1 has an invalid length. [ 1906.529030][ T4482] netlink: 'syz.5.7726': attribute type 1 has an invalid length. [ 1906.631768][ T30] audit: type=1400 audit(1819.237:1864): avc: denied { connect } for pid=4483 comm="syz.8.7738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1906.775146][ T4484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7738'. [ 1907.280790][ T4493] delete_channel: no stack [ 1909.237767][ T4509] netlink: 'syz.7.7745': attribute type 4 has an invalid length. [ 1909.842301][T10013] usbhid 6-1:0.0: can't add hid device: -71 [ 1909.957344][T10013] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1909.987044][T10013] usb 6-1: USB disconnect, device number 24 [ 1910.091461][ T4519] delete_channel: no stack [ 1910.765907][ T4525] FAULT_INJECTION: forcing a failure. [ 1910.765907][ T4525] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.851728][ T4525] CPU: 0 UID: 0 PID: 4525 Comm: syz.8.7749 Not tainted syzkaller #0 PREEMPT(full) [ 1910.851747][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1910.851754][ T4525] Call Trace: [ 1910.851758][ T4525] [ 1910.851763][ T4525] dump_stack_lvl+0x16c/0x1f0 [ 1910.851783][ T4525] should_fail_ex+0x512/0x640 [ 1910.851800][ T4525] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1910.851818][ T4525] should_failslab+0xc2/0x120 [ 1910.851836][ T4525] kmem_cache_alloc_noprof+0x75/0x760 [ 1910.851849][ T4525] ? skb_clone+0x190/0x3f0 [ 1910.851863][ T4525] ? skb_clone+0x190/0x3f0 [ 1910.851872][ T4525] skb_clone+0x190/0x3f0 [ 1910.851884][ T4525] netlink_deliver_tap+0xabd/0xd30 [ 1910.851900][ T4525] netlink_unicast+0x71f/0x870 [ 1910.851916][ T4525] ? __pfx_netlink_unicast+0x10/0x10 [ 1910.851929][ T4525] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1910.851947][ T4525] netlink_ack+0x696/0xb80 [ 1910.851965][ T4525] netlink_rcv_skb+0x332/0x420 [ 1910.851978][ T4525] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1910.851992][ T4525] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1910.852011][ T4525] ? netlink_deliver_tap+0x1ae/0xd30 [ 1910.852026][ T4525] netlink_unicast+0x5aa/0x870 [ 1910.852041][ T4525] ? __pfx_netlink_unicast+0x10/0x10 [ 1910.852060][ T4525] netlink_sendmsg+0x8c8/0xdd0 [ 1910.852076][ T4525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1910.852094][ T4525] ____sys_sendmsg+0xa5d/0xc30 [ 1910.852110][ T4525] ? copy_msghdr_from_user+0x10a/0x160 [ 1910.852120][ T4525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1910.852133][ T4525] ? __lock_acquire+0x433/0x22f0 [ 1910.852154][ T4525] ___sys_sendmsg+0x134/0x1d0 [ 1910.852165][ T4525] ? __pfx____sys_sendmsg+0x10/0x10 [ 1910.852175][ T4525] ? __lock_acquire+0x433/0x22f0 [ 1910.852205][ T4525] __sys_sendmsg+0x16d/0x220 [ 1910.852215][ T4525] ? __pfx___sys_sendmsg+0x10/0x10 [ 1910.852235][ T4525] do_syscall_64+0xcd/0xf80 [ 1910.852252][ T4525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.852267][ T4525] RIP: 0033:0x7f044358f749 [ 1910.852276][ T4525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1910.852287][ T4525] RSP: 002b:00007f04443cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1910.852298][ T4525] RAX: ffffffffffffffda RBX: 00007f04437e5fa0 RCX: 00007f044358f749 [ 1910.852307][ T4525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1910.852313][ T4525] RBP: 00007f04443cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.852320][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.852326][ T4525] R13: 00007f04437e6038 R14: 00007f04437e5fa0 R15: 00007ffd0d61abc8 [ 1910.852340][ T4525] [ 1911.113896][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.375668][ T4529] validate_nla: 1 callbacks suppressed [ 1911.375681][ T4529] netlink: 'syz.9.7750': attribute type 4 has an invalid length. [ 1911.430782][ T4527] netlink: 'syz.9.7750': attribute type 4 has an invalid length. [ 1911.536598][ T4532] xt_l2tp: invalid flags combination: 8 [ 1911.573681][ T30] audit: type=1400 audit(1823.867:1865): avc: denied { mounton } for pid=4531 comm="syz.4.7752" path="/" dev="ramfs" ino=155467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1911.837024][ T30] audit: type=1400 audit(1824.082:1866): avc: denied { execute } for pid=4531 comm="syz.4.7752" name="file0" dev="ramfs" ino=154552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1912.018535][ T30] audit: type=1400 audit(1824.082:1867): avc: denied { execute_no_trans } for pid=4531 comm="syz.4.7752" path="/file0" dev="ramfs" ino=154552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1912.077712][ T4537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1912.940253][ T4550] delete_channel: no stack [ 1913.377092][ T4552] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1913.692221][ T4554] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1914.008659][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7758'. [ 1915.367113][ T10] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1915.935413][ T4581] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0 [ 1916.047403][ T1894] Bluetooth: Wrong link type (-71) [ 1916.191554][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1916.328630][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 1916.357654][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.384884][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1916.420177][ T10] usb 9-1: string descriptor 0 read error: -22 [ 1916.429664][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1916.814440][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.972695][ T10] usb 9-1: 0:2 : does not exist [ 1917.058393][ T4591] delete_channel: no stack [ 1918.644487][ T10] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1918.728156][ T10] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1918.826513][ T10] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1918.985498][ T4614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7773'. [ 1919.185442][ T10] usb 9-1: USB disconnect, device number 18 [ 1919.777312][ T4628] syzkaller0: entered promiscuous mode [ 1919.782890][ T4628] syzkaller0: entered allmulticast mode [ 1923.299197][ T10] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 1923.514470][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1923.549337][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1923.618410][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1923.652033][ T10] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1923.673118][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.693352][ T10] usb 9-1: config 0 descriptor?? [ 1923.719895][ T4638] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1923.741152][ T4638] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1923.753731][ T10] metro_usb 9-1:0.0: Metrologic USB to Serial converter detected [ 1923.795790][ T10] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1923.865879][T32433] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1923.970321][ T4654] netlink: 'syz.4.7784': attribute type 21 has an invalid length. [ 1924.021068][ T4654] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7784'. [ 1924.052874][T32433] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1924.062507][T32433] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.260449][ T4663] overlayfs: failed to resolve './bus': -2 [ 1924.345017][T32433] usb 10-1: config 0 descriptor?? [ 1924.479890][ T4659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7786'. [ 1924.973672][T32433] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1924.986195][ T4647] IPv6: sit1: Disabled Multicast RS [ 1925.026363][ T4647] sit1: entered allmulticast mode [ 1925.151164][ T4672] netlink: 'syz.7.7787': attribute type 2 has an invalid length. [ 1925.179435][ T4672] netlink: 'syz.7.7787': attribute type 1 has an invalid length. [ 1925.211383][ T4672] netlink: 'syz.7.7787': attribute type 1 has an invalid length. [ 1925.555344][T32433] gspca_sunplus: reg_w_riv err -110 [ 1925.567714][T32433] sunplus 10-1:0.0: probe with driver sunplus failed with error -110 [ 1925.903566][ T4678] netlink: 'syz.7.7790': attribute type 2 has an invalid length. [ 1925.916925][ T4678] netlink: 'syz.7.7790': attribute type 1 has an invalid length. [ 1925.925980][ T4678] netlink: 'syz.7.7790': attribute type 1 has an invalid length. [ 1926.035828][ T1080] usb 9-1: USB disconnect, device number 19 [ 1926.086511][ T30] audit: type=1400 audit(1837.430:1868): avc: denied { mounton } for pid=4680 comm="syz.5.7792" path="/proc/1835/task" dev="proc" ino=156854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1926.227454][ T1080] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1926.344343][ T1080] metro_usb 9-1:0.0: device disconnected [ 1927.146529][ T4685] Bluetooth: MGMT ver 1.23 [ 1927.182163][T32433] usb 10-1: USB disconnect, device number 70 [ 1927.420874][ T4692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=4692 comm=syz.9.7796 [ 1927.906845][ T4704] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7798'. [ 1928.327192][ T1080] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1928.957763][ T1080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.981313][ T1080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.003511][ T1080] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1929.021812][ T1080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.031479][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7802'. [ 1929.103624][ T30] audit: type=1400 audit(1840.255:1869): avc: denied { read } for pid=4714 comm="syz.7.7802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1929.126178][ T1080] usb 5-1: config 0 descriptor?? [ 1929.575473][ T4729] delete_channel: no stack [ 1930.055163][ T4703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.102781][ T4703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.252711][ T4730] netlink: 'syz.4.7799': attribute type 2 has an invalid length. [ 1930.260739][ T4730] netlink: 'syz.4.7799': attribute type 1 has an invalid length. [ 1930.336717][ T4730] netlink: 'syz.4.7799': attribute type 1 has an invalid length. [ 1930.603634][ T1080] usbhid 5-1:0.0: can't add hid device: -71 [ 1930.621440][ T1080] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1930.656293][ T1080] usb 5-1: USB disconnect, device number 29 [ 1931.380211][ T4766] FAULT_INJECTION: forcing a failure. [ 1931.380211][ T4766] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.444211][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.7.7809 [ 1931.462674][ T4766] CPU: 1 UID: 0 PID: 4766 Comm: syz.5.7810 Not tainted syzkaller #0 PREEMPT(full) [ 1931.462700][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1931.462707][ T4766] Call Trace: [ 1931.462711][ T4766] [ 1931.462716][ T4766] dump_stack_lvl+0x16c/0x1f0 [ 1931.462736][ T4766] should_fail_ex+0x512/0x640 [ 1931.462752][ T4766] ? __kmalloc_cache_node_noprof+0x62/0x820 [ 1931.462769][ T4766] should_failslab+0xc2/0x120 [ 1931.462786][ T4766] __kmalloc_cache_node_noprof+0x75/0x820 [ 1931.462801][ T4766] ? __get_vm_area_node+0x101/0x330 [ 1931.462820][ T4766] ? __get_vm_area_node+0x101/0x330 [ 1931.462835][ T4766] __get_vm_area_node+0x101/0x330 [ 1931.462851][ T4766] ? __schedule+0x114c/0x6150 [ 1931.462867][ T4766] __vmalloc_node_range_noprof+0x271/0x1480 [ 1931.462884][ T4766] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.462899][ T4766] ? find_held_lock+0x2b/0x80 [ 1931.462912][ T4766] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1931.462928][ T4766] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.462945][ T4766] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1931.462963][ T4766] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1931.462980][ T4766] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.462992][ T4766] __vmalloc_node_noprof+0xad/0xf0 [ 1931.463009][ T4766] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.463023][ T4766] bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.463035][ T4766] ? security_capable+0x7e/0x260 [ 1931.463054][ T4766] bpf_prog_alloc+0x3b/0x230 [ 1931.463065][ T4766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1931.463080][ T4766] bpf_prog_load+0x19bc/0x2c70 [ 1931.463100][ T4766] ? __pfx_bpf_prog_load+0x10/0x10 [ 1931.463117][ T4766] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1931.463135][ T4766] ? avc_has_perm+0x144/0x1f0 [ 1931.463157][ T4766] ? selinux_bpf+0xdd/0x130 [ 1931.463172][ T4766] ? bpf_lsm_bpf+0x9/0x10 [ 1931.463187][ T4766] __sys_bpf+0x3e72/0x4980 [ 1931.463203][ T4766] ? rcu_is_watching+0x12/0xc0 [ 1931.463217][ T4766] ? __pfx___sys_bpf+0x10/0x10 [ 1931.463248][ T4766] ? __pfx___schedule+0x10/0x10 [ 1931.463271][ T4766] ? fput+0xe2/0xf0 [ 1931.463283][ T4766] ? ksys_write+0x1ac/0x250 [ 1931.463298][ T4766] ? __pfx_ksys_write+0x10/0x10 [ 1931.463316][ T4766] __x64_sys_bpf+0x78/0xc0 [ 1931.463326][ T4766] ? lockdep_hardirqs_on+0x7c/0x110 [ 1931.463341][ T4766] do_syscall_64+0xcd/0xf80 [ 1931.463357][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.463369][ T4766] RIP: 0033:0x7f39c3b8f749 [ 1931.463378][ T4766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1931.463389][ T4766] RSP: 002b:00007f39c4b0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1931.463401][ T4766] RAX: ffffffffffffffda RBX: 00007f39c3de5fa0 RCX: 00007f39c3b8f749 [ 1931.463407][ T4766] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1931.463414][ T4766] RBP: 00007f39c4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.463420][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.463427][ T4766] R13: 00007f39c3de6038 R14: 00007f39c3de5fa0 R15: 00007fffc6537fc8 [ 1931.463441][ T4766] [ 1931.465742][ T4766] syz.5.7810: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1931.789901][ T4766] CPU: 1 UID: 0 PID: 4766 Comm: syz.5.7810 Not tainted syzkaller #0 PREEMPT(full) [ 1931.789926][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1931.789937][ T4766] Call Trace: [ 1931.789944][ T4766] [ 1931.789952][ T4766] dump_stack_lvl+0x16c/0x1f0 [ 1931.789983][ T4766] warn_alloc+0x248/0x3a0 [ 1931.790012][ T4766] ? __pfx_warn_alloc+0x10/0x10 [ 1931.790031][ T4766] ? trace_kmalloc+0x2b/0xb0 [ 1931.790057][ T4766] ? __get_vm_area_node+0x101/0x330 [ 1931.790087][ T4766] ? __kasan_kmalloc+0x8a/0xb0 [ 1931.790112][ T4766] ? __get_vm_area_node+0x208/0x330 [ 1931.790143][ T4766] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1931.790173][ T4766] ? find_held_lock+0x2b/0x80 [ 1931.790192][ T4766] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1931.790221][ T4766] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.790248][ T4766] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1931.790277][ T4766] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1931.790305][ T4766] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.790325][ T4766] __vmalloc_node_noprof+0xad/0xf0 [ 1931.790353][ T4766] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.790378][ T4766] bpf_prog_alloc_no_stats+0x58/0x610 [ 1931.790399][ T4766] ? security_capable+0x7e/0x260 [ 1931.790429][ T4766] bpf_prog_alloc+0x3b/0x230 [ 1931.790448][ T4766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1931.790472][ T4766] bpf_prog_load+0x19bc/0x2c70 [ 1931.790505][ T4766] ? __pfx_bpf_prog_load+0x10/0x10 [ 1931.790533][ T4766] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1931.790562][ T4766] ? avc_has_perm+0x144/0x1f0 [ 1931.790599][ T4766] ? selinux_bpf+0xdd/0x130 [ 1931.790624][ T4766] ? bpf_lsm_bpf+0x9/0x10 [ 1931.790648][ T4766] __sys_bpf+0x3e72/0x4980 [ 1931.790673][ T4766] ? rcu_is_watching+0x12/0xc0 [ 1931.790696][ T4766] ? __pfx___sys_bpf+0x10/0x10 [ 1931.790736][ T4766] ? __pfx___schedule+0x10/0x10 [ 1931.790775][ T4766] ? fput+0xe2/0xf0 [ 1931.790794][ T4766] ? ksys_write+0x1ac/0x250 [ 1931.790819][ T4766] ? __pfx_ksys_write+0x10/0x10 [ 1931.790848][ T4766] __x64_sys_bpf+0x78/0xc0 [ 1931.790864][ T4766] ? lockdep_hardirqs_on+0x7c/0x110 [ 1931.790889][ T4766] do_syscall_64+0xcd/0xf80 [ 1931.790916][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.790935][ T4766] RIP: 0033:0x7f39c3b8f749 [ 1931.790950][ T4766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1931.790967][ T4766] RSP: 002b:00007f39c4b0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1931.790984][ T4766] RAX: ffffffffffffffda RBX: 00007f39c3de5fa0 RCX: 00007f39c3b8f749 [ 1931.791002][ T4766] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1931.791014][ T4766] RBP: 00007f39c4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.791025][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.791036][ T4766] R13: 00007f39c3de6038 R14: 00007f39c3de5fa0 R15: 00007fffc6537fc8 [ 1931.791061][ T4766] [ 1931.791092][ T4766] Mem-Info: [ 1932.528758][ T4766] active_anon:46313 inactive_anon:0 isolated_anon:0 [ 1932.528758][ T4766] active_file:15641 inactive_file:51881 isolated_file:0 [ 1932.528758][ T4766] unevictable:768 dirty:416 writeback:0 [ 1932.528758][ T4766] slab_reclaimable:9112 slab_unreclaimable:131464 [ 1932.528758][ T4766] mapped:32795 shmem:33195 pagetables:1892 [ 1932.528758][ T4766] sec_pagetables:0 bounce:0 [ 1932.528758][ T4766] kernel_misc_reclaimable:0 [ 1932.528758][ T4766] free:1211066 free_pcp:13107 free_cma:0 [ 1932.575363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1932.712193][ T4772] netlink: 'syz.4.7811': attribute type 15 has an invalid length. [ 1932.720460][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7811'. [ 1932.831559][ T4772] kAFS: unable to lookup cell 'Þ({^ú@' [ 1933.038307][ T4766] Node 0 active_anon:191852kB inactive_anon:0kB active_file:62516kB inactive_file:207324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138128kB dirty:1664kB writeback:0kB shmem:137744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16092kB pagetables:7400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1933.070407][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.129225][ T4766] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1933.159255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.250420][ T4766] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.299479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.343121][ T4766] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 1933.715642][ T4766] Node 0 DMA32 free:948344kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:184848kB inactive_anon:0kB active_file:62516kB inactive_file:207324kB unevictable:1536kB writepending:1664kB zspages:0kB present:3129332kB managed:2542032kB mlocked:0kB bounce:0kB free_pcp:36820kB local_pcp:19712kB free_cma:0kB [ 1933.749088][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.799743][ T4766] lowmem_reserve[]: 0 0 1 1 1 [ 1933.825532][ T4766] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.855164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.954538][ T4766] lowmem_reserve[]: 0 0 0 0 0 [ 1934.374448][ T4787] delete_channel: no stack [ 1934.381766][ T4790] netlink: 'syz.8.7818': attribute type 4 has an invalid length. [ 1934.400568][ T4790] netlink: 'syz.8.7818': attribute type 4 has an invalid length. [ 1934.440181][ T4766] Node 1 Normal free:3905312kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:576kB local_pcp:0kB free_cma:0kB [ 1934.581310][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7816'. [ 1934.588155][ T4766] lowmem_reserve[]: 0 0 0 0 0 [ 1934.656991][ T4766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 1934.724202][ T4766] Node 0 DMA32: 35*4kB (ME) 788*8kB (UE) 142*16kB (UE) 650*32kB (UME) 445*64kB (UME) 479*128kB (UME) 242*256kB (UME) 150*512kB (UME) 107*1024kB (UME) 12*2048kB (UM) 125*4096kB (UM) = 904204kB [ 1934.744459][ T4766] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1934.793342][ T4766] Node 1 Normal: 172*4kB (UE) 60*8kB (UME) 45*16kB (UME) 218*32kB (UME) 112*64kB (UME) 27*128kB (UME) 15*256kB (UM) 4*512kB (UM) 5*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3905312kB [ 1934.811963][ T4766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1934.822433][ T4766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1934.839270][ T4766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1934.951992][ T4766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1934.963577][ T4766] 103448 total pagecache pages [ 1934.968349][ T4766] 0 pages in swap cache [ 1934.972486][ T4766] Free swap = 124996kB [ 1934.978301][ T4766] Total swap = 124996kB [ 1934.982462][ T4766] 2097051 pages RAM [ 1934.986633][ T4766] 0 pages HighMem/MovableOnly [ 1934.991307][ T4766] 429517 pages reserved [ 1935.175223][ T4766] 0 pages cma reserved [ 1935.306409][ T4807] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7820'. [ 1935.891916][ T4814] netlink: 'syz.5.7822': attribute type 10 has an invalid length. [ 1935.930799][ T4814] team0: Device veth1_macvtap failed to register rx_handler [ 1936.020481][ T4802] delete_channel: no stack [ 1936.378288][ T30] audit: type=1400 audit(1847.065:1870): avc: denied { write } for pid=4818 comm="syz.5.7824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1936.399035][ T4820] netlink: 'syz.5.7824': attribute type 1 has an invalid length. [ 1936.407101][ T4820] netlink: 'syz.5.7824': attribute type 1 has an invalid length. [ 1936.416186][ T4820] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 1936.435535][ T30] audit: type=1400 audit(1847.112:1871): avc: denied { ioctl } for pid=4818 comm="syz.5.7824" path="socket:[156002]" dev="sockfs" ino=156002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1937.446893][ T1894] Bluetooth: Wrong link type (-71) [ 1937.789960][ T1894] Bluetooth: hci1: command 0x0405 tx timeout [ 1938.700499][ T4848] lo speed is unknown, defaulting to 1000 [ 1939.011450][ T4847] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7832'. [ 1940.012940][ T4853] delete_channel: no stack [ 1940.479434][ T1894] Bluetooth: hci5: command 0x0406 tx timeout [ 1941.755988][ T4879] Process accounting resumed [ 1941.768421][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7842'. [ 1941.783818][ T4885] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7842'. [ 1941.792987][ T4885] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7842'. [ 1941.805926][ T4885] 9pnet_virtio: no channels available for device syz [ 1942.971014][ T30] audit: type=1400 audit(1853.239:1872): avc: denied { ioctl } for pid=4901 comm="syz.7.7846" path="socket:[157364]" dev="sockfs" ino=157364 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1945.006499][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1945.105401][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1945.114904][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1945.124071][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1945.130142][ T4918] delete_channel: no stack [ 1945.909704][ T30] audit: type=1400 audit(1855.970:1873): avc: denied { unmount } for pid=25898 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1946.802845][ T4946] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1947.311219][T28161] IPVS: starting estimator thread 0... [ 1947.470672][ T4954] IPVS: using max 51 ests per chain, 122400 per kthread [ 1948.850479][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1948.857187][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1949.479832][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7867'. [ 1951.713313][T22977] Bluetooth: hci5: ACL packet for unknown connection handle 3697 [ 1951.731656][ T4999] delete_channel: no stack [ 1952.022427][T31745] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1952.614828][T31745] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1952.665207][T31745] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1952.721477][T31745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.752428][T31745] usb 9-1: config 0 descriptor?? [ 1953.046546][T31745] usbhid 9-1:0.0: can't add hid device: -71 [ 1953.059451][T31745] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1953.091509][T31745] usb 9-1: USB disconnect, device number 20 [ 1953.651476][ T5017] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7877'. [ 1953.783130][ T5026] netlink: set zone limit has 4 unknown bytes [ 1953.820948][ T4251] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1954.003932][ T4251] usb 9-1: Using ep0 maxpacket: 32 [ 1954.018184][ T4251] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.047573][ T4251] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1954.069714][ T4251] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.082803][ T4251] usb 9-1: config 0 descriptor?? [ 1954.098518][ T4251] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1954.128381][ T4251] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1954.562725][ T4994] ldusb 9-1:0.0: Read buffer overflow, 316 bytes dropped [ 1954.570713][ T4251] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1954.631995][T31745] usb 9-1: USB disconnect, device number 21 [ 1954.736281][ T5041] netlink: 'syz.4.7883': attribute type 4 has an invalid length. [ 1954.770022][T31745] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1954.780655][ T5041] netlink: 'syz.4.7883': attribute type 4 has an invalid length. [ 1954.865395][ T4251] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1954.884968][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.910514][ T4251] usb 6-1: config 0 descriptor?? [ 1954.946773][ T4251] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1955.670376][ T5887] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1955.773804][T22977] Bluetooth: Wrong link type (-71) [ 1955.837443][ T4251] gspca_sunplus: reg_w_riv err -110 [ 1956.120289][ T4251] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1956.272019][ T5887] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1956.290444][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.458786][ T5887] usb 10-1: config 0 descriptor?? [ 1956.664052][T22977] Bluetooth: Wrong link type (-71) [ 1957.030482][ T5887] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1957.704401][ T8773] usb 6-1: USB disconnect, device number 25 [ 1957.841132][ T5887] gspca_sunplus: reg_w_riv err -110 [ 1957.855408][ T5887] sunplus 10-1:0.0: probe with driver sunplus failed with error -110 [ 1957.925793][ T5068] fuse: Bad value for 'user_id' [ 1957.951178][ T5068] fuse: Bad value for 'user_id' [ 1958.588961][ T5887] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1958.759920][ T5887] usb 5-1: device descriptor read/64, error -71 [ 1959.017781][ T5887] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1959.182213][ T5887] usb 5-1: device descriptor read/64, error -71 [ 1959.319889][ T5887] usb usb5-port1: attempt power cycle [ 1959.889159][ T5887] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1959.936359][ T5887] usb 5-1: device descriptor read/8, error -71 [ 1960.160418][ T8773] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1960.214066][ T5887] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1960.236969][ T5887] usb 5-1: device descriptor read/8, error -71 [ 1960.269965][T31745] usb 10-1: USB disconnect, device number 71 [ 1960.320819][ T8773] usb 9-1: Using ep0 maxpacket: 32 [ 1960.410259][ T5887] usb usb5-port1: unable to enumerate USB device [ 1960.419578][ T8773] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1960.432256][ T8773] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1960.442140][ T8773] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1960.450803][ T8773] usb 9-1: Product: syz [ 1960.454979][ T8773] usb 9-1: Manufacturer: syz [ 1960.459587][ T8773] usb 9-1: SerialNumber: syz [ 1960.900902][ T8773] usb 9-1: config 0 descriptor?? [ 1960.910365][ T5093] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1961.510031][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7897'. [ 1961.708345][ T8773] usb 9-1: USB disconnect, device number 22 [ 1961.794237][ T5117] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1962.019449][ T5120] netlink: 'syz.9.7903': attribute type 6 has an invalid length. [ 1962.063192][ T5120] netlink: 'syz.9.7903': attribute type 10 has an invalid length. [ 1962.107520][ T5120] syz_tun: entered promiscuous mode [ 1962.144032][ T5120] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1962.236821][ T5124] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1964.102240][ T5151] delete_channel: no stack [ 1965.291918][ T5162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1965.329083][ T5162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5162 comm=syz.4.7914 [ 1965.341708][ T5162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5162 comm=syz.4.7914 [ 1965.541656][ T5152] delete_channel: no stack [ 1965.757949][ T5168] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1965.891204][T31745] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1966.127786][T31745] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1966.165323][T31745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.268468][T31745] usb 6-1: config 0 descriptor?? [ 1966.298355][T31745] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1966.461418][T32038] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe6 [ 1966.959710][ T868] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1967.077494][T31745] gspca_sunplus: reg_w_riv err -110 [ 1967.084868][T31745] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1967.176367][ T868] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1967.200440][ T868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.236030][ T868] usb 9-1: config 0 descriptor?? [ 1967.262091][ T868] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1967.426404][ T5196] macvtap2: entered promiscuous mode [ 1967.434200][ T5196] macvtap2: entered allmulticast mode [ 1967.439651][ T5196] veth1_vlan: entered allmulticast mode [ 1967.882030][ T5202] vlan2: entered promiscuous mode [ 1967.895313][ T5202] vlan2: entered allmulticast mode [ 1967.905409][ T5202] hsr_slave_1: entered allmulticast mode [ 1967.911750][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7924'. [ 1967.949094][ T5202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7923'. [ 1968.024199][T22977] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 1968.125312][ T868] gspca_sunplus: reg_w_riv err -110 [ 1968.142410][ T868] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 1968.488836][T31745] usb 6-1: USB disconnect, device number 26 [ 1968.700542][ T5215] netlink: 'syz.9.7926': attribute type 4 has an invalid length. [ 1968.761577][ T5216] netlink: 'syz.9.7926': attribute type 4 has an invalid length. [ 1969.784252][T31745] usb 9-1: USB disconnect, device number 23 [ 1970.306150][T31745] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1970.529146][T31745] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1970.556214][T31745] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1970.606436][T31745] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1970.646055][T31745] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1970.659643][T31745] usb 9-1: Product: syz [ 1970.669713][T31745] usb 9-1: Manufacturer: syz [ 1970.675305][T31745] usb 9-1: SerialNumber: syz [ 1970.738417][T31745] usb 9-1: config 0 descriptor?? [ 1970.753880][T31745] usb 9-1: selecting invalid altsetting 0 [ 1971.015560][T31745] usb 9-1: USB disconnect, device number 24 [ 1971.251393][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7936'. [ 1971.544074][ T5261] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1971.786084][ T30] audit: type=1326 audit(1880.187:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5260 comm="syz.5.7944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c3b8f749 code=0xffff0000 [ 1971.831922][ T5265] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1971.850348][ T5271] syz_tun: Device is already in use. [ 1972.135049][ T5275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5275 comm=syz.9.7945 [ 1973.535621][ T5280] delete_channel: no stack [ 1973.635529][ T5288] kAFS: unable to lookup cell '' [ 1973.643691][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7950'. [ 1973.652658][ T5288] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7950'. [ 1974.002919][T22977] Bluetooth: Wrong link type (-71) [ 1974.013384][T22977] Bluetooth: hci1: link tx timeout [ 1974.025987][T22977] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1974.339559][ T1080] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1974.440823][ T5300] fuse: Bad value for 'user_id' [ 1974.453061][ T5300] fuse: Bad value for 'user_id' [ 1974.530145][ T1080] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.542339][ T1080] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1974.554590][ T1080] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1974.566751][ T1080] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1974.629759][ T1080] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1974.640613][ T1080] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1974.649137][ T1080] usb 9-1: Manufacturer: syz [ 1974.760258][ T1080] usb 9-1: config 0 descriptor?? [ 1975.138183][ T1080] rc_core: IR keymap rc-hauppauge not found [ 1975.156161][ T1080] Registered IR keymap rc-empty [ 1975.170377][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.202696][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.235690][ T1080] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1975.300476][ T1080] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input103 [ 1975.395840][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.685168][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.842335][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.865167][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.886392][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.908407][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.929847][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1975.975848][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1976.269432][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1976.310844][ T1080] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1976.363739][ T1080] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1976.392359][ T1080] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1976.465037][ T1080] usb 9-1: USB disconnect, device number 25 [ 1976.509197][T22977] Bluetooth: hci1: command 0x0405 tx timeout [ 1976.764288][ T8773] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1977.412034][ T5332] delete_channel: no stack [ 1977.569217][ T8773] usb 6-1: Using ep0 maxpacket: 16 [ 1977.605909][ T8773] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 1977.628536][ T8773] usb 6-1: config 0 has no interface number 0 [ 1977.640595][ T8773] usb 6-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1977.653022][ T8773] usb 6-1: config 0 interface 156 has no altsetting 0 [ 1977.660494][ T5346] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0 [ 1977.673181][ T8773] usb 6-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 1977.683034][ T8773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.691373][ T8773] usb 6-1: Product: syz [ 1977.696561][ T8773] usb 6-1: Manufacturer: syz [ 1977.703730][ T8773] usb 6-1: SerialNumber: syz [ 1977.725150][ T8773] usb 6-1: config 0 descriptor?? [ 1977.741849][ T5329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1977.790502][ T1080] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1977.813529][ T5352] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1977.969908][ T1080] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1977.998026][ T1080] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1978.000244][ T8773] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/input/input104 [ 1978.052066][ T1080] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1978.093490][ C0] usbtouchscreen 6-1:0.156: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1978.104409][ T1080] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.141870][ T1080] usb 9-1: config 0 descriptor?? [ 1978.254433][ T4251] usb 6-1: USB disconnect, device number 27 [ 1978.603774][ T1080] cp2112 0003:10C4:EA90.0081: unknown main item tag 0x0 [ 1978.653642][ T1080] cp2112 0003:10C4:EA90.0081: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1978.818109][ T1080] cp2112 0003:10C4:EA90.0081: Part Number: 0x82 Device Version: 0xFE [ 1979.754972][ T5338] cp2112 0003:10C4:EA90.0081: Error starting transaction: -38 [ 1979.782651][ T1080] cp2112 0003:10C4:EA90.0081: error reading lock byte: -71 [ 1979.828587][ T1080] usb 9-1: USB disconnect, device number 26 [ 1982.355328][ T5404] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7984'. [ 1982.396896][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5404 comm=syz.9.7984 [ 1982.409707][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5404 comm=syz.9.7984 [ 1982.491708][ T5407] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1983.275145][ T5416] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1983.301242][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.307920][ T5416] CIFS mount error: No usable UNC path provided in device string! [ 1983.307920][ T5416] [ 1983.318259][ T5416] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1983.838376][ T5424] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1984.734206][ T5430] delete_channel: no stack [ 1986.536473][ T1894] Bluetooth: Wrong link type (-71) [ 1987.048632][ T1894] Bluetooth: hci1: command 0x0405 tx timeout [ 1987.363381][ T5462] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1987.754999][ T5468] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1989.317221][ T5496] netlink: 'syz.4.8003': attribute type 4 has an invalid length. [ 1989.442972][ T5497] delete_channel: no stack [ 1990.161763][ T5496] netlink: 'syz.4.8003': attribute type 4 has an invalid length. [ 1990.409202][ T5510] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1991.837946][ T5523] /dev/nullb0: Can't open blockdev [ 1992.937486][ T5536] FAULT_INJECTION: forcing a failure. [ 1992.937486][ T5536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1992.951596][ T5536] CPU: 0 UID: 0 PID: 5536 Comm: syz.5.8016 Not tainted syzkaller #0 PREEMPT(full) [ 1992.951623][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1992.951635][ T5536] Call Trace: [ 1992.951641][ T5536] [ 1992.951648][ T5536] dump_stack_lvl+0x16c/0x1f0 [ 1992.951681][ T5536] should_fail_ex+0x512/0x640 [ 1992.951712][ T5536] _copy_from_user+0x2e/0xd0 [ 1992.951740][ T5536] vga_arb_write+0xf5/0x1370 [ 1992.951760][ T5536] ? __pfx_vga_arb_write+0x10/0x10 [ 1992.951789][ T5536] ? bpf_lsm_file_permission+0x9/0x10 [ 1992.951810][ T5536] ? security_file_permission+0x71/0x210 [ 1992.951835][ T5536] ? rw_verify_area+0xcf/0x6c0 [ 1992.951862][ T5536] ? __pfx_vga_arb_write+0x10/0x10 [ 1992.951878][ T5536] vfs_write+0x2a0/0x11d0 [ 1992.951910][ T5536] ? __pfx_vfs_write+0x10/0x10 [ 1992.951935][ T5536] ? find_held_lock+0x2b/0x80 [ 1992.951955][ T5536] ? __fget_files+0x204/0x3c0 [ 1992.951978][ T5536] ? __fget_files+0x20e/0x3c0 [ 1992.952003][ T5536] ksys_write+0x12a/0x250 [ 1992.952029][ T5536] ? __pfx_ksys_write+0x10/0x10 [ 1992.952063][ T5536] do_syscall_64+0xcd/0xf80 [ 1992.952091][ T5536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.952111][ T5536] RIP: 0033:0x7f39c3b8f749 [ 1992.952127][ T5536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1992.952144][ T5536] RSP: 002b:00007f39c4b0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1992.952163][ T5536] RAX: ffffffffffffffda RBX: 00007f39c3de5fa0 RCX: 00007f39c3b8f749 [ 1992.952175][ T5536] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000003 [ 1992.952186][ T5536] RBP: 00007f39c4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1992.952196][ T5536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1992.952207][ T5536] R13: 00007f39c3de6038 R14: 00007f39c3de5fa0 R15: 00007fffc6537fc8 [ 1992.952233][ T5536] [ 1993.669078][ T5535] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1995.196527][ T5558] IPv6: sit1: Disabled Multicast RS [ 1995.205439][ T5558] sit1: entered allmulticast mode [ 1995.471757][ T8773] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1995.646571][ T8773] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1995.677891][ T8773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.697128][ T8773] usb 6-1: config 0 descriptor?? [ 1995.742761][ T8773] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1996.323205][ T8773] gspca_sunplus: reg_w_riv err -110 [ 1996.348289][ T8773] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1996.441699][ T5573] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1996.724326][ T5587] FAULT_INJECTION: forcing a failure. [ 1996.724326][ T5587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1996.777972][ T5587] CPU: 0 UID: 0 PID: 5587 Comm: syz.4.8028 Not tainted syzkaller #0 PREEMPT(full) [ 1996.778001][ T5587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1996.778012][ T5587] Call Trace: [ 1996.778019][ T5587] [ 1996.778027][ T5587] dump_stack_lvl+0x16c/0x1f0 [ 1996.778057][ T5587] should_fail_ex+0x512/0x640 [ 1996.778085][ T5587] _copy_to_user+0x32/0xd0 [ 1996.778111][ T5587] simple_read_from_buffer+0xcb/0x170 [ 1996.778141][ T5587] proc_fail_nth_read+0x197/0x240 [ 1996.778165][ T5587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1996.778190][ T5587] ? rw_verify_area+0xcf/0x6c0 [ 1996.778226][ T5587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1996.778250][ T5587] vfs_read+0x1e4/0xcf0 [ 1996.778277][ T5587] ? __pfx___mutex_lock+0x10/0x10 [ 1996.778314][ T5587] ? __pfx_vfs_read+0x10/0x10 [ 1996.778350][ T5587] ? __fget_files+0x20e/0x3c0 [ 1996.778378][ T5587] ksys_read+0x12a/0x250 [ 1996.778403][ T5587] ? __pfx_ksys_read+0x10/0x10 [ 1996.778436][ T5587] do_syscall_64+0xcd/0xf80 [ 1996.778466][ T5587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1996.778486][ T5587] RIP: 0033:0x7ff77358e15c [ 1996.778501][ T5587] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1996.778519][ T5587] RSP: 002b:00007ff774426030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1996.778538][ T5587] RAX: ffffffffffffffda RBX: 00007ff7737e5fa0 RCX: 00007ff77358e15c [ 1996.778550][ T5587] RDX: 000000000000000f RSI: 00007ff7744260a0 RDI: 0000000000000004 [ 1996.778561][ T5587] RBP: 00007ff774426090 R08: 0000000000000000 R09: 0000000000000000 [ 1996.778572][ T5587] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000001 [ 1996.778583][ T5587] R13: 00007ff7737e6038 R14: 00007ff7737e5fa0 R15: 00007fff9e089648 [ 1996.778610][ T5587] [ 1997.174611][ T5592] sctp: [Deprecated]: syz.4.8030 (pid 5592) Use of int in max_burst socket option. [ 1997.174611][ T5592] Use struct sctp_assoc_value instead [ 1997.237849][ T30] audit: type=1400 audit(1903.984:1875): avc: denied { map } for pid=5591 comm="syz.4.8030" path="pipe:[158386]" dev="pipefs" ino=158386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1997.296669][ T30] audit: type=1400 audit(1904.021:1876): avc: denied { execute } for pid=5591 comm="syz.4.8030" path="pipe:[158386]" dev="pipefs" ino=158386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1997.329204][ T30] audit: type=1400 audit(1904.021:1877): avc: denied { ioctl } for pid=5591 comm="syz.4.8030" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1997.359857][ T30] audit: type=1400 audit(1904.021:1878): avc: denied { setattr } for pid=5591 comm="syz.4.8030" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1997.986090][T28161] usb 6-1: USB disconnect, device number 28 [ 1998.159694][ T5599] FAULT_INJECTION: forcing a failure. [ 1998.159694][ T5599] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.202553][ T5599] CPU: 1 UID: 0 PID: 5599 Comm: syz.5.8032 Not tainted syzkaller #0 PREEMPT(full) [ 1998.202581][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1998.202592][ T5599] Call Trace: [ 1998.202598][ T5599] [ 1998.202606][ T5599] dump_stack_lvl+0x16c/0x1f0 [ 1998.202639][ T5599] should_fail_ex+0x512/0x640 [ 1998.202663][ T5599] ? kmem_cache_alloc_noprof+0x62/0x760 [ 1998.202687][ T5599] should_failslab+0xc2/0x120 [ 1998.202715][ T5599] kmem_cache_alloc_noprof+0x75/0x760 [ 1998.202735][ T5599] ? __pmd_alloc+0xbf/0x8b0 [ 1998.202765][ T5599] ? __pmd_alloc+0xbf/0x8b0 [ 1998.202787][ T5599] __pmd_alloc+0xbf/0x8b0 [ 1998.202810][ T5599] ? __pud_alloc+0x4fe/0x640 [ 1998.202835][ T5599] __handle_mm_fault+0xa77/0x2ad0 [ 1998.202858][ T5599] ? __pfx___handle_mm_fault+0x10/0x10 [ 1998.202890][ T5599] ? find_vma+0xbf/0x140 [ 1998.202911][ T5599] ? __pfx_find_vma+0x10/0x10 [ 1998.202935][ T5599] handle_mm_fault+0x3fe/0xad0 [ 1998.202956][ T5599] do_user_addr_fault+0x2e4/0xda0 [ 1998.202979][ T5599] ? rcu_is_watching+0x12/0xc0 [ 1998.203002][ T5599] exc_page_fault+0x64/0xc0 [ 1998.203025][ T5599] asm_exc_page_fault+0x26/0x30 [ 1998.203042][ T5599] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1998.203063][ T5599] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 77 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1998.203079][ T5599] RSP: 0018:ffffc90004287ae8 EFLAGS: 00050202 [ 1998.203094][ T5599] RAX: 0000000000000001 RBX: 0000200000000640 RCX: 0000000000000050 [ 1998.203106][ T5599] RDX: fffff52000850fa0 RSI: 0000200000000640 RDI: ffffc90004287cb0 [ 1998.203118][ T5599] RBP: 0000000000000050 R08: 0000000000000001 R09: fffff52000850f9f [ 1998.203128][ T5599] R10: ffffc90004287cff R11: 00000000ffffffff R12: 0000000000000000 [ 1998.203139][ T5599] R13: ffffc90004287cb0 R14: 0000200000000640 R15: 0000000000000001 [ 1998.203164][ T5599] _copy_from_user+0x98/0xd0 [ 1998.203191][ T5599] do_arpt_set_ctl+0xb5b/0x1060 [ 1998.203214][ T5599] ? __pfx___might_resched+0x10/0x10 [ 1998.203236][ T5599] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1998.203256][ T5599] ? trace_contention_end+0xdd/0x110 [ 1998.203280][ T5599] ? __mutex_lock+0x27b/0x1b10 [ 1998.203305][ T5599] ? find_held_lock+0x2b/0x80 [ 1998.203323][ T5599] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1998.203349][ T5599] ? sockopt_release_sock+0x52/0x60 [ 1998.203370][ T5599] ? __mutex_unlock_slowpath+0x161/0x790 [ 1998.203397][ T5599] ? sockopt_release_sock+0x52/0x60 [ 1998.203414][ T5599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1998.203454][ T5599] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1998.203482][ T5599] nf_setsockopt+0x8d/0xf0 [ 1998.203522][ T5599] ip_setsockopt+0xcb/0xf0 [ 1998.203543][ T5599] udp_setsockopt+0x7d/0xd0 [ 1998.203569][ T5599] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1998.203593][ T5599] do_sock_setsockopt+0xf3/0x1d0 [ 1998.203617][ T5599] __sys_setsockopt+0x1a0/0x230 [ 1998.203649][ T5599] __x64_sys_setsockopt+0xbd/0x160 [ 1998.203675][ T5599] ? do_syscall_64+0x91/0xf80 [ 1998.203700][ T5599] ? lockdep_hardirqs_on+0x7c/0x110 [ 1998.203725][ T5599] do_syscall_64+0xcd/0xf80 [ 1998.203753][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1998.203772][ T5599] RIP: 0033:0x7f39c3b8f749 [ 1998.203788][ T5599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1998.203805][ T5599] RSP: 002b:00007f39c4b0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1998.203822][ T5599] RAX: ffffffffffffffda RBX: 00007f39c3de5fa0 RCX: 00007f39c3b8f749 [ 1998.203834][ T5599] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 1998.203845][ T5599] RBP: 00007f39c4b0e090 R08: 0000000000000430 R09: 0000000000000000 [ 1998.203854][ T5599] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 1998.203864][ T5599] R13: 00007f39c3de6038 R14: 00007f39c3de5fa0 R15: 00007fffc6537fc8 [ 1998.203888][ T5599] [ 2000.346188][ T5634] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 2000.805572][ T5635] netlink: 'syz.7.8039': attribute type 4 has an invalid length. [ 2000.821870][ T5635] netlink: 'syz.7.8039': attribute type 4 has an invalid length. [ 2003.126429][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2003.420949][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2003.507600][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.610594][ T5676] FAULT_INJECTION: forcing a failure. [ 2003.610594][ T5676] name failslab, interval 1, probability 0, space 0, times 0 [ 2003.633494][ T5676] CPU: 0 UID: 0 PID: 5676 Comm: syz.9.8052 Not tainted syzkaller #0 PREEMPT(full) [ 2003.633519][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2003.633530][ T5676] Call Trace: [ 2003.633535][ T5676] [ 2003.633541][ T5676] dump_stack_lvl+0x16c/0x1f0 [ 2003.633563][ T5676] should_fail_ex+0x512/0x640 [ 2003.633578][ T5676] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 2003.633595][ T5676] should_failslab+0xc2/0x120 [ 2003.633611][ T5676] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 2003.633625][ T5676] ? proc_alloc_inode+0x25/0x200 [ 2003.633643][ T5676] ? __pfx_proc_alloc_inode+0x10/0x10 [ 2003.633658][ T5676] ? proc_alloc_inode+0x25/0x200 [ 2003.633673][ T5676] proc_alloc_inode+0x25/0x200 [ 2003.633689][ T5676] alloc_inode+0x64/0x240 [ 2003.633703][ T5676] new_inode+0x22/0x1c0 [ 2003.633718][ T5676] proc_pid_make_inode+0x22/0x160 [ 2003.633735][ T5676] proc_ns_instantiate+0x57/0x100 [ 2003.633751][ T5676] proc_fill_cache+0x361/0x470 [ 2003.633767][ T5676] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 2003.633783][ T5676] ? __pfx_proc_fill_cache+0x10/0x10 [ 2003.633798][ T5676] ? __lock_acquire+0x433/0x22f0 [ 2003.633827][ T5676] proc_ns_dir_readdir+0x1ba/0x520 [ 2003.633845][ T5676] iterate_dir+0x296/0xaf0 [ 2003.633862][ T5676] __x64_sys_getdents64+0x13c/0x2c0 [ 2003.633879][ T5676] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 2003.633894][ T5676] ? fput+0x70/0xf0 [ 2003.633905][ T5676] ? __pfx_filldir64+0x10/0x10 [ 2003.633925][ T5676] do_syscall_64+0xcd/0xf80 [ 2003.633942][ T5676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.633953][ T5676] RIP: 0033:0x7fd8cb38f749 [ 2003.633963][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2003.633974][ T5676] RSP: 002b:00007fd8cc1d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 2003.633986][ T5676] RAX: ffffffffffffffda RBX: 00007fd8cb5e6090 RCX: 00007fd8cb38f749 [ 2003.633993][ T5676] RDX: 0000000000001000 RSI: 00002000000008c0 RDI: 0000000000000008 [ 2003.633999][ T5676] RBP: 00007fd8cc1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 2003.634006][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2003.634012][ T5676] R13: 00007fd8cb5e6128 R14: 00007fd8cb5e6090 R15: 00007ffe6ae49c78 [ 2003.634027][ T5676] [ 2004.371197][ T10] usb 6-1: config 0 descriptor?? [ 2004.386637][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2004.702080][ T5684] netlink: 'syz.9.8054': attribute type 4 has an invalid length. [ 2004.722307][ T5684] netlink: 'syz.9.8054': attribute type 4 has an invalid length. [ 2005.665243][ T10] gspca_sunplus: reg_w_riv err -110 [ 2005.679710][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 2007.314518][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8060'. [ 2007.345145][ T5706] veth0_macvtap: left promiscuous mode [ 2007.501734][ T10] usb 6-1: USB disconnect, device number 29 [ 2007.628988][ T5708] tipc: New replicast peer: 255.255.255.255 [ 2007.667038][ T5708] tipc: Enabled bearer , priority 7 [ 2007.701719][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8061'. [ 2007.710703][ T5711] tipc: Disabling bearer [ 2007.739257][ T30] audit: type=1400 audit(1913.815:1879): avc: denied { accept } for pid=5707 comm="syz.4.8061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2007.781360][ T5708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2008.520731][ T30] audit: type=1400 audit(1914.498:1880): avc: denied { lock } for pid=5715 comm="syz.7.8064" path="socket:[158686]" dev="sockfs" ino=158686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2009.898139][ T5736] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 2010.083555][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8068'. [ 2010.093820][ T5729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5729 comm=syz.9.8068 [ 2010.106277][ T5729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5729 comm=syz.9.8068 [ 2011.714619][ T5753] netlink: 'syz.8.8073': attribute type 4 has an invalid length. [ 2011.747439][ T5753] netlink: 'syz.8.8073': attribute type 4 has an invalid length. [ 2012.044636][ T5756] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 2012.570741][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8077'. [ 2012.623154][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8077'. [ 2014.483172][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2014.498133][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2014.559013][ T5789] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8084'. [ 2014.569595][ T5789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5789 comm=syz.7.8084 [ 2014.582107][ T5789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5789 comm=syz.7.8084 [ 2015.877139][ T5810] netlink: 'syz.8.8089': attribute type 12 has an invalid length. [ 2015.901862][ T5810] netlink: 'syz.8.8089': attribute type 29 has an invalid length. [ 2015.935859][ T5810] netlink: 148 bytes leftover after parsing attributes in process `syz.8.8089'. [ 2015.952456][ T5810] netlink: 59 bytes leftover after parsing attributes in process `syz.8.8089'. [ 2016.405004][ T5816] Invalid ELF header magic: != ELF [ 2016.459322][ T30] audit: type=1400 audit(1921.701:1881): avc: denied { module_load } for pid=5811 comm="syz.5.8090" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=160912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 2016.715781][ T5822] FAULT_INJECTION: forcing a failure. [ 2016.715781][ T5822] name failslab, interval 1, probability 0, space 0, times 0 [ 2016.729362][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.8.8092 Not tainted syzkaller #0 PREEMPT(full) [ 2016.729388][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2016.729398][ T5822] Call Trace: [ 2016.729405][ T5822] [ 2016.729412][ T5822] dump_stack_lvl+0x16c/0x1f0 [ 2016.729442][ T5822] should_fail_ex+0x512/0x640 [ 2016.729464][ T5822] ? fs_reclaim_acquire+0xae/0x150 [ 2016.729492][ T5822] should_failslab+0xc2/0x120 [ 2016.729518][ T5822] kmem_cache_alloc_noprof+0x75/0x760 [ 2016.729538][ T5822] ? __pfx_map_id_range_down+0x10/0x10 [ 2016.729559][ T5822] ? security_inode_alloc+0x3b/0x2b0 [ 2016.729583][ T5822] ? security_inode_alloc+0x3b/0x2b0 [ 2016.729602][ T5822] security_inode_alloc+0x3b/0x2b0 [ 2016.729622][ T5822] inode_init_always_gfp+0xced/0x1040 [ 2016.729643][ T5822] alloc_inode+0x86/0x240 [ 2016.729667][ T5822] sock_alloc+0x40/0x280 [ 2016.729688][ T5822] __sock_create+0xc2/0x8a0 [ 2016.729716][ T5822] udp_sock_create4+0xa6/0x450 [ 2016.729741][ T5822] ? __pfx_udp_sock_create4+0x10/0x10 [ 2016.729767][ T5822] ? lockdep_hardirqs_on+0x7c/0x110 [ 2016.729793][ T5822] ? crng_make_state+0x48e/0x6c0 [ 2016.729818][ T5822] rxrpc_open_socket+0x4f5/0x6b0 [ 2016.729848][ T5822] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 2016.729890][ T5822] ? rcu_is_watching+0x12/0xc0 [ 2016.729915][ T5822] rxrpc_lookup_local+0xa01/0x1220 [ 2016.729937][ T5822] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 2016.729958][ T5822] ? __local_bh_enable_ip+0xa4/0x120 [ 2016.729990][ T5822] rxrpc_sendmsg+0x37e/0x680 [ 2016.730015][ T5822] ____sys_sendmsg+0xa5d/0xc30 [ 2016.730039][ T5822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2016.730059][ T5822] ? __lock_acquire+0x433/0x22f0 [ 2016.730095][ T5822] ___sys_sendmsg+0x134/0x1d0 [ 2016.730114][ T5822] ? __pfx____sys_sendmsg+0x10/0x10 [ 2016.730130][ T5822] ? __lock_acquire+0x433/0x22f0 [ 2016.730184][ T5822] __sys_sendmsg+0x16d/0x220 [ 2016.730203][ T5822] ? __pfx___sys_sendmsg+0x10/0x10 [ 2016.730238][ T5822] do_syscall_64+0xcd/0xf80 [ 2016.730271][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.730290][ T5822] RIP: 0033:0x7f044358f749 [ 2016.730305][ T5822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2016.730325][ T5822] RSP: 002b:00007f04443ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2016.730343][ T5822] RAX: ffffffffffffffda RBX: 00007f04437e6090 RCX: 00007f044358f749 [ 2016.730355][ T5822] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000005 [ 2016.730366][ T5822] RBP: 00007f04443ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2016.730378][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.730389][ T5822] R13: 00007f04437e6128 R14: 00007f04437e6090 R15: 00007ffd0d61abc8 [ 2016.730416][ T5822] [ 2016.730575][ T5822] socket: no more sockets [ 2017.322472][ T5827] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2017.661226][ T5834] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 2017.744645][ T6049] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2018.104464][ T6049] usb 6-1: Using ep0 maxpacket: 8 [ 2018.125618][ T6049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2018.146882][ T6049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2018.147471][ T5836] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8095'. [ 2018.291353][ T5836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5836 comm=syz.7.8095 [ 2018.303844][ T5836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5836 comm=syz.7.8095 [ 2018.414315][ T6049] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2018.424047][ T6049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2018.463429][ T6049] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2018.510150][ T6049] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2018.548963][ T6049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.576553][ T6049] usb 6-1: config 0 descriptor?? [ 2018.605195][ T5831] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2018.876846][ T1894] Bluetooth: hci2: unexpected event 0x20 length: 0 < 7 [ 2018.884678][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2018.891587][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2018.898926][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2018.906135][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2018.913402][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2018.920407][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2018.928135][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2018.935048][ T1894] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2019.095682][ T868] usb 6-1: USB disconnect, device number 30 [ 2019.114856][T22977] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 2019.506906][ T5868] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 2020.333902][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8108'. [ 2020.343454][ T5872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5872 comm=syz.9.8108 [ 2020.355921][ T5872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5872 comm=syz.9.8108 [ 2023.994029][ T5820] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2024.191709][ T5820] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2024.221116][ T5820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.312121][ T5820] usb 9-1: config 0 descriptor?? [ 2024.353148][ T5820] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2024.675447][ T5906] IPv6: sit1: Disabled Multicast RS [ 2024.913433][ T5906] sit1: entered allmulticast mode [ 2025.224918][ T5820] gspca_sunplus: reg_w_riv err -110 [ 2025.268558][ T5820] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 2025.325495][ T5936] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2025.332033][ T5936] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2025.389561][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8124'. [ 2025.401089][ T5936] vhci_hcd vhci_hcd.0: Device attached [ 2025.434090][ T5938] vhci_hcd: connection closed [ 2025.435398][T31750] vhci_hcd: stop threads [ 2025.483163][T31750] vhci_hcd: release socket [ 2025.510736][T31750] vhci_hcd: disconnect device [ 2027.458273][T25537] usb 9-1: USB disconnect, device number 27 [ 2027.634043][ T5964] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 2029.714563][ T6005] overlayfs: failed to clone upperpath [ 2030.344296][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 2030.376347][ T31] Not tainted syzkaller #0 [ 2030.381327][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2030.407212][ T31] task:kworker/u8:2 state:D stack:23560 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2030.419763][ T31] Workqueue: netns cleanup_net [ 2030.424553][ T31] Call Trace: [ 2030.427834][ T31] [ 2030.431359][ T31] ? __schedule+0x10b9/0x6150 [ 2030.437051][ T31] __schedule+0x1139/0x6150 [ 2030.442324][ T31] ? __pfx___schedule+0x10/0x10 [ 2030.447202][ T31] ? find_held_lock+0x2b/0x80 [ 2030.453272][ T31] ? schedule+0x2d7/0x3a0 [ 2030.457626][ T31] schedule+0xe7/0x3a0 [ 2030.461705][ T31] afs_cell_purge+0x41f/0x4f0 [ 2030.466799][ T31] ? __try_to_del_timer_sync+0x110/0x170 [ 2030.473704][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 2030.478979][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 2030.484763][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 2030.490399][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 2030.496999][ T31] afs_net_exit+0x83/0x140 [ 2030.502201][ T31] ops_undo_list+0x2ee/0xab0 [ 2030.519899][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 2030.533490][ T31] ? cleanup_net+0x347/0x830 [ 2030.538584][ T31] ? idr_destroy+0x62/0x2e0 [ 2030.544406][ T31] cleanup_net+0x41b/0x830 [ 2030.549664][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 2030.559121][ T31] ? rcu_is_watching+0x12/0xc0 [ 2030.568978][ T31] process_one_work+0x9ba/0x1b20 [ 2030.573949][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2030.591966][ T31] ? assign_work+0x1a0/0x250 [ 2030.596646][ T31] worker_thread+0x6c8/0xf10 [ 2030.604024][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2030.609167][ T31] kthread+0x3c5/0x780 [ 2030.613622][ T31] ? __pfx_kthread+0x10/0x10 [ 2030.618229][ T31] ? rcu_is_watching+0x12/0xc0 [ 2030.623403][ T31] ? __pfx_kthread+0x10/0x10 [ 2030.628056][ T31] ret_from_fork+0x983/0xb10 [ 2030.632657][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2030.643732][ T31] ? __switch_to+0x7af/0x10d0 [ 2030.648443][ T31] ? __pfx_kthread+0x10/0x10 [ 2030.664945][ T31] ret_from_fork_asm+0x1a/0x30 [ 2030.675839][ T31] [ 2030.679674][ T31] [ 2030.679674][ T31] Showing all locks held in the system: [ 2030.704890][ T31] 1 lock held by khungtaskd/31: [ 2030.712458][ T31] #0: ffffffff8e3c92c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2030.732749][ T31] 3 locks held by kworker/u8:2/36: [ 2030.743781][ T31] #0: ffff88801bad4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 2030.766425][ T31] #1: ffffc90000ac7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 2030.788059][ T31] #2: ffffffff90105330 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 2030.806096][ T31] 2 locks held by getty/5578: [ 2030.810807][ T31] #0: ffff8880367650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2030.836320][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2030.846519][ T31] 3 locks held by syz.4.8142/6001: [ 2030.860066][ T31] 2 locks held by syz.9.8145/6017: [ 2030.868327][ T31] #0: ffff8880506520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2030.881730][ T31] #1: ffff888050652130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write.constprop.0+0x283/0x9b0 [ 2030.893165][ T31] [ 2030.895486][ T31] ============================================= [ 2030.895486][ T31] [ 2030.904677][ T31] NMI backtrace for cpu 1 [ 2030.904692][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2030.904713][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2030.904724][ T31] Call Trace: [ 2030.904731][ T31] [ 2030.904738][ T31] dump_stack_lvl+0x116/0x1f0 [ 2030.904768][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2030.904790][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2030.904811][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2030.904832][ T31] watchdog+0xf14/0x1140 [ 2030.904858][ T31] ? rcu_is_watching+0x12/0xc0 [ 2030.904879][ T31] ? __pfx_watchdog+0x10/0x10 [ 2030.904898][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2030.904926][ T31] ? __kthread_parkme+0x19e/0x250 [ 2030.904947][ T31] ? __pfx_watchdog+0x10/0x10 [ 2030.904969][ T31] kthread+0x3c5/0x780 [ 2030.904992][ T31] ? __pfx_kthread+0x10/0x10 [ 2030.905017][ T31] ? rcu_is_watching+0x12/0xc0 [ 2030.905038][ T31] ? __pfx_kthread+0x10/0x10 [ 2030.905063][ T31] ret_from_fork+0x983/0xb10 [ 2030.905090][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2030.905111][ T31] ? __switch_to+0x7af/0x10d0 [ 2030.905132][ T31] ? __pfx_kthread+0x10/0x10 [ 2030.905155][ T31] ret_from_fork_asm+0x1a/0x30 [ 2030.905194][ T31] [ 2030.905200][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2031.036951][ C0] NMI backtrace for cpu 0 [ 2031.036967][ C0] CPU: 0 UID: 0 PID: 6021 Comm: syz.7.8146 Not tainted syzkaller #0 PREEMPT(full) [ 2031.036984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2031.036993][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 2031.037012][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 3b a5 c5 f5 cc [ 2031.037026][ C0] RSP: 0018:ffffc90005b9f788 EFLAGS: 00000246 [ 2031.037038][ C0] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90010beb000 [ 2031.037048][ C0] RDX: 0000000000080000 RSI: ffffffff892fc255 RDI: 0000000000000001 [ 2031.037057][ C0] RBP: ffff88806c4dd4c0 R08: 0000000000000001 R09: 0000000000000000 [ 2031.037065][ C0] R10: 0000000000000000 R11: 0000000070dbee1e R12: 0000000000000000 [ 2031.037077][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2031.037086][ C0] FS: 00007fa8cfde86c0(0000) GS:ffff88812497e000(0000) knlGS:0000000000000000 [ 2031.037101][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2031.037111][ C0] CR2: 000000110c27b153 CR3: 000000007edc5000 CR4: 00000000003526f0 [ 2031.037120][ C0] Call Trace: [ 2031.037127][ C0] [ 2031.037132][ C0] __skb_datagram_iter+0x655/0x900 [ 2031.037153][ C0] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2031.037172][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 2031.037193][ C0] skb_copy_datagram_iter+0xa6/0x220 [ 2031.037211][ C0] __unix_dgram_recvmsg+0x446/0xc30 [ 2031.037228][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 2031.037242][ C0] ? __lock_acquire+0x433/0x22f0 [ 2031.037264][ C0] ? iovec_from_user+0xbb/0x140 [ 2031.037284][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 2031.037297][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 2031.037316][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2031.037336][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 2031.037355][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2031.037375][ C0] ___sys_recvmsg+0x114/0x1a0 [ 2031.037389][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 2031.037407][ C0] ? __pfx___might_resched+0x10/0x10 [ 2031.037424][ C0] do_recvmmsg+0x2fe/0x750 [ 2031.037438][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 2031.037453][ C0] ? do_futex+0x122/0x350 [ 2031.037477][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 2031.037498][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 2031.037512][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2031.037529][ C0] do_syscall_64+0xcd/0xf80 [ 2031.037548][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.037562][ C0] RIP: 0033:0x7fa8cef8f749 [ 2031.037572][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2031.037585][ C0] RSP: 002b:00007fa8cfde8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2031.037598][ C0] RAX: ffffffffffffffda RBX: 00007fa8cf1e6180 RCX: 00007fa8cef8f749 [ 2031.037607][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2031.037615][ C0] RBP: 00007fa8cf013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2031.037624][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2031.037632][ C0] R13: 00007fa8cf1e6218 R14: 00007fa8cf1e6180 R15: 00007fff0dc77838 [ 2031.037647][ C0]