last executing test programs: 56m27.575644934s ago: executing program 32 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000980)="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", 0x1c1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, 0x0) 42m55.176389396s ago: executing program 0 (id=1973): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendfile(r0, r2, 0x0, 0x8) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000004009a64080004003a010000140003006272696467655f736c6176655f310000"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 42m53.88375155s ago: executing program 0 (id=1975): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000000c001700040004"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 42m52.626980948s ago: executing program 0 (id=1979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x7}, 0x94) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 42m52.324203594s ago: executing program 0 (id=1983): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0xc94}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/209, 0xd1}, {0x0}, {&(0x7f0000003e00)=""/4114, 0x1012}, {&(0x7f00000003c0)=""/209, 0xd1}], 0x4}, 0x10000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0xd}], 0x8, 0x40010042, 0x0) 42m50.886817111s ago: executing program 0 (id=1986): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) 42m48.96698746s ago: executing program 0 (id=1990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 42m35.093310178s ago: executing program 33 (id=1989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 42m33.069985062s ago: executing program 34 (id=1990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 38m44.976819963s ago: executing program 3 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c5}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x7}, 0x94) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 38m43.748128009s ago: executing program 3 (id=2555): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) 38m42.501186877s ago: executing program 3 (id=2557): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000004c0)={[{@utf8}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@unhide}, {@noadinicb}, {@nostrict}, {@uid_forget}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) rmdir(&(0x7f0000000340)='./bus/file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./bus\x00') 38m41.223082481s ago: executing program 3 (id=2560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc38, &(0x7f0000000c80)="$eJzs3V1oXOl5B/DnnSNZI22aaLOJN2mz6UBKYpTa+Cu2gkuQs4ragOMNkRW6V9How86w8shIcuNN26C2pIXeLN2b0psimi4t5KJX3V5WabaQUAolBJpeFARNlr3ohS4ChZaNypl5RxrZsi2vra/d32+Z/c+cec7o/RifOQK9cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPj8Fy6fPpMiXjnohgAA++bq+FdOn0sH3QoAYD9dy7//AwAAAAAAAAAAAAAAh1aKIo5HioHX19Nk63Fb9UqjefvOxOjYzrv1p0hRiaJVX96qZ86eO/+ZCxeHO/ng/Z+0j8YL49cu156fv3lrYXZxcXamNtFsTM/PzO76FR53/7sNtQagdvOl2zPXry/Wzp46t+3pO4Nv9j11fPDSxZMXhju1E6NjY+NdNT297/in3+N+KzyORRH1SPH24FupHhGVePyxeMh7Z6/1tzox1OrExOhYqyNzjXpzqXwyVXJVJaLWtdNIZ4z2YS4ey0jEctn8ssFDZffGb9UX6lNzs7Uv1xeWGkuN+WaqtFtb9qcWlRhOESsRsdZ378v1RhEfjxSvnl5PUxFRdMbh062FwQ9vT2UP+rgLZTtrvRErlSMwZ4dYXxRxNVL8/I0TMV2OWb7FJyO+VObrEa+V+bmIVL4xzkf8bIf3EUdTTxTxr5FiPq2nmdbxoHNcufLV2heb1+e7ajvHlSP/+bCfDvmxqRpFTLWO+OvpnZ/sAAAAAAAAAAAAAAAAAPCk9UcR34kUf/Tc77TWFUdrXfoHLg2/78Xf7F4z/uxDXqesPRURy5XdrcntzUuHU6X8bw86xq5Uo4hv5fV/f3DQjQEAAAAAAAAAAAAAAAAAAHhPK+LFSPG1kyfSSnRfU7zRvFG7Vp+aa18VtnPt38410zc2NjZqqZ0jOSdzLudcybmacy1nVPL+OUdyTuZczrmSczXnWs4o8v45R3JO5lzOuZJzNedazujJ++ccyTmZcznnSs7VnGs545BcuxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4N2kEkX8IlK88o31FCkiRiImo52rfQfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVE1FnIoUqy9WW49XKhHXIuIXGxsbnVtErJf5uA66rwAAAAAAAAAAAAAAAAAAAHBopSI+ESme+d/1VIuIO4Nv9j11fPDSxZMXhosoIpUl3fUvjF+7XHt+/uathdnFxdmZ2kSzMT0/M7vbH1e90mjevjMxOrYnnXmo/j1uf3/1+flbLy80bnx9acfnB6qXpxaXFurTOz8d/VGJmOzeMtRq8MToWKvRc416s7VrqtyngZWIkd12BgAAAAAAAAAAAAAAAAAAgENjIBXxhUjx0/88nzrrxnvaa/5/qf2o2Kx97fe2vgtg7q7s6P7+gN3cT7tt6FBr4X1tYnRsbLxrc0/vvaVlm1Iq4tlI8alXP9JaD59iYMe18WXd+8u6m+dz3eCvlHXL26qqQxOjY7Wr882Tl+fm5qfrS/Wpudna+K369E5fHLBDkwAAAAAAAAAAAAAAAAAAAOCBBlIRP44U//23/5Y6153P6/972o+61v//RmsJfUs1bc9NrbX972+t7W/f/8Cl4YGPP3e/7Xux/r9sU0pFfDtSnPvxR1rX0++s/5+8q7as+5NI8dZzH8t1lWNlXb3TnfYrXm/MzZ4ua/8yUvzq253aaNXeyLXPbNWeKWv7I8Wfr2+v/Xqu/dBW7dmy9kSk+P5/7Vz74a3ac2XtTyPFP/xNrVM7UNb+bq49vlV7anp+buZhw1rO/3cjxV9f/a3U6fN957/r+x+W78pN98z5g+8/qfkf7Nq2nOf1j/P81zvz/+9Xdpz/C5Hiu9WP5br22E/l559u/X9r/j8VKf7jX7bXXs+1H9yqPbPbbh20cv6/Eym+9xc/2exznv88slsz1D3/v9yzPTffJY8w//1PcP6f7to2mNs1/Yhj8V60+PI3X6rPzc0uvEfvVO/eciwiDkPD3HHnQO8c9JGJ/VB+/v9ppPi/40XqnMfkz//3tR9tnf/9z7e2Pv8v3ZWb9vX8b+Opzuf/B7tKL+Wzlt6eiOrSzVu9z0ZUF1/+5snGzfqN2RuzzbNnTn/2sxfOnD5zofdY5+Ru694jjN7RV87/DyPFj/7uR5u/x2w//9v5/H/grtx0QOf/z3T3adt5za6H4j2pnP+/ihRPf/4nm79vPuj8v/P7/4lPbM/Nf38HNP8f6to2mNvVeMSxAAAAAAAAAAAAOEoGUhF/Fil++w9/PXXWEO3m7/9m7spNB/T3X8e7ts3s07qGXQ8yAMAhUp7/fThS/OPGDzbXcm8//4tf69R2n//dz2G4/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABx1KYr4/Ugx8Pp6Wu0rH7dVrzSat+9MjI7tvFt/ihSVKFr15a165uy585+5cHG4kw/e/0n7aLwwfu1y7fn5m7cWZhcXZ2dqE83G9PzMbH7+2ENf4cH7P7qh1gDUbr50e+b69cXa2VPntj19Z/DNvqeOD166ePLCcKd2YnRsbLyrpqf3Hf/0e6T7bD8WRfwgUrw9+Fb6Xl9EJR5/LB7y3tlr/a1ODLU6MTE61urIXKPeXCqfTJVcVYmode000hmjfZiLxzISsVw2v2zwUNm98Vv1hfrU3Gzty/WFpcZSY76ZKu3Wlv2pRSWGU8RKRKz13ftyvVHEtyPFq6fX0z/1RRSdcfj01fGvnD738PZU9qCPu1C2s9YbsVI5AnN2iPVFEX8fKX7+xon4fl9ET7Rv8cmIL5X5esRrZX4uIpVvjPMRP9vhfcTR1BNFnI8U82k9vdFXHg86x5UrX619sXl9vqu2c1w58p8P+2nHY1NxaI5N1Sjih60j/nr6Z/+uAQAAAAAAAAAAAAAAAA6RIlYixddOnkit9cGba4obzRu1a/Wpufayvs7av86a6Y2NjY1aaudIzsmcyzlXcq7mXMsZlbx/zpGckzmXc67kXM25ljOKvH/OkZyTOZdzruRczbmWM3ry/jlHck62s6fTxZW8fTXnWs44JGv3AAAAAAAAAAAAAAAAAACAd5dKFK2ruL/yjfW00de+vvRktHPV9UDf9f4/AAD//9ogcR0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x4}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 38m40.124369902s ago: executing program 3 (id=2563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000000)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0xf, 0x0, 0x0, 0x13, 0x0, 0x6}]}}, &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x0, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) 38m36.05564276s ago: executing program 3 (id=2570): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f3000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f3000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x1a, 0x2, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r3, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00X']) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 35m5.378635703s ago: executing program 4 (id=2960): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 35m3.805179306s ago: executing program 4 (id=2966): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 35m1.852061542s ago: executing program 4 (id=2969): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x8) 34m57.414500129s ago: executing program 4 (id=2972): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r3, 0x307, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x20004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) read$snddsp(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 34m53.802565232s ago: executing program 4 (id=2980): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 34m38.273296289s ago: executing program 36 (id=2980): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 8m39.770253793s ago: executing program 6 (id=7059): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25", 0x9a}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8m34.858204903s ago: executing program 6 (id=7066): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x9c, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 8m33.893375212s ago: executing program 6 (id=7067): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 8m32.676017831s ago: executing program 6 (id=7070): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) 8m32.614339488s ago: executing program 2 (id=7071): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 8m32.607289893s ago: executing program 6 (id=7072): io_setup(0x200, &(0x7f0000000140)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000580)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x7ff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8000) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x0, {0x2b, 0x0, 0x56, 0x0, 0x40}}) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r2, &(0x7f0000000380)='\\', 0x1, 0x3000}]) 8m32.102004864s ago: executing program 2 (id=7074): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 8m31.530966104s ago: executing program 2 (id=7076): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x40000) 8m31.385784965s ago: executing program 2 (id=7078): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000000c001700040004"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e00", 0xc, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m30.265395279s ago: executing program 2 (id=7080): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 8m28.452412238s ago: executing program 2 (id=7082): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 8m28.3731601s ago: executing program 6 (id=7083): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c64", 0x1e, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m12.928962113s ago: executing program 37 (id=7083): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c64", 0x1e, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m12.856977062s ago: executing program 38 (id=7082): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 10.68420786s ago: executing program 8 (id=8736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 10.474906355s ago: executing program 8 (id=8739): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000071101a00000000009500000000000000e81872a49f3abe26ae8077dace533dbc76382acbe78bcb13d488839dbfc473c5e44c52275a5c1079f799950e8e32bcdea50f7c0ea807d5c32802a657e0c0ee746335bc03c296e51b0e810d6ba7d84c649be5c1423ef36dbbd06eb28a4c8181f3bb2a9764a63252f51a809621ed03f01117733149f4"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) 10.359132984s ago: executing program 9 (id=8740): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r2 = getpid() setreuid(0xee00, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@random={'osx.', '/dev/cpu/#/msr\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3ec}}, 0x28}}, 0x0) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setresuid(0x0, 0x0, 0x0) 9.261657926s ago: executing program 8 (id=8743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet(0x2, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x40000) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) close(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x14) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x1008001, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 8.589765521s ago: executing program 1 (id=8745): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) 7.947292229s ago: executing program 1 (id=8746): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4) getpid() setreuid(0xee00, 0x0) setns(0xffffffffffffffff, 0x24020000) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@random={'osx.', '/dev/cpu/#/msr\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3ec}}, 0x28}}, 0x0) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setresuid(0x0, 0x0, 0x0) 7.934520797s ago: executing program 8 (id=8747): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c5}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100441405", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.529094579s ago: executing program 7 (id=8748): socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000003c0)={0xe11, [[0x80000000, 0x9, 0x3, 0x40, 0xf, 0x1, 0x7, 0x2], [0x6, 0x552, 0x1, 0x0, 0x1, 0xfffe, 0xdd99, 0x5], [0x4, 0x4, 0x8, 0xc0000000, 0x7, 0xb, 0xffff, 0xff]], '\x00', [{0xfffffff8, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x3, 0xd2, 0x0, 0x1}, {0x10000, 0x2a2, 0x0, 0x1, 0x1}, {0xffffffff, 0x10001}, {0xfffffff8, 0x80000000, 0x0, 0x1}, {0x418a8052, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x10, 0x0, 0x0, 0x1}, {0xff, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x8000, 0xfffffff9, 0x1, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7e4a, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc, 0x3, 0x0, 0x1}], '\x00', 0x3}) 7.423978063s ago: executing program 8 (id=8749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080007010040"]) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0xfffffe73, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8baa, @mcast2, 0x8000005}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000700)="f23b013ff991208d5102f648ce0e7c48f1e3c76eecb6f0c6ead596c7c16804b06209e94af3af928739ba2b834fd7a089bcd53427d1f064eb753d5fda24b5d73c955733a07f29b95d12bcaf6983d7e875f93591bff17620accc36fa4f645b03e0ad5233921a4312", 0x67}, {&(0x7f0000000380)="6fe954dfa631f6874327e9b9f6f2eb1be687b7d9990081ec990154a1c0", 0x1d}], 0x2}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000001c0)="17", 0x1}, {&(0x7f0000000480)="77e7e188da37bdc2e230570a5ad8aa5226", 0x11}, {&(0x7f0000000780)="ef912246919153316d7c331b0fac18c52f79c2b05ace94c604d8df2958448ff54f446fcef81d0d0974e89d512b79d65dd0fd12aeaecfdea2c29934456fbde7944b20e2af212c8c3f0b1194d3e41db28afa987aefbd5702771b94aee4bb85114ff43258a93cf76c1ce647ff58e9b39960674ddd2ba73cfea647795ca3269995cdbb79ab4ddff60ea44602718675008d38b136ba072bf62e558973bde8f518ad54dffff9ba64c1cb589c9dcbf8e8643c5b671a9880fa774a5bb9584eecf4a45ad0d780", 0xc2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="e600c86ba03e74709dc45aff03cf6078641bf06a0657d725f955cd0777232bfb8d862ff1ada252b15e2992044dc475aa6792c5b88790f70d696dda53e77b09d7e9f6aa53e141b836174efea3c06d00da1dd32f5ea99bb40aed9401db874e8bab0df655431054cd40f704954b651e9b91e8d3f3bcb9dc5db5763a201126ac225adbcf9c74e9724435d13535aa577d1ad028291ed10fe8dcfd4abe3ee690571b63eecfd0074c472f25f5875084540db85b54e100"/192, 0xc0}, {&(0x7f00000004c0)="496a38dda552d260a980269c41f7846219a7ac84e50e0622b00959889cb8e14375e43694c6893ab08885bdad211589c68fa02cc75f06203496a88fb262a3f2a8b9aecefa0149c0c953cc7935c35582631fca7ad1643ff6f37864545662885f2c3ca4aed3b10b7211771063204a96df7031e3392fe50a5fa2575ed87d82624888b33b7feab257c2debff5325da9cdbe3a92e71f7d01fb2f8f9eb99936e28831262954288ad984df0d80c3", 0xaa}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="140000000000000029000000080700000900000000000000"], 0x18}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x298802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 7.009365429s ago: executing program 5 (id=8750): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000100)={0x20, 0x0, &(0x7f00000000c0)=[{0x0, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x2001) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.681989677s ago: executing program 1 (id=8751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4b0e, &(0x7f0000000380)={0x0, 0x7331, 0x1000, 0x3, 0x95}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d80", @ANYRES32=r2, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 6.624143189s ago: executing program 5 (id=8752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet(0x2, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x40000) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) close(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x14) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x1008001, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 6.463157679s ago: executing program 9 (id=8753): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000071101a00000000009500000000000000e81872a49f3abe26ae8077dace533dbc76382acbe78bcb13d488839dbfc473c5e44c52275a5c1079f799950e8e32bcdea50f7c0ea807d5c32802a657e0c0ee746335bc03c296e51b0e810d6ba7d84c649be5c1423ef36dbbd06eb28a4c8181f3bb2a9764a63252f51a809621ed03f01117733149f4"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) 6.386935816s ago: executing program 1 (id=8754): bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000180)={&(0x7f0000000300)={{@hyper, 0x7}, {@local, 0x2}, 0x400, "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"}, 0x418, 0x6}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 5.567309533s ago: executing program 5 (id=8755): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000d4f70510fd0bffffffff0102030109021b0001b80dc0030904f00601fcffffffff0208007fbfc2"], 0x0) 5.427614217s ago: executing program 9 (id=8756): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) getpid() setreuid(0xee00, 0x0) setns(0xffffffffffffffff, 0x24020000) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@random={'osx.', '/dev/cpu/#/msr\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3ec}}, 0x28}}, 0x0) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 5.066557669s ago: executing program 9 (id=8757): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x65, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="03000000"], 0x10}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r8, &(0x7f0000000100)="bf16a1f1fb", 0x5) read(r8, 0x0, 0x5d) 3.992004542s ago: executing program 9 (id=8758): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x14, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0x5, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x4, 0x1, 0xf, {0x67, 0x0, 0x2, 0x1, 0xc, 0x2}, {0x8, 0x0, 0x5, 0x5, 0x3a, 0x7ff}, 0x3, 0x5e, 0x6}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) mmap$dsp(&(0x7f0000d5e000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r8, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.978276329s ago: executing program 7 (id=8759): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c5}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100441405", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.818991145s ago: executing program 8 (id=8760): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x21, 0x6207, &(0x7f0000012500)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) pipe(&(0x7f0000000140)) socket(0x1e, 0x805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept$alg(r3, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) close(0x3) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r6, 0x1, 0x9, &(0x7f0000000800), 0x4) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4001, @remote}, 0x30, 0x0}, 0x30004084) recvmsg(r4, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x40000102) sendmmsg$inet(r4, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xcf}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b432d4bce477d5aa2407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f0000000200)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000600)="c88b24d13e46650476bd62b2a4a9e5258baaa2b1b66b01e3187aa58a5113890ed7917a083d5b4cc77aca9afa9e", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3baea8dc8a0248bafcc0f45d9fce4d", 0x1c}, {&(0x7f00000006c0)="28af22ee5579386fc97a788ae2cb0a93652970304dd5154e567b867e4fc749d42f1bb962067560f20849897defddcc9d10bae0452d478880ba507183c78b5c1efe9f45f0e7a4ef0b76e656c836f13aab1d6dc20a979f369d0138ae25598c12691ae036ea88f7795caa2de286d76cd09ed58bfaa4c19d5ffa7504ae8da3e6cf4ba524ffd11c8235c0e5759bfd1bb1cc82c61e63a1316e3e6ae0acf6c9b445316d617d300df440817a4e505915ce6d77f883da6173830838af380d13e9c78300aad57a78d4408c4e2a55d011be914c1b93659eb7bbaf94c63636e2c14334e77699a4d77138aa08a37f9fc2", 0xea}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000900)="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", 0xb46}], 0x5}}], 0x2, 0x8058) unshare(0x22020400) r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x400, 0x498c03) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000340)={0x6, 0x5, 0x80000001, 0x800, '\x00', 0x8}) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x7, 0x8000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4000000000000, 0x9, 0x0, 0xffffffffffff7951, 0x9, 0xfffffffffffffffc}, 0x0, 0x0) 2.268684043s ago: executing program 7 (id=8761): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pipe(&(0x7f0000000140)) socket(0x1e, 0x805, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x40000102) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xcf}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b432d4bce477d5aa2407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f0000000200)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000600)="c88b24d13e46650476bd62b2a4a9e5258baaa2b1b66b01e3187aa58a5113890ed7917a083d5b4cc77aca9afa9e", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3baea8dc8a0248bafcc0f45d9fce4d", 0x1c}, {&(0x7f00000006c0)="28af22ee5579386fc97a788ae2cb0a93652970304dd5154e567b867e4fc749d42f1bb962067560f20849897defddcc9d10bae0452d478880ba507183c78b5c1efe9f45f0e7a4ef0b76e656c836f13aab1d6dc20a979f369d0138ae25598c12691ae036ea88f7795caa2de286d76cd09ed58bfaa4c19d5ffa7504ae8da3e6cf4ba524ffd11c8235c0e5759bfd1bb1cc82c61e63a1316e3e6ae0acf6c9b445316d617d300df440817a4e505915ce6d77f883da6173830838af380d13e9c78300aad57a78d4408c4e2a55d011be914c1b93659eb7bbaf94c63636e2c14334e77699a4d77138aa08a37f9fc2", 0xea}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000900)="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", 0xb46}], 0x5}}], 0x2, 0x8058) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (fail_nth: 1) 1.895907794s ago: executing program 5 (id=8762): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600057fae5d8c8315ab20000000000000700000014000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000912020073797a300000000014000300686173683a69702c706f72742c6970000ded258748983fba362e30cf284134d4552e1d0b379949f77b10350a545b099854b738cd77572632eb35c797eeeaca2a58a56f9770f33b2798a7eaf7bbea2ebc595be63723"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e00", 0xc, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.474155461s ago: executing program 1 (id=8763): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c5}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100441405", @ANYRES32=0x41424344], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x7}, 0x94) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.463375665s ago: executing program 5 (id=8764): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000001e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000001600)=ANY=[@ANYBLOB='nobarrier,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX=0xee01, @ANYBLOB="2c706172743d3078303030303030303030303030323030312c706172743d3078303030303030303030303030303030362c00144c362aeb2689182e60696b86c3b7e80af31668c2db14f2a507322f00ebbd43762dc0e30f41aef8d78fd73cb0ea33a298fd24894551fb1ddb3081ac65a65332dfd4cce7b4"], 0x1, 0x6de, &(0x7f0000000840)="$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") mount$nfs(&(0x7f0000000b00)='.\x05.\xe8\x8f+\x8e\xae\xc4q)\xae\xde\xe4\x05C\r\x81\xa64:\xc4\x15\x85\xb8\\yF\x7f\x9dn\xda\xb1\xdd\xab\xa8\xe9\xa6\xf2\xa0]k\xbc\xe4\x9c\xc6\xc1\x17l\x01\xc5N\xb8tn\x86\xd9m\xcc\x95\xce\x87\xca\xac\xa6\xba;y\r\xcb@-\xdd\xd2\x10\x80\xa8\x88\x94\x85Q\x8b\xe4\xfc\xe0\x88\x96\x83?h\x80\x94Xy\xd7HW\xb6\x19!!\xbf\xa7\xb0/\xde\x88&\'\xbf\xd39\x19$uv}q4\x90\xda\xf6\x8f\xa8(\xbaJ\x03\xf3X\xdf\xc7,x\x12\xde\xa1\xfd\xff\xcf\ffw\xed\x9dH\x9c\xcc\a\r\x9fN\xdeZ\xa9J3$? \xc3\x12\xf2\x8d\xee/\xf9k\x8f\x86\xb4\x8f\x9f\xbf\xbdZs\x1b\xc7\xff}\x19<-wS93\xb15}\x8c\xfd\xaf\x8f\bGo\xdai\xf4;\x1e\xfe>\x8e~B\x05\xa0\xa1\x94\xf8j\x03\xce]\xa4\xa8\xca\xc6\xb2]\x88\x90\xaag\x8b\rt\xfd\xc0\xad\xf4\xc6\x92\x856\x04X\xc0S6\xa4y>=\x81\xe2\xd9\x9a\xa0M\xd8\x12\xeb\xdc,\xa9\x04RDr\xd1u\x89\xa5\xde\xf1\xe0-\xf2\xa78\x8eG\a\x0f\x81\x02%1~\n\xdb\x99\fX5\xc2\xf3\xb2V\xce\xe2\x1b\xf5\xae\xd2[\a}\xe0\x16\x86\xae\xb5>\xed+\x86\r%Es\xd3a\xc4\xdb]\x93\xa4t\xa5\xb8^S\xb9>\xba\x8c\xe8\xbf\xe8`\xbb\xb4\"\x9c4\x1a\x11\xd88\x99\x84W\xceG\xa3z{\x0f\xdc/%\xc2\xb4\xdb\xcb\xe1\xce1\xa6\x10\x98\t\xf1\x00\xb4\xcb\x13`\x18\xac\xa4RjI.F\xf2%R\x03\xff\xf12\x90\x99\nB\xdf\xfcD{\xe8\xa3%\x16\xccWs<*[\a\xc9Z|T\xbdOBD\xa5VI0^F\xc3s\xea\xad\xcc\xfd\x1bP\x1b\xd2H\x1b\xde\xa7\xa3\x8a\x97\xb4s\xe8\xf9\t_9\xea\x86*\xc4\xed;\xbb*\xb4\'*\xc6\'tf\xa19\xdd~\x02\xab\xebm\xba\x06V!\xd2\x1dq\x96X\x8f\x85n\xc3\xaa\xaa\xa7(\x1e\xe3\xdd\xb8\xe6\xfb\xa5=QO\xfaX\xb3\xf9\xfb}\x16z\xb1\x834T\'Rq.c\xd9\xb4\xee\xdf,\x119\x1d(!\xbay\x8a\xd11b;\x99U\x03\x8b#\xe9~\x9ci\xd4ND1\x04\xe0\xf2\xcf\xc4\xb6t\xff\xa9\xcf d|*O\x891YPC\xa55\x9f\xdf-\xdf\x94*V\xc6\xb6\xe4\x15M\x12\rl\xb5\xc3\xdb\x8eH\x89\xe2h\x03,\xad\x97\x9e\xcdf\xff\xc2\xa3', &(0x7f0000000180)='./file0\x00', 0x0, 0x3000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = socket(0x1f, 0x6, 0x140) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xfffffffffffffffd) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x23, 0x5, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000000)=0x400, 0x4) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2b9000086dd602a8435001406ff5b78d9f59792b6e2b9ca04128924b3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000190780005"], 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 1.303996356s ago: executing program 7 (id=8765): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0x0}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000240), &(0x7f0000001700)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0], 0x55, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000002000)='net/ip_mr_vif\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) execve(&(0x7f0000001600)='./file1\x00', &(0x7f00000016c0)={[&(0x7f0000001640)='bridge_slave_0\x00', &(0x7f0000001680)=',,/\'{+$\x00']}, &(0x7f0000001840)={[0x0, &(0x7f0000001740)='ext4\x00', &(0x7f0000001780)='bridge_slave_0\x00', &(0x7f00000017c0)='%-\'&\x82$\x00', &(0x7f0000001800)='(\x00']}) r4 = creat(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xb5) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0a86e6c329000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) 466.763108ms ago: executing program 9 (id=8766): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet(0x2, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x40000) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x14) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x1008001, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 420.477757ms ago: executing program 7 (id=8767): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000100)={0x20, 0x0, &(0x7f00000000c0)=[{0x0, 0x3}, {0x0, 0x3}, {0x1}, {}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 399.779573ms ago: executing program 1 (id=8768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ext4_sync_file_enter\x00', r0}, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() r2 = semget$private(0x0, 0x4, 0x480) semctl$SETVAL(r2, 0x0, 0x10, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) io_setup(0x3, &(0x7f00000003c0)) io_setup(0x6, &(0x7f0000001380)) io_setup(0x8, &(0x7f0000004200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) preadv2(r5, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) 1.564984ms ago: executing program 7 (id=8769): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x9, 0x801000088}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e2a, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0xfffffffffffffc9b) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x410900, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x40000, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x13, 0xffffffffffffffff, 0x75e7f000) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000100)={0x666666666666780, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x0, 0x3}]}) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000240)="5a002ef5e688c627e240000023e186e5137a3431004b2d87ab3e1801752fb20263cae4102356b65f832ce7bb081ea931403f4b5f785e41d541409e3649639d586e409750683b6af6ad000000", 0xfffffffffffffe75) splice(r4, 0x0, r6, 0x0, 0x1, 0xa4c8e98ffd47912a) 0s ago: executing program 5 (id=8770): unshare(0x4000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x20040600) r1 = epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x200b}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xa7f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): d=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcd38e929 code=0x7ffc0000 [ 3308.106497][ T30] audit: type=1326 audit(2000002438.739:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6bcd38e929 code=0x7ffc0000 [ 3308.129201][ T30] audit: type=1326 audit(2000002438.739:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcd38e929 code=0x7ffc0000 [ 3309.069922][ T1389] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3309.077699][T13402] IPVS: starting estimator thread 0... [ 3309.192630][ T1393] IPVS: using max 24 ests per chain, 57600 per kthread [ 3309.702649][ T1405] netlink: 'syz.1.7593': attribute type 1 has an invalid length. [ 3309.832925][ T1405] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7593'. [ 3310.922432][T32524] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 3311.112575][T32524] usb 8-1: device descriptor read/64, error -71 [ 3311.372398][T32524] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 3311.436344][ T1414] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7595'. [ 3311.522983][T32524] usb 8-1: device descriptor read/64, error -71 [ 3311.682796][T32524] usb usb8-port1: attempt power cycle [ 3312.771303][ T1442] netlink: 'syz.7.7608': attribute type 1 has an invalid length. [ 3312.798957][ T1442] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7608'. [ 3313.216198][ T1455] netlink: 'syz.5.7612': attribute type 1 has an invalid length. [ 3313.224149][ T1455] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7612'. [ 3313.334603][ T1460] FAULT_INJECTION: forcing a failure. [ 3313.334603][ T1460] name failslab, interval 1, probability 0, space 0, times 0 [ 3313.348884][ T1460] CPU: 1 UID: 0 PID: 1460 Comm: syz.5.7615 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3313.348913][ T1460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3313.348925][ T1460] Call Trace: [ 3313.348934][ T1460] [ 3313.348944][ T1460] dump_stack_lvl+0x189/0x250 [ 3313.348982][ T1460] ? __pfx____ratelimit+0x10/0x10 [ 3313.349010][ T1460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3313.349034][ T1460] ? __pfx__printk+0x10/0x10 [ 3313.349080][ T1460] ? __pfx___might_resched+0x10/0x10 [ 3313.349100][ T1460] ? fs_reclaim_acquire+0x7d/0x100 [ 3313.349132][ T1460] should_fail_ex+0x414/0x560 [ 3313.349163][ T1460] should_failslab+0xa8/0x100 [ 3313.349191][ T1460] __kmalloc_noprof+0xcb/0x4f0 [ 3313.349213][ T1460] ? kfree+0x4d/0x440 [ 3313.349231][ T1460] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3313.349261][ T1460] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3313.349288][ T1460] ? tomoyo_domain+0xd9/0x130 [ 3313.349317][ T1460] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3313.349355][ T1460] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3313.349378][ T1460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3313.349420][ T1460] ? __lock_acquire+0xab9/0xd20 [ 3313.349467][ T1460] ? __fget_files+0x2a/0x420 [ 3313.349500][ T1460] ? __fget_files+0x2a/0x420 [ 3313.349528][ T1460] ? __fget_files+0x3a0/0x420 [ 3313.349555][ T1460] ? __fget_files+0x2a/0x420 [ 3313.349589][ T1460] security_file_ioctl+0xcb/0x2d0 [ 3313.349623][ T1460] __se_sys_ioctl+0x47/0x170 [ 3313.349650][ T1460] do_syscall_64+0xfa/0x3b0 [ 3313.349676][ T1460] ? lockdep_hardirqs_on+0x9c/0x150 [ 3313.349703][ T1460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3313.349723][ T1460] ? clear_bhb_loop+0x60/0xb0 [ 3313.349748][ T1460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3313.349768][ T1460] RIP: 0033:0x7efc5f98e929 [ 3313.349786][ T1460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3313.349804][ T1460] RSP: 002b:00007efc60711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3313.349826][ T1460] RAX: ffffffffffffffda RBX: 00007efc5fbb5fa0 RCX: 00007efc5f98e929 [ 3313.349853][ T1460] RDX: 0000200000000080 RSI: 0000000000005609 RDI: 0000000000000006 [ 3313.349865][ T1460] RBP: 00007efc60711090 R08: 0000000000000000 R09: 0000000000000000 [ 3313.349878][ T1460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3313.349889][ T1460] R13: 0000000000000000 R14: 00007efc5fbb5fa0 R15: 00007ffe25ca32d8 [ 3313.349921][ T1460] [ 3313.603520][ T1460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3315.075721][ T1480] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7621'. [ 3317.182401][ T979] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 3317.544048][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3317.710752][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3317.888464][ T979] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3318.045607][ T979] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3318.158876][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3318.420956][ T979] usb 8-1: config 0 descriptor?? [ 3319.746525][ T979] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 3319.987050][ T9] usb 8-1: USB disconnect, device number 22 [ 3320.096801][ T1513] FAULT_INJECTION: forcing a failure. [ 3320.096801][ T1513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3320.110219][ T1513] CPU: 0 UID: 0 PID: 1513 Comm: syz.1.7632 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3320.110248][ T1513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3320.110262][ T1513] Call Trace: [ 3320.110270][ T1513] [ 3320.110279][ T1513] dump_stack_lvl+0x189/0x250 [ 3320.110309][ T1513] ? __pfx____ratelimit+0x10/0x10 [ 3320.110336][ T1513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3320.110360][ T1513] ? __pfx__printk+0x10/0x10 [ 3320.110389][ T1513] ? __might_fault+0xb0/0x130 [ 3320.110428][ T1513] should_fail_ex+0x414/0x560 [ 3320.110461][ T1513] _copy_from_user+0x2d/0xb0 [ 3320.110488][ T1513] core_sys_select+0x4b7/0xa20 [ 3320.110536][ T1513] ? __pfx_core_sys_select+0x10/0x10 [ 3320.110593][ T1513] ? __pfx_set_user_sigmask+0x10/0x10 [ 3320.110628][ T1513] __se_sys_pselect6+0x27a/0x300 [ 3320.110663][ T1513] ? __pfx___se_sys_pselect6+0x10/0x10 [ 3320.110691][ T1513] ? __pfx_ksys_write+0x10/0x10 [ 3320.110714][ T1513] ? rcu_is_watching+0x15/0xb0 [ 3320.110743][ T1513] ? __x64_sys_pselect6+0x21/0xf0 [ 3320.110774][ T1513] do_syscall_64+0xfa/0x3b0 [ 3320.110804][ T1513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3320.110823][ T1513] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3320.110842][ T1513] ? clear_bhb_loop+0x60/0xb0 [ 3320.110868][ T1513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3320.110887][ T1513] RIP: 0033:0x7fa3dfd8e929 [ 3320.110906][ T1513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3320.110924][ T1513] RSP: 002b:00007fa3e0c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 3320.110963][ T1513] RAX: ffffffffffffffda RBX: 00007fa3dffb6080 RCX: 00007fa3dfd8e929 [ 3320.110980][ T1513] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 3320.110993][ T1513] RBP: 00007fa3e0c76090 R08: 0000000000000000 R09: 0000000000000000 [ 3320.111007][ T1513] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 3320.111020][ T1513] R13: 0000000000000000 R14: 00007fa3dffb6080 R15: 00007fff81475d58 [ 3320.111055][ T1513] [ 3320.858344][ T1530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7638'. [ 3325.238931][ T1583] 9pnet_fd: Insufficient options for proto=fd [ 3325.361716][ T1586] FAULT_INJECTION: forcing a failure. [ 3325.361716][ T1586] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.389594][ T1586] CPU: 0 UID: 0 PID: 1586 Comm: syz.7.7658 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3325.389624][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3325.389637][ T1586] Call Trace: [ 3325.389646][ T1586] [ 3325.389655][ T1586] dump_stack_lvl+0x189/0x250 [ 3325.389684][ T1586] ? __pfx____ratelimit+0x10/0x10 [ 3325.389711][ T1586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3325.389735][ T1586] ? __pfx__printk+0x10/0x10 [ 3325.389777][ T1586] ? __pfx___might_resched+0x10/0x10 [ 3325.389797][ T1586] ? fs_reclaim_acquire+0x7d/0x100 [ 3325.389829][ T1586] should_fail_ex+0x414/0x560 [ 3325.389860][ T1586] should_failslab+0xa8/0x100 [ 3325.389887][ T1586] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3325.389910][ T1586] ? __alloc_skb+0x112/0x2d0 [ 3325.389939][ T1586] __alloc_skb+0x112/0x2d0 [ 3325.389975][ T1586] alloc_skb_with_frags+0xca/0x890 [ 3325.390010][ T1586] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 3325.390035][ T1586] sock_alloc_send_pskb+0x857/0x990 [ 3325.390075][ T1586] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 3325.390098][ T1586] ? aa_file_perm+0x13e/0x11b0 [ 3325.390127][ T1586] ? aa_sk_perm+0x81e/0x950 [ 3325.390149][ T1586] hci_sock_sendmsg+0x207/0xef0 [ 3325.390184][ T1586] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 3325.390211][ T1586] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3325.390234][ T1586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3325.390253][ T1586] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 3325.390281][ T1586] __sock_sendmsg+0x219/0x270 [ 3325.390307][ T1586] sock_write_iter+0x258/0x330 [ 3325.390331][ T1586] ? __pfx_sock_write_iter+0x10/0x10 [ 3325.390363][ T1586] ? bpf_lsm_file_permission+0x9/0x20 [ 3325.390383][ T1586] ? security_file_permission+0x75/0x290 [ 3325.390421][ T1586] vfs_write+0x548/0xa90 [ 3325.390451][ T1586] ? __pfx_sock_write_iter+0x10/0x10 [ 3325.390472][ T1586] ? __pfx_vfs_write+0x10/0x10 [ 3325.390507][ T1586] ? __fget_files+0x2a/0x420 [ 3325.390544][ T1586] ksys_write+0x145/0x250 [ 3325.390571][ T1586] ? __pfx_ksys_write+0x10/0x10 [ 3325.390597][ T1586] ? rcu_is_watching+0x15/0xb0 [ 3325.390624][ T1586] ? do_syscall_64+0xbe/0x3b0 [ 3325.390652][ T1586] do_syscall_64+0xfa/0x3b0 [ 3325.390676][ T1586] ? lockdep_hardirqs_on+0x9c/0x150 [ 3325.390699][ T1586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3325.390718][ T1586] ? clear_bhb_loop+0x60/0xb0 [ 3325.390741][ T1586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3325.390759][ T1586] RIP: 0033:0x7fe00cd8e929 [ 3325.390777][ T1586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3325.390794][ T1586] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3325.390814][ T1586] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3325.390828][ T1586] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000006 [ 3325.390841][ T1586] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3325.390853][ T1586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3325.390864][ T1586] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3325.390895][ T1586] [ 3329.579921][ T1629] xt_socket: unknown flags 0x8 [ 3331.255958][ T1650] xt_socket: unknown flags 0x8 [ 3333.120097][ T1668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3335.903786][ T1696] random: crng reseeded on system resumption [ 3342.704801][ T1766] fuse: Bad value for 'fd' [ 3344.090625][ T1800] FAULT_INJECTION: forcing a failure. [ 3344.090625][ T1800] name failslab, interval 1, probability 0, space 0, times 0 [ 3344.103731][ T1800] CPU: 1 UID: 0 PID: 1800 Comm: syz.1.7723 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3344.103756][ T1800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3344.103769][ T1800] Call Trace: [ 3344.103778][ T1800] [ 3344.103787][ T1800] dump_stack_lvl+0x189/0x250 [ 3344.103815][ T1800] ? __pfx____ratelimit+0x10/0x10 [ 3344.103842][ T1800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3344.103866][ T1800] ? __pfx__printk+0x10/0x10 [ 3344.103900][ T1800] ? __pfx___might_resched+0x10/0x10 [ 3344.103920][ T1800] ? fs_reclaim_acquire+0x7d/0x100 [ 3344.104051][ T1800] should_fail_ex+0x414/0x560 [ 3344.104093][ T1800] should_failslab+0xa8/0x100 [ 3344.104123][ T1800] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3344.104145][ T1800] ? getname_flags+0xb8/0x540 [ 3344.104180][ T1800] getname_flags+0xb8/0x540 [ 3344.104214][ T1800] do_sys_openat2+0xbc/0x1c0 [ 3344.104238][ T1800] ? __pfx_do_sys_openat2+0x10/0x10 [ 3344.104259][ T1800] ? ksys_write+0x22a/0x250 [ 3344.104287][ T1800] ? __pfx_ksys_write+0x10/0x10 [ 3344.104309][ T1800] ? rcu_is_watching+0x15/0xb0 [ 3344.104337][ T1800] __x64_sys_creat+0x8f/0xc0 [ 3344.104362][ T1800] do_syscall_64+0xfa/0x3b0 [ 3344.104389][ T1800] ? lockdep_hardirqs_on+0x9c/0x150 [ 3344.104414][ T1800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3344.104434][ T1800] ? clear_bhb_loop+0x60/0xb0 [ 3344.104458][ T1800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3344.104478][ T1800] RIP: 0033:0x7fa3dfd8e929 [ 3344.104497][ T1800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3344.104513][ T1800] RSP: 002b:00007fa3e0c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 3344.104535][ T1800] RAX: ffffffffffffffda RBX: 00007fa3dffb5fa0 RCX: 00007fa3dfd8e929 [ 3344.104551][ T1800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 3344.104563][ T1800] RBP: 00007fa3e0c97090 R08: 0000000000000000 R09: 0000000000000000 [ 3344.104576][ T1800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3344.104588][ T1800] R13: 0000000000000000 R14: 00007fa3dffb5fa0 R15: 00007fff81475d58 [ 3344.104621][ T1800] [ 3344.323580][ C1] vkms_vblank_simulate: vblank timer overrun [ 3345.893217][ T1837] xt_socket: unknown flags 0x8 [ 3347.987931][ T1852] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.7742'. [ 3348.632580][ T1864] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 3348.684803][ T1864] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 3354.807535][ T1904] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7760'. [ 3359.157184][ T1972] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7782'. [ 3361.243197][ T2002] FAULT_INJECTION: forcing a failure. [ 3361.243197][ T2002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3361.278851][ T2002] CPU: 1 UID: 0 PID: 2002 Comm: syz.1.7793 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3361.278883][ T2002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3361.278896][ T2002] Call Trace: [ 3361.278921][ T2002] [ 3361.278931][ T2002] dump_stack_lvl+0x189/0x250 [ 3361.278961][ T2002] ? __pfx____ratelimit+0x10/0x10 [ 3361.278988][ T2002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3361.279013][ T2002] ? __pfx__printk+0x10/0x10 [ 3361.279045][ T2002] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3361.279082][ T2002] should_fail_ex+0x414/0x560 [ 3361.279115][ T2002] strncpy_from_user+0x36/0x290 [ 3361.279146][ T2002] __se_sys_add_key+0xcc/0x400 [ 3361.279180][ T2002] ? __pfx___se_sys_add_key+0x10/0x10 [ 3361.279219][ T2002] ? do_syscall_64+0xbe/0x3b0 [ 3361.279250][ T2002] ? __x64_sys_add_key+0x20/0xc0 [ 3361.279282][ T2002] do_syscall_64+0xfa/0x3b0 [ 3361.279308][ T2002] ? lockdep_hardirqs_on+0x9c/0x150 [ 3361.279333][ T2002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3361.279354][ T2002] ? clear_bhb_loop+0x60/0xb0 [ 3361.279380][ T2002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3361.279400][ T2002] RIP: 0033:0x7fa3dfd8e929 [ 3361.279419][ T2002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3361.279436][ T2002] RSP: 002b:00007fa3e0c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3361.279459][ T2002] RAX: ffffffffffffffda RBX: 00007fa3dffb5fa0 RCX: 00007fa3dfd8e929 [ 3361.279475][ T2002] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 3361.279490][ T2002] RBP: 00007fa3e0c97090 R08: fffffffffffffffe R09: 0000000000000000 [ 3361.279505][ T2002] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 3361.279517][ T2002] R13: 0000000000000000 R14: 00007fa3dffb5fa0 R15: 00007fff81475d58 [ 3361.279551][ T2002] [ 3361.466068][ C1] vkms_vblank_simulate: vblank timer overrun [ 3366.163443][ T2030] netlink: 'syz.5.7801': attribute type 12 has an invalid length. [ 3366.171624][ T2030] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7801'. [ 3366.612688][T14935] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 3368.731281][ T2074] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7817'. [ 3370.510904][ T2096] overlayfs: missing 'lowerdir' [ 3371.592464][T14935] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 3371.838764][T14935] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3371.851938][T14935] usb 6-1: not running at top speed; connect to a high speed hub [ 3371.883720][T14935] usb 6-1: config 3 has an invalid interface number: 106 but max is 0 [ 3372.018746][T14935] usb 6-1: config 3 has no interface number 0 [ 3372.174026][T14935] usb 6-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 3372.196370][T14935] usb 6-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 3372.227925][T14935] usb 6-1: config 3 interface 106 has no altsetting 0 [ 3372.329189][T14935] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 3372.387717][T14935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3372.409649][T14935] usb 6-1: Product: syz [ 3372.422587][T14935] usb 6-1: Manufacturer: syz [ 3372.427273][T14935] usb 6-1: SerialNumber: syz [ 3372.445770][ T2105] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3372.612508][ T2105] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3373.254426][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3373.292938][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3374.224092][T14935] kobil_sct 6-1:3.106: KOBIL USB smart card terminal converter detected [ 3374.255817][T14935] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 3374.293023][T14935] usb 6-1: USB disconnect, device number 49 [ 3374.385204][T14935] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 3374.447243][T14935] kobil_sct 6-1:3.106: device disconnected [ 3377.021858][ T2177] FAULT_INJECTION: forcing a failure. [ 3377.021858][ T2177] name fail_futex, interval 1, probability 0, space 0, times 1 [ 3377.036297][ T2177] CPU: 1 UID: 0 PID: 2177 Comm: syz.1.7850 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3377.036337][ T2177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3377.036350][ T2177] Call Trace: [ 3377.036359][ T2177] [ 3377.036369][ T2177] dump_stack_lvl+0x189/0x250 [ 3377.036397][ T2177] ? __pfx____ratelimit+0x10/0x10 [ 3377.036425][ T2177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3377.036449][ T2177] ? __pfx__printk+0x10/0x10 [ 3377.036477][ T2177] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3377.036505][ T2177] ? __pfx_vfs_write+0x10/0x10 [ 3377.036535][ T2177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3377.036566][ T2177] should_fail_ex+0x414/0x560 [ 3377.036598][ T2177] __se_sys_futex+0x170/0x400 [ 3377.036630][ T2177] ? ksys_write+0x22a/0x250 [ 3377.036654][ T2177] ? __pfx___se_sys_futex+0x10/0x10 [ 3377.036680][ T2177] ? __pfx_ksys_write+0x10/0x10 [ 3377.036712][ T2177] ? __x64_sys_futex+0x21/0xf0 [ 3377.036742][ T2177] do_syscall_64+0xfa/0x3b0 [ 3377.036768][ T2177] ? lockdep_hardirqs_on+0x9c/0x150 [ 3377.036793][ T2177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3377.036814][ T2177] ? clear_bhb_loop+0x60/0xb0 [ 3377.036839][ T2177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3377.036859][ T2177] RIP: 0033:0x7fa3dfd8e929 [ 3377.036877][ T2177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3377.036895][ T2177] RSP: 002b:00007fa3e0c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3377.036922][ T2177] RAX: ffffffffffffffda RBX: 00007fa3dffb5fa0 RCX: 00007fa3dfd8e929 [ 3377.036938][ T2177] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000000000000000 [ 3377.036950][ T2177] RBP: 00007fa3e0c97090 R08: 0000000000000000 R09: 0000000000000001 [ 3377.036981][ T2177] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 3377.036995][ T2177] R13: 0000000000000001 R14: 00007fa3dffb5fa0 R15: 00007fff81475d58 [ 3377.037030][ T2177] [ 3378.129308][ T2189] 9pnet_fd: Insufficient options for proto=fd [ 3378.883928][ T2196] 9pnet_fd: Insufficient options for proto=fd [ 3379.219069][ T2194] FAULT_INJECTION: forcing a failure. [ 3379.219069][ T2194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3379.239861][ T2194] CPU: 0 UID: 0 PID: 2194 Comm: syz.5.7854 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3379.239890][ T2194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3379.239902][ T2194] Call Trace: [ 3379.239910][ T2194] [ 3379.239919][ T2194] dump_stack_lvl+0x189/0x250 [ 3379.239946][ T2194] ? __pfx____ratelimit+0x10/0x10 [ 3379.239971][ T2194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3379.239994][ T2194] ? __pfx__printk+0x10/0x10 [ 3379.240020][ T2194] ? __might_fault+0xb0/0x130 [ 3379.240055][ T2194] should_fail_ex+0x414/0x560 [ 3379.240085][ T2194] _copy_from_user+0x2d/0xb0 [ 3379.240127][ T2194] ___sys_sendmsg+0x158/0x2a0 [ 3379.240160][ T2194] ? __pfx____sys_sendmsg+0x10/0x10 [ 3379.240229][ T2194] ? __fget_files+0x2a/0x420 [ 3379.240258][ T2194] ? __fget_files+0x3a0/0x420 [ 3379.240307][ T2194] __x64_sys_sendmsg+0x19b/0x260 [ 3379.240341][ T2194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3379.240383][ T2194] ? __pfx_ksys_write+0x10/0x10 [ 3379.240406][ T2194] ? rcu_is_watching+0x15/0xb0 [ 3379.240434][ T2194] ? do_syscall_64+0xbe/0x3b0 [ 3379.240466][ T2194] do_syscall_64+0xfa/0x3b0 [ 3379.240491][ T2194] ? lockdep_hardirqs_on+0x9c/0x150 [ 3379.240521][ T2194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3379.240541][ T2194] ? clear_bhb_loop+0x60/0xb0 [ 3379.240566][ T2194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3379.240586][ T2194] RIP: 0033:0x7efc5f98e929 [ 3379.240604][ T2194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3379.240621][ T2194] RSP: 002b:00007efc60711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3379.240642][ T2194] RAX: ffffffffffffffda RBX: 00007efc5fbb5fa0 RCX: 00007efc5f98e929 [ 3379.240657][ T2194] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 3379.240670][ T2194] RBP: 00007efc60711090 R08: 0000000000000000 R09: 0000000000000000 [ 3379.240683][ T2194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3379.240694][ T2194] R13: 0000000000000000 R14: 00007efc5fbb5fa0 R15: 00007ffe25ca32d8 [ 3379.240725][ T2194] [ 3380.203745][ T979] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 3380.884177][ T2218] overlayfs: failed to clone upperpath [ 3381.072917][ T979] usb 8-1: Using ep0 maxpacket: 32 [ 3381.123646][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3381.182296][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3381.352553][ T979] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3381.406082][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3381.423610][ T979] usb 8-1: config 0 descriptor?? [ 3381.645173][ T2235] netlink: 'syz.1.7864': attribute type 1 has an invalid length. [ 3381.653327][ T2235] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7864'. [ 3382.953224][ T2246] FAULT_INJECTION: forcing a failure. [ 3382.953224][ T2246] name failslab, interval 1, probability 0, space 0, times 0 [ 3382.960197][ T979] usbhid 8-1:0.0: can't add hid device: -71 [ 3382.984841][ T2246] CPU: 0 UID: 0 PID: 2246 Comm: syz.1.7869 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3382.984870][ T2246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3382.984884][ T2246] Call Trace: [ 3382.984892][ T2246] [ 3382.984901][ T2246] dump_stack_lvl+0x189/0x250 [ 3382.984929][ T2246] ? __pfx____ratelimit+0x10/0x10 [ 3382.984955][ T2246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3382.984978][ T2246] ? __pfx__printk+0x10/0x10 [ 3382.985011][ T2246] ? __pfx___might_resched+0x10/0x10 [ 3382.985032][ T2246] ? fs_reclaim_acquire+0x7d/0x100 [ 3382.985068][ T2246] should_fail_ex+0x414/0x560 [ 3382.985100][ T2246] should_failslab+0xa8/0x100 [ 3382.985129][ T2246] __kmalloc_noprof+0xcb/0x4f0 [ 3382.985152][ T2246] ? kfree+0x4d/0x440 [ 3382.985171][ T2246] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3382.985201][ T2246] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3382.985227][ T2246] ? tomoyo_domain+0xd9/0x130 [ 3382.985258][ T2246] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3382.985279][ T2246] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3382.985303][ T2246] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3382.985344][ T2246] ? __lock_acquire+0xab9/0xd20 [ 3382.985384][ T2246] ? __fget_files+0x2a/0x420 [ 3382.985418][ T2246] ? __fget_files+0x2a/0x420 [ 3382.985446][ T2246] ? __fget_files+0x3a0/0x420 [ 3382.985473][ T2246] ? __fget_files+0x2a/0x420 [ 3382.985507][ T2246] security_file_ioctl+0xcb/0x2d0 [ 3382.985541][ T2246] __se_sys_ioctl+0x47/0x170 [ 3382.985569][ T2246] do_syscall_64+0xfa/0x3b0 [ 3382.985596][ T2246] ? lockdep_hardirqs_on+0x9c/0x150 [ 3382.985621][ T2246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3382.985642][ T2246] ? clear_bhb_loop+0x60/0xb0 [ 3382.985667][ T2246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3382.985696][ T2246] RIP: 0033:0x7fa3dfd8e929 [ 3382.985715][ T2246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3382.985734][ T2246] RSP: 002b:00007fa3e0c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3382.985755][ T2246] RAX: ffffffffffffffda RBX: 00007fa3dffb5fa0 RCX: 00007fa3dfd8e929 [ 3382.985770][ T2246] RDX: 0000200000000040 RSI: 000000004040aea0 RDI: 0000000000000008 [ 3382.985784][ T2246] RBP: 00007fa3e0c97090 R08: 0000000000000000 R09: 0000000000000000 [ 3382.985798][ T2246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3382.985810][ T2246] R13: 0000000000000000 R14: 00007fa3dffb5fa0 R15: 00007fff81475d58 [ 3382.985850][ T2246] [ 3382.986009][ T979] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3382.987087][ T2246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3383.057413][ T979] usb 8-1: USB disconnect, device number 23 [ 3391.638022][ T2318] lo speed is unknown, defaulting to 1000 [ 3391.691131][ T2318] lo speed is unknown, defaulting to 1000 [ 3391.740318][ T2318] lo speed is unknown, defaulting to 1000 [ 3391.998494][ T2341] netlink: 'syz.9.7901': attribute type 29 has an invalid length. [ 3392.019580][ T2341] kernel read not supported for file /  (pid: 2341 comm: syz.9.7901) [ 3392.078177][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 3392.078198][ T30] audit: type=1800 audit(2000002523.959:1012): pid=2341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7901" name=200120 dev="mqueue" ino=140347 res=0 errno=0 [ 3392.094304][ T2346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7902'. [ 3393.223533][T14935] lo speed is unknown, defaulting to 1000 [ 3393.239193][ T2318] infiniband syz0: set active [ 3393.260144][ T2318] infiniband syz0: added lo [ 3393.310558][ T2318] syz0: rxe_create_cq: returned err = -12 [ 3393.419174][ T2318] infiniband syz0: Couldn't create ib_mad CQ [ 3393.429229][ T2318] infiniband syz0: Couldn't open port 1 [ 3393.570770][ T2318] RDS/IB: syz0: added [ 3393.580056][ T2318] smc: adding ib device syz0 with port count 1 [ 3393.590882][ T2318] smc: ib device syz0 port 1 has pnetid [ 3393.601261][T32351] lo speed is unknown, defaulting to 1000 [ 3393.611049][ T2318] lo speed is unknown, defaulting to 1000 [ 3393.698352][ T2363] netlink: 'syz.9.7907': attribute type 8 has an invalid length. [ 3393.737923][ T2365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7908'. [ 3395.095726][ T2318] lo speed is unknown, defaulting to 1000 [ 3395.344933][ T2381] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7914'. [ 3396.511895][ T2318] lo speed is unknown, defaulting to 1000 [ 3396.746575][ T2402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7921'. [ 3397.103790][ T2318] lo speed is unknown, defaulting to 1000 [ 3398.326679][ T2318] lo speed is unknown, defaulting to 1000 [ 3401.242577][T20108] Bluetooth: hci0: command 0x0000 tx timeout [ 3401.622165][ T2462] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7937'. [ 3405.225416][ T2479] netlink: 'syz.9.7941': attribute type 1 has an invalid length. [ 3405.233347][ T2479] netlink: 500 bytes leftover after parsing attributes in process `syz.9.7941'. [ 3407.506493][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 3408.092379][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 3408.162995][ T9] usb 8-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 3408.337514][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3408.351867][ T9] usb 8-1: Product: syz [ 3408.358114][ T2521] FAULT_INJECTION: forcing a failure. [ 3408.358114][ T2521] name failslab, interval 1, probability 0, space 0, times 0 [ 3408.720799][ T2521] CPU: 1 UID: 0 PID: 2521 Comm: syz.5.7954 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3408.720828][ T2521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3408.720842][ T2521] Call Trace: [ 3408.720851][ T2521] [ 3408.720860][ T2521] dump_stack_lvl+0x189/0x250 [ 3408.720888][ T2521] ? irqentry_exit+0x74/0x90 [ 3408.720917][ T2521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3408.720964][ T2521] should_fail_ex+0x414/0x560 [ 3408.721016][ T2521] should_failslab+0xa8/0x100 [ 3408.721051][ T2521] __kmalloc_noprof+0xcb/0x4f0 [ 3408.721076][ T2521] ? kfree+0x4d/0x440 [ 3408.721096][ T2521] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3408.721130][ T2521] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3408.721159][ T2521] ? tomoyo_domain+0xd9/0x130 [ 3408.721193][ T2521] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3408.721216][ T2521] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3408.721241][ T2521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3408.721291][ T2521] ? __lock_acquire+0xab9/0xd20 [ 3408.721336][ T2521] ? __fget_files+0x2a/0x420 [ 3408.721370][ T2521] ? __fget_files+0x2a/0x420 [ 3408.721399][ T2521] ? __fget_files+0x3a0/0x420 [ 3408.721427][ T2521] ? __fget_files+0x2a/0x420 [ 3408.721463][ T2521] security_file_ioctl+0xcb/0x2d0 [ 3408.721498][ T2521] __se_sys_ioctl+0x47/0x170 [ 3408.721527][ T2521] do_syscall_64+0xfa/0x3b0 [ 3408.721554][ T2521] ? lockdep_hardirqs_on+0x9c/0x150 [ 3408.721581][ T2521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3408.721602][ T2521] ? clear_bhb_loop+0x60/0xb0 [ 3408.721628][ T2521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3408.721649][ T2521] RIP: 0033:0x7efc5f98e929 [ 3408.721668][ T2521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3408.721687][ T2521] RSP: 002b:00007efc60711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3408.721709][ T2521] RAX: ffffffffffffffda RBX: 00007efc5fbb5fa0 RCX: 00007efc5f98e929 [ 3408.721725][ T2521] RDX: 0000200000000500 RSI: 000000004004550d RDI: 0000000000000004 [ 3408.721740][ T2521] RBP: 00007efc60711090 R08: 0000000000000000 R09: 0000000000000000 [ 3408.721753][ T2521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3408.721766][ T2521] R13: 0000000000000000 R14: 00007efc5fbb5fa0 R15: 00007ffe25ca32d8 [ 3408.721802][ T2521] [ 3408.881658][ T9] usb 8-1: Manufacturer: syz [ 3408.898353][ C1] vkms_vblank_simulate: vblank timer overrun [ 3408.960152][ C1] vkms_vblank_simulate: vblank timer overrun [ 3408.968461][ T2521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3408.983399][ T9] usb 8-1: SerialNumber: syz [ 3409.114123][ T9] usb 8-1: config 0 descriptor?? [ 3409.139069][ T9] rtl8150 8-1:0.0: couldn't find required endpoints [ 3409.172867][ T9] rtl8150 8-1:0.0: probe with driver rtl8150 failed with error -5 [ 3409.524219][ T9] usb 8-1: USB disconnect, device number 24 [ 3410.523033][ T2543] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7959'. [ 3413.852686][ T2578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7969'. [ 3413.862572][ T2578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7969'. [ 3413.872681][ T2578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7969'. [ 3415.612514][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 3416.062560][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 3416.073991][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3416.092599][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3416.103349][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3416.114779][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3416.130643][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3416.155838][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3416.320585][ T2601] netlink: 'syz.7.7980': attribute type 23 has an invalid length. [ 3416.347885][ T2601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3416.890756][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 3418.274617][ T9] usbtmc 6-1:16.0: can't read capabilities [ 3419.357758][ T9] usb 6-1: USB disconnect, device number 50 [ 3419.589157][T21469] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 3419.753109][T21469] usb 8-1: Using ep0 maxpacket: 32 [ 3419.760332][T21469] usb 8-1: config 0 has no interfaces? [ 3419.768353][T21469] usb 8-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 3419.819829][T21469] usb 8-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 3419.856052][T21469] usb 8-1: Product: syz [ 3419.901273][T21469] usb 8-1: Manufacturer: syz [ 3419.911429][T21469] usb 8-1: SerialNumber: syz [ 3420.385935][T21469] usb 8-1: config 0 descriptor?? [ 3421.023830][T14935] usb 8-1: USB disconnect, device number 25 [ 3421.089323][ T2649] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.7992'. [ 3423.665050][ T2679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8001'. [ 3424.890673][ T2690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8003'. [ 3425.429134][ T2697] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8004'. [ 3426.395447][ T2696] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.8005'. [ 3427.726410][ T2718] FAULT_INJECTION: forcing a failure. [ 3427.726410][ T2718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3427.937318][ T2718] CPU: 1 UID: 0 PID: 2718 Comm: syz.5.8011 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3427.937350][ T2718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3427.937365][ T2718] Call Trace: [ 3427.937374][ T2718] [ 3427.937384][ T2718] dump_stack_lvl+0x189/0x250 [ 3427.937416][ T2718] ? __pfx____ratelimit+0x10/0x10 [ 3427.937445][ T2718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3427.937469][ T2718] ? __pfx__printk+0x10/0x10 [ 3427.937499][ T2718] ? __might_fault+0xb0/0x130 [ 3427.937540][ T2718] should_fail_ex+0x414/0x560 [ 3427.937575][ T2718] _copy_from_user+0x2d/0xb0 [ 3427.937602][ T2718] ___sys_sendmsg+0x158/0x2a0 [ 3427.937639][ T2718] ? __pfx____sys_sendmsg+0x10/0x10 [ 3427.937715][ T2718] ? __fget_files+0x2a/0x420 [ 3427.937744][ T2718] ? __fget_files+0x3a0/0x420 [ 3427.937787][ T2718] __x64_sys_sendmsg+0x19b/0x260 [ 3427.937823][ T2718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3427.937867][ T2718] ? __pfx_ksys_write+0x10/0x10 [ 3427.937901][ T2718] ? do_syscall_64+0xbe/0x3b0 [ 3427.937935][ T2718] do_syscall_64+0xfa/0x3b0 [ 3427.937964][ T2718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3427.937984][ T2718] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3427.938005][ T2718] ? clear_bhb_loop+0x60/0xb0 [ 3427.938032][ T2718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3427.938052][ T2718] RIP: 0033:0x7efc5f98e929 [ 3427.938072][ T2718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3427.938091][ T2718] RSP: 002b:00007efc60711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3427.938114][ T2718] RAX: ffffffffffffffda RBX: 00007efc5fbb5fa0 RCX: 00007efc5f98e929 [ 3427.938129][ T2718] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 3427.938143][ T2718] RBP: 00007efc60711090 R08: 0000000000000000 R09: 0000000000000000 [ 3427.938156][ T2718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3427.938169][ T2718] R13: 0000000000000000 R14: 00007efc5fbb5fa0 R15: 00007ffe25ca32d8 [ 3427.938204][ T2718] [ 3430.373564][ T2759] netlink: 'syz.9.8021': attribute type 72 has an invalid length. [ 3432.008869][ T2781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3437.122758][ T2820] netlink: 'syz.5.8035': attribute type 72 has an invalid length. [ 3438.540089][ T2860] bond2: entered promiscuous mode [ 3438.563366][ T2860] bond2: entered allmulticast mode [ 3438.577143][ T2860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3438.709747][ T2854] geneve2: entered promiscuous mode [ 3438.715065][ T2854] geneve2: entered allmulticast mode [ 3438.743337][ T720] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3438.780707][ T720] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3439.491483][ T720] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3439.532280][ T720] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3439.903327][ T2883] netlink: 'syz.9.8052': attribute type 72 has an invalid length. [ 3442.877420][ T2915] netlink: 1068 bytes leftover after parsing attributes in process `syz.7.8062'. [ 3443.355166][ T2924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8064'. [ 3444.767379][ T2934] netlink: 'syz.9.8068': attribute type 21 has an invalid length. [ 3444.797388][ T2934] netlink: 128 bytes leftover after parsing attributes in process `syz.9.8068'. [ 3444.817784][ T2934] netlink: 'syz.9.8068': attribute type 5 has an invalid length. [ 3444.839154][ T2934] netlink: 3 bytes leftover after parsing attributes in process `syz.9.8068'. [ 3445.012574][ T2935] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.8065'. [ 3446.831109][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8075'. [ 3447.439180][ T2954] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8074'. [ 3447.449798][ T2958] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8072'. [ 3447.814833][ T2956] usb usb8: usbfs: process 2956 (syz.1.8075) did not claim interface 0 before use [ 3449.696399][ T2981] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.8083'. [ 3451.170101][ T3002] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8088'. [ 3451.857054][ T3010] netlink: 'syz.9.8091': attribute type 8 has an invalid length. [ 3452.007603][ T3012] lo speed is unknown, defaulting to 1000 [ 3452.025290][ T3015] netlink: 'syz.9.8091': attribute type 8 has an invalid length. [ 3453.053852][ T3024] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.8096'. [ 3454.522468][T31279] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3454.798737][T31279] usb 2-1: Using ep0 maxpacket: 16 [ 3455.112911][T31279] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3455.232816][T31279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.344240][T31279] usb 2-1: Product: syz [ 3455.399027][T31279] usb 2-1: Manufacturer: syz [ 3455.521100][T31279] usb 2-1: SerialNumber: syz [ 3456.114248][T31279] usb 2-1: config 0 descriptor?? [ 3456.211414][T31279] usb 2-1: can't set config #0, error -71 [ 3456.279140][T31279] usb 2-1: USB disconnect, device number 16 [ 3456.970780][ T3057] FAULT_INJECTION: forcing a failure. [ 3456.970780][ T3057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3456.990865][ T3057] CPU: 1 UID: 0 PID: 3057 Comm: syz.7.8108 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3456.990896][ T3057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3456.990910][ T3057] Call Trace: [ 3456.990919][ T3057] [ 3456.990929][ T3057] dump_stack_lvl+0x189/0x250 [ 3456.990960][ T3057] ? __pfx____ratelimit+0x10/0x10 [ 3456.990988][ T3057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3456.991012][ T3057] ? __pfx__printk+0x10/0x10 [ 3456.991057][ T3057] should_fail_ex+0x414/0x560 [ 3456.991091][ T3057] strncpy_from_user+0x36/0x290 [ 3456.991122][ T3057] path_setxattrat+0x150/0x3a0 [ 3456.991158][ T3057] ? __pfx_path_setxattrat+0x10/0x10 [ 3456.991219][ T3057] ? ksys_write+0x1e1/0x250 [ 3456.991249][ T3057] ? __pfx_ksys_write+0x10/0x10 [ 3456.991272][ T3057] ? rcu_is_watching+0x15/0xb0 [ 3456.991302][ T3057] __x64_sys_fsetxattr+0xbc/0xe0 [ 3456.991349][ T3057] do_syscall_64+0xfa/0x3b0 [ 3456.991376][ T3057] ? lockdep_hardirqs_on+0x9c/0x150 [ 3456.991402][ T3057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3456.991422][ T3057] ? clear_bhb_loop+0x60/0xb0 [ 3456.991448][ T3057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3456.991467][ T3057] RIP: 0033:0x7fe00cd8e929 [ 3456.991485][ T3057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3456.991508][ T3057] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 3456.991530][ T3057] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3456.991545][ T3057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3456.991558][ T3057] RBP: 00007fe00db98090 R08: 0000000000000002 R09: 0000000000000000 [ 3456.991570][ T3057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3456.991583][ T3057] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3456.991615][ T3057] [ 3457.479257][ T3067] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 3457.650466][ T3075] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8113'. [ 3457.665260][ T3075] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8113'. [ 3462.535958][ T3146] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8138'. [ 3464.930170][ T3160] usb usb8: usbfs: process 3160 (syz.7.8143) did not claim interface 0 before use [ 3465.877632][ T3182] FAULT_INJECTION: forcing a failure. [ 3465.877632][ T3182] name failslab, interval 1, probability 0, space 0, times 0 [ 3465.901807][ T3182] CPU: 1 UID: 0 PID: 3182 Comm: syz.7.8151 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3465.901838][ T3182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3465.901852][ T3182] Call Trace: [ 3465.901860][ T3182] [ 3465.901869][ T3182] dump_stack_lvl+0x189/0x250 [ 3465.901897][ T3182] ? __pfx____ratelimit+0x10/0x10 [ 3465.901924][ T3182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3465.901953][ T3182] ? __pfx__printk+0x10/0x10 [ 3465.901986][ T3182] ? __pfx___might_resched+0x10/0x10 [ 3465.902006][ T3182] ? fs_reclaim_acquire+0x7d/0x100 [ 3465.902039][ T3182] should_fail_ex+0x414/0x560 [ 3465.902087][ T3182] should_failslab+0xa8/0x100 [ 3465.902117][ T3182] __kmalloc_noprof+0xcb/0x4f0 [ 3465.902140][ T3182] ? kfree+0x4d/0x440 [ 3465.902159][ T3182] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3465.902190][ T3182] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3465.902219][ T3182] ? tomoyo_domain+0xd9/0x130 [ 3465.902251][ T3182] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3465.902272][ T3182] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3465.902296][ T3182] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3465.902336][ T3182] ? __lock_acquire+0xab9/0xd20 [ 3465.902380][ T3182] ? __fget_files+0x2a/0x420 [ 3465.902411][ T3182] ? __fget_files+0x2a/0x420 [ 3465.902438][ T3182] ? __fget_files+0x3a0/0x420 [ 3465.902465][ T3182] ? __fget_files+0x2a/0x420 [ 3465.902499][ T3182] security_file_ioctl+0xcb/0x2d0 [ 3465.902533][ T3182] __se_sys_ioctl+0x47/0x170 [ 3465.902560][ T3182] do_syscall_64+0xfa/0x3b0 [ 3465.902586][ T3182] ? lockdep_hardirqs_on+0x9c/0x150 [ 3465.902612][ T3182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3465.902631][ T3182] ? clear_bhb_loop+0x60/0xb0 [ 3465.902657][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3465.902677][ T3182] RIP: 0033:0x7fe00cd8e929 [ 3465.902695][ T3182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3465.902713][ T3182] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3465.902735][ T3182] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3465.902750][ T3182] RDX: 0000200000000100 RSI: 0000000000005401 RDI: 0000000000000003 [ 3465.902764][ T3182] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3465.902777][ T3182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3465.902789][ T3182] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3465.902822][ T3182] [ 3466.146331][ C1] vkms_vblank_simulate: vblank timer overrun [ 3466.171492][ T3182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3467.854593][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 3468.636627][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 3468.790735][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3468.849831][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3469.737566][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3469.768428][ T9] pvrusb2: ********** [ 3469.786575][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3469.820846][ T9] pvrusb2: Important functionality might not be entirely working. [ 3469.836910][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3469.872107][ T9] pvrusb2: ********** [ 3469.934459][ T2344] pvrusb2: Invalid write control endpoint [ 3469.943462][ T9] usb 8-1: USB disconnect, device number 26 [ 3470.164683][ T2344] pvrusb2: Invalid write control endpoint [ 3470.336373][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3470.348531][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3470.357298][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3470.382440][ T2344] pvrusb2: Device being rendered inoperable [ 3470.396643][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 3470.404211][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 3470.707394][ T2344] pvrusb2: Attached sub-driver cx25840 [ 3470.714284][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3470.724543][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3474.886054][ T3264] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8172'. [ 3474.987425][ T3264] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8172'. [ 3475.065032][ T3264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8172'. [ 3477.474771][ T3297] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8183'. [ 3477.960543][ T3309] binder: 3307:3309 unknown command 0 [ 3477.980593][ T3309] binder: 3307:3309 ioctl c0306201 200000000c40 returned -22 [ 3478.774119][ T3313] FAULT_INJECTION: forcing a failure. [ 3478.774119][ T3313] name failslab, interval 1, probability 0, space 0, times 0 [ 3478.842403][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz.7.8189 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3478.842432][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3478.842444][ T3313] Call Trace: [ 3478.842462][ T3313] [ 3478.842472][ T3313] dump_stack_lvl+0x189/0x250 [ 3478.842503][ T3313] ? __pfx____ratelimit+0x10/0x10 [ 3478.842562][ T3313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3478.842586][ T3313] ? __pfx__printk+0x10/0x10 [ 3478.842620][ T3313] ? __pfx___might_resched+0x10/0x10 [ 3478.842640][ T3313] ? fs_reclaim_acquire+0x7d/0x100 [ 3478.842675][ T3313] should_fail_ex+0x414/0x560 [ 3478.842706][ T3313] should_failslab+0xa8/0x100 [ 3478.842736][ T3313] __kmalloc_noprof+0xcb/0x4f0 [ 3478.842759][ T3313] ? kfree+0x4d/0x440 [ 3478.842778][ T3313] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3478.842810][ T3313] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3478.842837][ T3313] ? tomoyo_domain+0xd9/0x130 [ 3478.842869][ T3313] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3478.842909][ T3313] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3478.842934][ T3313] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3478.842982][ T3313] ? __lock_acquire+0xab9/0xd20 [ 3478.843025][ T3313] ? __fget_files+0x2a/0x420 [ 3478.843059][ T3313] ? __fget_files+0x2a/0x420 [ 3478.843086][ T3313] ? __fget_files+0x3a0/0x420 [ 3478.843114][ T3313] ? __fget_files+0x2a/0x420 [ 3478.843148][ T3313] security_file_ioctl+0xcb/0x2d0 [ 3478.843183][ T3313] __se_sys_ioctl+0x47/0x170 [ 3478.843212][ T3313] do_syscall_64+0xfa/0x3b0 [ 3478.843238][ T3313] ? lockdep_hardirqs_on+0x9c/0x150 [ 3478.843264][ T3313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3478.843285][ T3313] ? clear_bhb_loop+0x60/0xb0 [ 3478.843311][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3478.843330][ T3313] RIP: 0033:0x7fe00cd8e929 [ 3478.843349][ T3313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3478.843367][ T3313] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3478.843390][ T3313] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3478.843405][ T3313] RDX: 0000200000000c40 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3478.843419][ T3313] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3478.843432][ T3313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3478.843445][ T3313] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3478.843480][ T3313] [ 3478.843602][ T3313] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3479.199253][ T3313] binder: 3312:3313 unknown command 0 [ 3479.251824][ T3313] binder: 3312:3313 ioctl c0306201 200000000c40 returned -22 [ 3479.557639][ T3324] @: renamed from vlan0 (while UP) [ 3479.633073][ T3326] capability: warning: `syz.7.8194' uses 32-bit capabilities (legacy support in use) [ 3479.935952][T21469] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 3480.116652][T21469] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3480.142578][T21469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3480.161386][T21469] usb 8-1: Product: syz [ 3480.196414][T21469] usb 8-1: Manufacturer: syz [ 3480.218124][T21469] usb 8-1: SerialNumber: syz [ 3480.233358][T21469] usb 8-1: config 0 descriptor?? [ 3481.217450][T21469] usb 8-1: Firmware version (0.0) predates our first public release. [ 3481.248863][T21469] usb 8-1: Please update to version 0.2 or newer [ 3481.433725][T21469] usb 8-1: Firmware: build [ 3481.932803][T21469] usb 8-1: USB disconnect, device number 27 [ 3483.579378][ T30] audit: type=1804 audit(2000002615.439:1013): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8207" name="/newroot/188/file1" dev="fuse" ino=1 res=1 errno=0 [ 3483.859786][ T30] audit: type=1800 audit(2000002615.449:1014): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8207" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3483.900083][ T30] audit: type=1800 audit(2000002615.489:1015): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8207" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3486.229217][ T3404] netlink: 'syz.7.8215': attribute type 1 has an invalid length. [ 3486.237127][ T3404] netlink: 500 bytes leftover after parsing attributes in process `syz.7.8215'. [ 3487.474493][ T3410] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8216'. [ 3488.730820][ T3418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8219'. [ 3488.774812][ T3422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3488.780898][ T3418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8219'. [ 3488.833649][T21469] lo speed is unknown, defaulting to 1000 [ 3488.901468][ T3418] ip6tnl1: entered promiscuous mode [ 3490.126218][ T3446] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8228'. [ 3491.088194][ T3464] FAULT_INJECTION: forcing a failure. [ 3491.088194][ T3464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3491.202329][ T3464] CPU: 1 UID: 0 PID: 3464 Comm: syz.1.8237 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3491.202390][ T3464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3491.202404][ T3464] Call Trace: [ 3491.202413][ T3464] [ 3491.202423][ T3464] dump_stack_lvl+0x189/0x250 [ 3491.202453][ T3464] ? __pfx____ratelimit+0x10/0x10 [ 3491.202481][ T3464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3491.202506][ T3464] ? __pfx__printk+0x10/0x10 [ 3491.202548][ T3464] ? __might_fault+0xb0/0x130 [ 3491.202586][ T3464] should_fail_ex+0x414/0x560 [ 3491.202618][ T3464] _copy_from_user+0x2d/0xb0 [ 3491.202646][ T3464] ucma_write+0x158/0x2e0 [ 3491.202694][ T3464] ? __pfx_ucma_write+0x10/0x10 [ 3491.202720][ T3464] ? security_file_permission+0x75/0x290 [ 3491.202754][ T3464] ? rw_verify_area+0x255/0x4d0 [ 3491.202785][ T3464] vfs_writev+0x4b3/0x960 [ 3491.202808][ T3464] ? __pfx_ucma_write+0x10/0x10 [ 3491.202839][ T3464] ? __pfx_vfs_writev+0x10/0x10 [ 3491.202876][ T3464] ? __fget_files+0x2a/0x420 [ 3491.202912][ T3464] ? __fget_files+0x3a0/0x420 [ 3491.202941][ T3464] ? __fget_files+0x2a/0x420 [ 3491.202981][ T3464] do_writev+0x14d/0x2d0 [ 3491.203004][ T3464] ? __pfx_do_writev+0x10/0x10 [ 3491.203021][ T3464] ? rcu_is_watching+0x15/0xb0 [ 3491.203050][ T3464] ? do_syscall_64+0xbe/0x3b0 [ 3491.203084][ T3464] do_syscall_64+0xfa/0x3b0 [ 3491.203110][ T3464] ? lockdep_hardirqs_on+0x9c/0x150 [ 3491.203136][ T3464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3491.203158][ T3464] ? clear_bhb_loop+0x60/0xb0 [ 3491.203196][ T3464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3491.203216][ T3464] RIP: 0033:0x7fa3dfd8e929 [ 3491.203234][ T3464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3491.203252][ T3464] RSP: 002b:00007fa3e0c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3491.203274][ T3464] RAX: ffffffffffffffda RBX: 00007fa3dffb5fa0 RCX: 00007fa3dfd8e929 [ 3491.203290][ T3464] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 000000000000000d [ 3491.203303][ T3464] RBP: 00007fa3e0c97090 R08: 0000000000000000 R09: 0000000000000000 [ 3491.203316][ T3464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3491.203328][ T3464] R13: 0000000000000000 R14: 00007fa3dffb5fa0 R15: 00007fff81475d58 [ 3491.203369][ T3464] [ 3493.699037][T21469] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 3493.852275][T21469] usb 8-1: Using ep0 maxpacket: 32 [ 3493.859141][T21469] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 3493.867872][T21469] usb 8-1: config 0 has no interface number 0 [ 3493.875625][T21469] usb 8-1: config 0 interface 184 has no altsetting 0 [ 3493.898309][T21469] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3493.907548][T21469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3493.931238][T21469] usb 8-1: Product: syz [ 3493.943875][T21469] usb 8-1: Manufacturer: syz [ 3493.951207][T21469] usb 8-1: SerialNumber: syz [ 3493.964123][T21469] usb 8-1: config 0 descriptor?? [ 3493.975906][T21469] smsc75xx v1.0.0 [ 3494.112718][ T3513] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms [ 3494.229266][ T3513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3494.580762][T21469] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3494.638185][T21469] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3494.690095][T21469] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 3494.740588][T21469] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 3494.750686][T21469] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 3494.781095][T21469] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 3494.825325][T21469] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 3496.373103][T32351] usb 8-1: USB disconnect, device number 28 [ 3499.791470][ T3563] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3500.567248][ T5215] udevd[5215]: worker [3510] terminated by signal 33 (Unknown signal 33) [ 3500.694610][ T5215] udevd[5215]: worker [3443] terminated by signal 33 (Unknown signal 33) [ 3500.751367][ T3569] 9pnet_fd: Insufficient options for proto=fd [ 3501.120509][ T3578] fuse: Unknown parameter '' [ 3501.378179][ T3581] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3502.082538][ T3594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8279'. [ 3506.980241][ T3631] bridge1: entered promiscuous mode [ 3507.719131][ T3634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8294'. [ 3507.875682][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8295'. [ 3508.596215][ T3645] netlink: 'syz.8.8296': attribute type 1 has an invalid length. [ 3508.646353][ T3645] netlink: 500 bytes leftover after parsing attributes in process `syz.8.8296'. [ 3508.762268][ T9] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 3508.958530][ T9] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 3508.976957][ T9] usb 6-1: config 0 has no interface number 0 [ 3508.989601][ T9] usb 6-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 3509.010259][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3509.030486][ T9] usb 6-1: Product: syz [ 3509.039070][ T9] usb 6-1: Manufacturer: syz [ 3509.052862][ T9] usb 6-1: SerialNumber: syz [ 3509.078825][ T9] usb 6-1: config 0 descriptor?? [ 3509.332643][ T3638] FAULT_INJECTION: forcing a failure. [ 3509.332643][ T3638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3509.362630][ T3638] CPU: 1 UID: 0 PID: 3638 Comm: syz.5.8295 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3509.362662][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3509.362686][ T3638] Call Trace: [ 3509.362696][ T3638] [ 3509.362705][ T3638] dump_stack_lvl+0x189/0x250 [ 3509.362781][ T3638] ? __pfx____ratelimit+0x10/0x10 [ 3509.362809][ T3638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3509.362837][ T3638] ? __pfx__printk+0x10/0x10 [ 3509.362867][ T3638] ? __might_fault+0xb0/0x130 [ 3509.362915][ T3638] should_fail_ex+0x414/0x560 [ 3509.362948][ T3638] _copy_from_user+0x2d/0xb0 [ 3509.362977][ T3638] ___sys_sendmsg+0x158/0x2a0 [ 3509.363012][ T3638] ? __pfx____sys_sendmsg+0x10/0x10 [ 3509.363086][ T3638] ? __fget_files+0x2a/0x420 [ 3509.363116][ T3638] ? __fget_files+0x3a0/0x420 [ 3509.363158][ T3638] __x64_sys_sendmsg+0x19b/0x260 [ 3509.363193][ T3638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3509.363237][ T3638] ? rcu_is_watching+0x15/0xb0 [ 3509.363268][ T3638] ? do_syscall_64+0xbe/0x3b0 [ 3509.363300][ T3638] do_syscall_64+0xfa/0x3b0 [ 3509.363326][ T3638] ? lockdep_hardirqs_on+0x9c/0x150 [ 3509.363353][ T3638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3509.363374][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 3509.363401][ T3638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3509.363437][ T3638] RIP: 0033:0x7efc5f98e929 [ 3509.363456][ T3638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3509.363475][ T3638] RSP: 002b:00007efc60711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3509.363497][ T3638] RAX: ffffffffffffffda RBX: 00007efc5fbb5fa0 RCX: 00007efc5f98e929 [ 3509.363513][ T3638] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 3509.363527][ T3638] RBP: 00007efc60711090 R08: 0000000000000000 R09: 0000000000000000 [ 3509.363540][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3509.363553][ T3638] R13: 0000000000000000 R14: 00007efc5fbb5fa0 R15: 00007ffe25ca32d8 [ 3509.363588][ T3638] [ 3509.371716][ T9] pl2303 6-1:0.161: required endpoints missing [ 3509.888895][ T9] usb 6-1: USB disconnect, device number 51 [ 3512.448823][ T3678] FAULT_INJECTION: forcing a failure. [ 3512.448823][ T3678] name failslab, interval 1, probability 0, space 0, times 0 [ 3512.493278][ T3678] CPU: 1 UID: 0 PID: 3678 Comm: syz.7.8309 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3512.493308][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3512.493321][ T3678] Call Trace: [ 3512.493330][ T3678] [ 3512.493340][ T3678] dump_stack_lvl+0x189/0x250 [ 3512.493370][ T3678] ? __pfx____ratelimit+0x10/0x10 [ 3512.493396][ T3678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3512.493421][ T3678] ? __pfx__printk+0x10/0x10 [ 3512.493455][ T3678] ? __pfx___might_resched+0x10/0x10 [ 3512.493477][ T3678] ? fs_reclaim_acquire+0x7d/0x100 [ 3512.493513][ T3678] should_fail_ex+0x414/0x560 [ 3512.493547][ T3678] should_failslab+0xa8/0x100 [ 3512.493579][ T3678] __kmalloc_noprof+0xcb/0x4f0 [ 3512.493603][ T3678] ? kfree+0x4d/0x440 [ 3512.493623][ T3678] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3512.493656][ T3678] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3512.493685][ T3678] ? tomoyo_domain+0xd9/0x130 [ 3512.493718][ T3678] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3512.493741][ T3678] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3512.493766][ T3678] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3512.493808][ T3678] ? __lock_acquire+0xab9/0xd20 [ 3512.493852][ T3678] ? __fget_files+0x2a/0x420 [ 3512.493891][ T3678] ? __fget_files+0x2a/0x420 [ 3512.493918][ T3678] ? __fget_files+0x3a0/0x420 [ 3512.493945][ T3678] ? __fget_files+0x2a/0x420 [ 3512.493980][ T3678] security_file_ioctl+0xcb/0x2d0 [ 3512.494027][ T3678] __se_sys_ioctl+0x47/0x170 [ 3512.494054][ T3678] do_syscall_64+0xfa/0x3b0 [ 3512.494080][ T3678] ? lockdep_hardirqs_on+0x9c/0x150 [ 3512.494105][ T3678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3512.494125][ T3678] ? clear_bhb_loop+0x60/0xb0 [ 3512.494161][ T3678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3512.494181][ T3678] RIP: 0033:0x7fe00cd8e929 [ 3512.494199][ T3678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3512.494216][ T3678] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3512.494237][ T3678] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3512.494252][ T3678] RDX: 0000200000000100 RSI: 00000000c0044dff RDI: 0000000000000005 [ 3512.494265][ T3678] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3512.494278][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3512.494290][ T3678] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3512.494323][ T3678] [ 3512.494373][ T3678] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3513.265338][ T3692] netlink: 'syz.1.8315': attribute type 1 has an invalid length. [ 3513.277216][ T3692] netlink: 500 bytes leftover after parsing attributes in process `syz.1.8315'. [ 3513.733579][T31279] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 3514.064235][T31279] usb 8-1: Using ep0 maxpacket: 32 [ 3514.088619][T31279] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 3514.228749][ T3707] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8319'. [ 3514.283658][T31279] usb 8-1: config 0 has no interface number 0 [ 3514.304120][T31279] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3514.507164][T31279] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3514.517653][ T3714] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8321'. [ 3514.540425][T31279] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3514.557700][T31279] usb 8-1: Product: syz [ 3514.561997][T31279] usb 8-1: Manufacturer: syz [ 3514.567102][T31279] usb 8-1: SerialNumber: syz [ 3514.660475][T31279] usb 8-1: config 0 descriptor?? [ 3514.680013][T31279] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3514.720588][T31279] em28xx 8-1:0.132: Video interface 132 found: [ 3515.072953][T31279] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 3515.364471][ T3697] FAULT_INJECTION: forcing a failure. [ 3515.364471][ T3697] name failslab, interval 1, probability 0, space 0, times 0 [ 3515.426743][ T3697] CPU: 0 UID: 0 PID: 3697 Comm: syz.7.8317 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3515.426774][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3515.426788][ T3697] Call Trace: [ 3515.426795][ T3697] [ 3515.426803][ T3697] dump_stack_lvl+0x189/0x250 [ 3515.426829][ T3697] ? __pfx____ratelimit+0x10/0x10 [ 3515.426849][ T3697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3515.426865][ T3697] ? __pfx__printk+0x10/0x10 [ 3515.426890][ T3697] ? __pfx___might_resched+0x10/0x10 [ 3515.426905][ T3697] ? fs_reclaim_acquire+0x7d/0x100 [ 3515.426929][ T3697] should_fail_ex+0x414/0x560 [ 3515.426952][ T3697] should_failslab+0xa8/0x100 [ 3515.426974][ T3697] __kmalloc_noprof+0xcb/0x4f0 [ 3515.426991][ T3697] ? kfree+0x4d/0x440 [ 3515.427005][ T3697] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3515.427028][ T3697] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3515.427072][ T3697] ? tomoyo_domain+0xd9/0x130 [ 3515.427096][ T3697] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3515.427111][ T3697] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3515.427129][ T3697] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3515.427158][ T3697] ? __lock_acquire+0xab9/0xd20 [ 3515.427188][ T3697] ? __fget_files+0x2a/0x420 [ 3515.427212][ T3697] ? __fget_files+0x2a/0x420 [ 3515.427234][ T3697] ? __fget_files+0x3a0/0x420 [ 3515.427254][ T3697] ? __fget_files+0x2a/0x420 [ 3515.427279][ T3697] security_file_ioctl+0xcb/0x2d0 [ 3515.427305][ T3697] __se_sys_ioctl+0x47/0x170 [ 3515.427325][ T3697] do_syscall_64+0xfa/0x3b0 [ 3515.427346][ T3697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3515.427361][ T3697] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3515.427376][ T3697] ? clear_bhb_loop+0x60/0xb0 [ 3515.427394][ T3697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3515.427408][ T3697] RIP: 0033:0x7fe00cd8e929 [ 3515.427422][ T3697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3515.427435][ T3697] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3515.427450][ T3697] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3515.427462][ T3697] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 3515.427471][ T3697] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3515.427481][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3515.427490][ T3697] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3515.427514][ T3697] [ 3515.428367][ T3697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3516.272743][T31279] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 3516.284099][T31279] em28xx 8-1:0.132: board has no eeprom [ 3516.300746][ T3697] em28xx 8-1:0.132: failed to trigger read from i2c address 0x8 (error=-5) [ 3516.362798][ T3711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8320'. [ 3516.391927][ T3711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8320'. [ 3516.392274][T31279] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3516.460615][T31279] em28xx 8-1:0.132: analog set to bulk mode. [ 3516.492274][T20321] em28xx 8-1:0.132: Registering V4L2 extension [ 3516.542648][T31279] usb 8-1: USB disconnect, device number 29 [ 3516.593867][T31279] em28xx 8-1:0.132: Disconnecting em28xx [ 3516.718114][ T3719] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3517.265527][ T3726] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3517.339721][T20321] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 3517.412227][T20321] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 3517.474777][T20321] em28xx 8-1:0.132: No AC97 audio processor [ 3517.569502][T20321] usb 8-1: Decoder not found [ 3517.584976][T20321] em28xx 8-1:0.132: failed to create media graph [ 3517.595053][T20321] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 3517.626578][T20321] em28xx 8-1:0.132: Remote control support is not available for this card. [ 3517.724243][T31279] em28xx 8-1:0.132: Closing input extension [ 3517.759637][T31279] em28xx 8-1:0.132: Freeing device [ 3518.128970][ T3744] netlink: 'syz.7.8330': attribute type 1 has an invalid length. [ 3518.164476][ T3744] netlink: 500 bytes leftover after parsing attributes in process `syz.7.8330'. [ 3519.192432][T14935] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 3519.250559][ T979] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 3519.486938][ T979] usb 2-1: device descriptor read/64, error -71 [ 3519.658998][T14935] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3519.675651][T14935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3519.696581][T14935] usb 8-1: config 0 descriptor?? [ 3519.802303][ T979] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 3519.931205][T14935] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3519.952393][ T979] usb 2-1: device descriptor read/64, error -71 [ 3520.072594][ T979] usb usb2-port1: attempt power cycle [ 3520.213038][T14935] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 3520.246765][T14935] [drm] Initialized udl on minor 2 [ 3520.423487][ T3773] ubi: mtd0 is already attached to ubi31 [ 3520.442835][ T979] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3520.582562][ T979] usb 2-1: device descriptor read/8, error -71 [ 3520.627829][ T3783] fuse: Bad value for 'fd' [ 3520.769661][ T3783] devpts: Unknown parameter 'fd' [ 3520.832572][ T979] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3520.880140][ T979] usb 2-1: device descriptor read/8, error -71 [ 3521.003806][ T979] usb usb2-port1: unable to enumerate USB device [ 3521.200077][ T3796] netlink: 'syz.9.8346': attribute type 1 has an invalid length. [ 3521.207963][ T3796] netlink: 500 bytes leftover after parsing attributes in process `syz.9.8346'. [ 3522.834716][T14935] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3522.894980][T14935] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 3523.109498][ T3814] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3523.824276][ T979] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3523.847357][T14935] usb 8-1: USB disconnect, device number 30 [ 3523.868463][ T979] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 3524.974807][ T3428] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 3525.344182][ T3428] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3525.362229][ T3428] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3525.371177][ T3428] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3525.389959][ T3428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3525.403803][ T3428] usb 6-1: Product: syz [ 3525.411665][ T3428] usb 6-1: Manufacturer: syz [ 3525.421866][ T3428] usb 6-1: SerialNumber: syz [ 3525.466235][ T3428] usb 6-1: config 0 descriptor?? [ 3525.511240][ T3428] usb 6-1: selecting invalid altsetting 0 [ 3525.692737][ T9] usb 6-1: USB disconnect, device number 52 [ 3525.972494][ T3700] udevd[3700]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3527.274977][ T3858] netlink: 'syz.1.8362': attribute type 1 has an invalid length. [ 3527.283140][ T3858] netlink: 500 bytes leftover after parsing attributes in process `syz.1.8362'. [ 3527.449788][ T3864] tipc: Started in network mode [ 3527.484865][ T3864] tipc: Node identity b2f9, cluster identity 5 [ 3527.491292][ T3864] tipc: Node number set to 45817 [ 3527.496771][ T3864] tipc: Cannot configure node identity twice [ 3529.292803][ T3428] hid_parser_main: 29 callbacks suppressed [ 3529.292827][ T3428] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 3529.343348][ T3428] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3529.932003][ T3913] FAULT_INJECTION: forcing a failure. [ 3529.932003][ T3913] name failslab, interval 1, probability 0, space 0, times 0 [ 3529.949548][ T3913] CPU: 1 UID: 0 PID: 3913 Comm: syz.7.8381 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3529.949602][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3529.949616][ T3913] Call Trace: [ 3529.949625][ T3913] [ 3529.949634][ T3913] dump_stack_lvl+0x189/0x250 [ 3529.949663][ T3913] ? __pfx____ratelimit+0x10/0x10 [ 3529.949691][ T3913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3529.949715][ T3913] ? __pfx__printk+0x10/0x10 [ 3529.949750][ T3913] ? __pfx___might_resched+0x10/0x10 [ 3529.949771][ T3913] ? fs_reclaim_acquire+0x7d/0x100 [ 3529.949806][ T3913] should_fail_ex+0x414/0x560 [ 3529.949839][ T3913] should_failslab+0xa8/0x100 [ 3529.949869][ T3913] __kmalloc_noprof+0xcb/0x4f0 [ 3529.949892][ T3913] ? kfree+0x4d/0x440 [ 3529.949912][ T3913] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3529.949943][ T3913] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3529.949971][ T3913] ? tomoyo_domain+0xd9/0x130 [ 3529.950004][ T3913] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3529.950025][ T3913] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3529.950049][ T3913] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3529.950094][ T3913] ? __lock_acquire+0xab9/0xd20 [ 3529.950137][ T3913] ? __fget_files+0x2a/0x420 [ 3529.950179][ T3913] ? __fget_files+0x2a/0x420 [ 3529.950205][ T3913] ? __fget_files+0x3a0/0x420 [ 3529.950229][ T3913] ? __fget_files+0x2a/0x420 [ 3529.950260][ T3913] security_file_ioctl+0xcb/0x2d0 [ 3529.950292][ T3913] __se_sys_ioctl+0x47/0x170 [ 3529.950317][ T3913] do_syscall_64+0xfa/0x3b0 [ 3529.950342][ T3913] ? lockdep_hardirqs_on+0x9c/0x150 [ 3529.950367][ T3913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3529.950386][ T3913] ? clear_bhb_loop+0x60/0xb0 [ 3529.950409][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3529.950428][ T3913] RIP: 0033:0x7fe00cd8e929 [ 3529.950463][ T3913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3529.950481][ T3913] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3529.950502][ T3913] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3529.950518][ T3913] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000003 [ 3529.950531][ T3913] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3529.950544][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3529.950568][ T3913] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3529.950610][ T3913] [ 3529.950675][ T3913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3530.112964][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 3530.261101][ T3918] FAULT_INJECTION: forcing a failure. [ 3530.261101][ T3918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3530.285041][ T3918] CPU: 1 UID: 0 PID: 3918 Comm: syz.7.8383 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3530.285070][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3530.285084][ T3918] Call Trace: [ 3530.285093][ T3918] [ 3530.285115][ T3918] dump_stack_lvl+0x189/0x250 [ 3530.285144][ T3918] ? __pfx____ratelimit+0x10/0x10 [ 3530.285171][ T3918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3530.285195][ T3918] ? __pfx__printk+0x10/0x10 [ 3530.285223][ T3918] ? __might_fault+0xb0/0x130 [ 3530.285262][ T3918] should_fail_ex+0x414/0x560 [ 3530.285295][ T3918] _copy_from_user+0x2d/0xb0 [ 3530.285320][ T3918] ___sys_sendmsg+0x158/0x2a0 [ 3530.285363][ T3918] ? __pfx____sys_sendmsg+0x10/0x10 [ 3530.285434][ T3918] ? __fget_files+0x2a/0x420 [ 3530.285462][ T3918] ? __fget_files+0x3a0/0x420 [ 3530.285507][ T3918] __x64_sys_sendmsg+0x19b/0x260 [ 3530.285540][ T3918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3530.285582][ T3918] ? __pfx_ksys_write+0x10/0x10 [ 3530.285605][ T3918] ? rcu_is_watching+0x15/0xb0 [ 3530.285634][ T3918] ? do_syscall_64+0xbe/0x3b0 [ 3530.285664][ T3918] do_syscall_64+0xfa/0x3b0 [ 3530.285689][ T3918] ? lockdep_hardirqs_on+0x9c/0x150 [ 3530.285715][ T3918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3530.285735][ T3918] ? clear_bhb_loop+0x60/0xb0 [ 3530.285760][ T3918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3530.285779][ T3918] RIP: 0033:0x7fe00cd8e929 [ 3530.285816][ T3918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3530.285848][ T3918] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3530.285869][ T3918] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3530.285884][ T3918] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 3530.285897][ T3918] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3530.285910][ T3918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3530.285923][ T3918] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3530.285955][ T3918] [ 3530.503460][ T9] usb 6-1: device descriptor read/64, error -71 [ 3530.742295][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 3531.574901][ T9] usb 6-1: device descriptor read/64, error -71 [ 3531.789361][ T9] usb usb6-port1: attempt power cycle [ 3532.745171][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8391'. [ 3532.763719][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 3533.671293][ T9] usb 6-1: device descriptor read/8, error -71 [ 3535.202248][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 3535.944622][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3536.002211][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3536.021623][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3536.042685][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3536.072184][ T9] usb 6-1: Product: syz [ 3536.082526][ T9] usb 6-1: Manufacturer: syz [ 3536.087172][ T9] usb 6-1: SerialNumber: syz [ 3536.133370][ T9] usb 6-1: config 0 descriptor?? [ 3536.168910][ T9] usb 6-1: selecting invalid altsetting 0 [ 3538.672291][ T9] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 3538.700369][ T3996] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 3538.714379][T20321] usb 6-1: USB disconnect, device number 57 [ 3538.916115][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 3538.927757][ T9] usb 8-1: config 0 has no interface number 0 [ 3538.946929][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3539.008924][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3539.073764][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3539.196034][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3539.235434][ T9] usb 8-1: config 0 descriptor?? [ 3539.252637][ T4026] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3539.307217][ T9] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3542.715371][T21469] usb 8-1: USB disconnect, device number 31 [ 3543.512384][T21469] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 3543.588560][ T4076] FAULT_INJECTION: forcing a failure. [ 3543.588560][ T4076] name failslab, interval 1, probability 0, space 0, times 0 [ 3543.603371][ T4076] CPU: 1 UID: 0 PID: 4076 Comm: syz.5.8421 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3543.603401][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3543.603414][ T4076] Call Trace: [ 3543.603423][ T4076] [ 3543.603433][ T4076] dump_stack_lvl+0x189/0x250 [ 3543.603464][ T4076] ? __pfx____ratelimit+0x10/0x10 [ 3543.603492][ T4076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3543.603517][ T4076] ? __pfx__printk+0x10/0x10 [ 3543.603553][ T4076] ? __pfx___might_resched+0x10/0x10 [ 3543.603575][ T4076] ? fs_reclaim_acquire+0x7d/0x100 [ 3543.603611][ T4076] should_fail_ex+0x414/0x560 [ 3543.603644][ T4076] should_failslab+0xa8/0x100 [ 3543.603675][ T4076] __kmalloc_cache_noprof+0x70/0x3d0 [ 3543.603701][ T4076] ? fuse_writepage_args_setup+0xeb/0x9d0 [ 3543.603737][ T4076] fuse_writepage_args_setup+0xeb/0x9d0 [ 3543.603772][ T4076] ? _raw_spin_unlock+0x28/0x50 [ 3543.603799][ T4076] fuse_writepages_fill+0xa72/0x1020 [ 3543.603831][ T4076] ? __pfx_fuse_writepages_fill+0x10/0x10 [ 3543.603871][ T4076] ? __pfx_fuse_writepages_fill+0x10/0x10 [ 3543.603910][ T4076] write_cache_pages+0x61/0x100 [ 3543.603941][ T4076] fuse_writepages+0x24a/0x4e0 [ 3543.603971][ T4076] ? is_bpf_text_address+0x26/0x2b0 [ 3543.603994][ T4076] ? __pfx_fuse_writepages+0x10/0x10 [ 3543.604034][ T4076] ? __pfx_fuse_writepages+0x10/0x10 [ 3543.604064][ T4076] do_writepages+0x32e/0x550 [ 3543.604097][ T4076] ? do_raw_spin_lock+0x121/0x290 [ 3543.604134][ T4076] __writeback_single_inode+0x145/0xff0 [ 3543.604162][ T4076] ? do_raw_spin_unlock+0x122/0x240 [ 3543.604194][ T4076] writeback_single_inode+0x1f3/0x6a0 [ 3543.604224][ T4076] write_inode_now+0x160/0x1d0 [ 3543.604247][ T4076] ? __pfx_write_inode_now+0x10/0x10 [ 3543.604328][ T4076] fuse_flush+0x266/0x800 [ 3543.604358][ T4076] ? __pfx_locks_remove_posix+0x10/0x10 [ 3543.604385][ T4076] ? __pfx_fuse_flush+0x10/0x10 [ 3543.604450][ T4076] ? __pfx_fuse_flush+0x10/0x10 [ 3543.604475][ T4076] filp_flush+0xba/0x190 [ 3543.604500][ T4076] filp_close+0x1d/0x40 [ 3543.604522][ T4076] __se_sys_close_range+0x359/0x650 [ 3543.604560][ T4076] ? __pfx___se_sys_close_range+0x10/0x10 [ 3543.604588][ T4076] ? rcu_is_watching+0x15/0xb0 [ 3543.604617][ T4076] ? do_syscall_64+0xbe/0x3b0 [ 3543.604650][ T4076] do_syscall_64+0xfa/0x3b0 [ 3543.604676][ T4076] ? lockdep_hardirqs_on+0x9c/0x150 [ 3543.604703][ T4076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3543.604724][ T4076] ? clear_bhb_loop+0x60/0xb0 [ 3543.604750][ T4076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3543.604771][ T4076] RIP: 0033:0x7efc5f98e929 [ 3543.604789][ T4076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3543.604808][ T4076] RSP: 002b:00007efc5d7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3543.604830][ T4076] RAX: ffffffffffffffda RBX: 00007efc5fbb6080 RCX: 00007efc5f98e929 [ 3543.604846][ T4076] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 3543.604860][ T4076] RBP: 00007efc5d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3543.604873][ T4076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3543.604893][ T4076] R13: 0000000000000000 R14: 00007efc5fbb6080 R15: 00007ffe25ca32d8 [ 3543.604927][ T4076] [ 3544.192298][T21469] usb 8-1: Using ep0 maxpacket: 8 [ 3544.204961][T21469] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 3544.215509][T21469] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3544.227973][T21469] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3544.238088][T21469] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3544.251220][T21469] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3544.262231][T21469] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3544.289120][T21469] usbtmc 8-1:16.0: bulk endpoints not found [ 3545.583624][ T3428] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 3545.650035][ T4098] FAULT_INJECTION: forcing a failure. [ 3545.650035][ T4098] name failslab, interval 1, probability 0, space 0, times 0 [ 3545.685957][ T4098] CPU: 0 UID: 0 PID: 4098 Comm: syz.5.8430 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3545.685989][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3545.686003][ T4098] Call Trace: [ 3545.686012][ T4098] [ 3545.686023][ T4098] dump_stack_lvl+0x189/0x250 [ 3545.686054][ T4098] ? __pfx____ratelimit+0x10/0x10 [ 3545.686082][ T4098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3545.686107][ T4098] ? __pfx__printk+0x10/0x10 [ 3545.686142][ T4098] ? __pfx___might_resched+0x10/0x10 [ 3545.686163][ T4098] ? fs_reclaim_acquire+0x7d/0x100 [ 3545.686199][ T4098] should_fail_ex+0x414/0x560 [ 3545.686232][ T4098] should_failslab+0xa8/0x100 [ 3545.686262][ T4098] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3545.686286][ T4098] ? getname_flags+0xb8/0x540 [ 3545.686323][ T4098] getname_flags+0xb8/0x540 [ 3545.686359][ T4098] do_sys_openat2+0xbc/0x1c0 [ 3545.686385][ T4098] ? __pfx_do_sys_openat2+0x10/0x10 [ 3545.686407][ T4098] ? ksys_write+0x22a/0x250 [ 3545.686436][ T4098] ? __pfx_ksys_write+0x10/0x10 [ 3545.686459][ T4098] ? rcu_is_watching+0x15/0xb0 [ 3545.686487][ T4098] __x64_sys_open+0x11e/0x150 [ 3545.686514][ T4098] do_syscall_64+0xfa/0x3b0 [ 3545.686542][ T4098] ? lockdep_hardirqs_on+0x9c/0x150 [ 3545.686569][ T4098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3545.686590][ T4098] ? clear_bhb_loop+0x60/0xb0 [ 3545.686615][ T4098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3545.686636][ T4098] RIP: 0033:0x7efc5f98e929 [ 3545.686656][ T4098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3545.686674][ T4098] RSP: 002b:00007efc60711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3545.686696][ T4098] RAX: ffffffffffffffda RBX: 00007efc5fbb5fa0 RCX: 00007efc5f98e929 [ 3545.686721][ T4098] RDX: 0000000000000024 RSI: 000000000000021f RDI: 00002000000000c0 [ 3545.686735][ T4098] RBP: 00007efc60711090 R08: 0000000000000000 R09: 0000000000000000 [ 3545.686748][ T4098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3545.686761][ T4098] R13: 0000000000000000 R14: 00007efc5fbb5fa0 R15: 00007ffe25ca32d8 [ 3545.686795][ T4098] [ 3545.903821][ C0] vkms_vblank_simulate: vblank timer overrun [ 3545.910205][ T3428] usb 2-1: device descriptor read/64, error -71 [ 3546.153222][ T3428] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 3546.246994][ T979] usb 8-1: USB disconnect, device number 32 [ 3546.312362][ T3428] usb 2-1: device descriptor read/64, error -71 [ 3546.429192][ T3428] usb usb2-port1: attempt power cycle [ 3546.972915][ T3428] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 3547.410069][ T3428] usb 2-1: device descriptor read/8, error -71 [ 3547.842238][ T3428] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3548.015974][ T3428] usb 2-1: device descriptor read/8, error -71 [ 3548.964606][ T3428] usb usb2-port1: unable to enumerate USB device [ 3552.509433][ T4156] bridge2: entered allmulticast mode [ 3552.841320][ T4172] IPv6: Can't replace route, no match found [ 3553.073560][ T4172] overlayfs: failed to resolve './file0': -2 [ 3553.672251][T20321] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 3553.922952][T20321] usb 6-1: Using ep0 maxpacket: 8 [ 3554.614195][T20321] usb 6-1: device descriptor read/all, error -71 [ 3557.576296][ T4210] FAULT_INJECTION: forcing a failure. [ 3557.576296][ T4210] name failslab, interval 1, probability 0, space 0, times 0 [ 3557.615831][ T4210] CPU: 0 UID: 0 PID: 4210 Comm: syz.7.8463 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3557.615864][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3557.615878][ T4210] Call Trace: [ 3557.615887][ T4210] [ 3557.615897][ T4210] dump_stack_lvl+0x189/0x250 [ 3557.615926][ T4210] ? __pfx____ratelimit+0x10/0x10 [ 3557.615954][ T4210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3557.615978][ T4210] ? __pfx__printk+0x10/0x10 [ 3557.616014][ T4210] ? __pfx___might_resched+0x10/0x10 [ 3557.616035][ T4210] ? fs_reclaim_acquire+0x7d/0x100 [ 3557.616071][ T4210] should_fail_ex+0x414/0x560 [ 3557.616104][ T4210] should_failslab+0xa8/0x100 [ 3557.616134][ T4210] __kmalloc_noprof+0xcb/0x4f0 [ 3557.616157][ T4210] ? kfree+0x4d/0x440 [ 3557.616177][ T4210] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3557.616210][ T4210] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3557.616238][ T4210] ? tomoyo_domain+0xd9/0x130 [ 3557.616271][ T4210] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3557.616293][ T4210] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3557.616319][ T4210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3557.616361][ T4210] ? __lock_acquire+0xab9/0xd20 [ 3557.616405][ T4210] ? __fget_files+0x2a/0x420 [ 3557.616438][ T4210] ? __fget_files+0x2a/0x420 [ 3557.616472][ T4210] ? __fget_files+0x3a0/0x420 [ 3557.616499][ T4210] ? __fget_files+0x2a/0x420 [ 3557.616533][ T4210] security_file_ioctl+0xcb/0x2d0 [ 3557.616568][ T4210] __se_sys_ioctl+0x47/0x170 [ 3557.616596][ T4210] do_syscall_64+0xfa/0x3b0 [ 3557.616622][ T4210] ? lockdep_hardirqs_on+0x9c/0x150 [ 3557.616648][ T4210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3557.616668][ T4210] ? clear_bhb_loop+0x60/0xb0 [ 3557.616693][ T4210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3557.616714][ T4210] RIP: 0033:0x7fe00cd8e929 [ 3557.616733][ T4210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3557.616756][ T4210] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3557.616777][ T4210] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3557.616792][ T4210] RDX: 0000000000000000 RSI: 00000000000089e3 RDI: 0000000000000004 [ 3557.616805][ T4210] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3557.616818][ T4210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3557.616830][ T4210] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3557.616868][ T4210] [ 3557.617409][ T4210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3561.705353][ T4246] netlink: 'syz.5.8473': attribute type 1 has an invalid length. [ 3561.713278][ T4246] netlink: 500 bytes leftover after parsing attributes in process `syz.5.8473'. [ 3563.523135][ T4266] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3564.722085][ T4281] vlan3: entered allmulticast mode [ 3564.749484][ T4281] veth1: entered allmulticast mode [ 3565.101609][ T4283] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8486'. [ 3565.242224][T14935] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 3565.409643][T14935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3565.421529][T14935] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3565.441678][T14935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3565.463553][T14935] usb 6-1: config 0 descriptor?? [ 3565.483983][T14935] pwc: Askey VC010 type 2 USB webcam detected. [ 3565.543140][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8485'. [ 3566.829817][T14935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3567.034114][T14935] pwc: recv_control_msg error -32 req 02 val 2700 [ 3568.020204][T14935] pwc: recv_control_msg error -71 req 02 val 2c00 [ 3568.036159][T14935] pwc: recv_control_msg error -71 req 04 val 1000 [ 3568.047353][T14935] pwc: recv_control_msg error -71 req 04 val 1300 [ 3568.058630][T14935] pwc: recv_control_msg error -71 req 04 val 1400 [ 3568.069042][T14935] pwc: recv_control_msg error -71 req 02 val 2000 [ 3568.088576][T14935] pwc: recv_control_msg error -71 req 02 val 2100 [ 3568.785029][T14935] pwc: recv_control_msg error -71 req 04 val 1500 [ 3568.806775][T14935] pwc: recv_control_msg error -71 req 02 val 2500 [ 3569.193803][T14935] pwc: recv_control_msg error -71 req 02 val 2400 [ 3569.312681][T14935] pwc: recv_control_msg error -71 req 02 val 2600 [ 3569.332322][T14935] pwc: recv_control_msg error -71 req 02 val 2900 [ 3569.367188][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8498'. [ 3569.376951][T14935] pwc: recv_control_msg error -71 req 02 val 2800 [ 3569.425350][T14935] pwc: recv_control_msg error -71 req 04 val 1100 [ 3569.466569][T14935] pwc: recv_control_msg error -71 req 04 val 1200 [ 3569.545565][T14935] pwc: Registered as video103. [ 3569.567170][T14935] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 3569.779125][T14935] usb 6-1: USB disconnect, device number 60 [ 3572.049946][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8511'. [ 3575.139367][ T4416] FAULT_INJECTION: forcing a failure. [ 3575.139367][ T4416] name failslab, interval 1, probability 0, space 0, times 0 [ 3575.153269][ T4416] CPU: 1 UID: 0 PID: 4416 Comm: syz.7.8524 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3575.153297][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3575.153310][ T4416] Call Trace: [ 3575.153319][ T4416] [ 3575.153328][ T4416] dump_stack_lvl+0x189/0x250 [ 3575.153358][ T4416] ? __pfx____ratelimit+0x10/0x10 [ 3575.153384][ T4416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3575.153408][ T4416] ? __pfx__printk+0x10/0x10 [ 3575.153442][ T4416] ? __pfx___might_resched+0x10/0x10 [ 3575.153463][ T4416] ? fs_reclaim_acquire+0x7d/0x100 [ 3575.153497][ T4416] should_fail_ex+0x414/0x560 [ 3575.153529][ T4416] should_failslab+0xa8/0x100 [ 3575.153558][ T4416] __kmalloc_cache_noprof+0x70/0x3d0 [ 3575.153583][ T4416] ? io_uring_alloc_task_context+0xa0/0x570 [ 3575.153617][ T4416] ? __might_fault+0xb0/0x130 [ 3575.153647][ T4416] io_uring_alloc_task_context+0xa0/0x570 [ 3575.153675][ T4416] ? __lock_acquire+0xab9/0xd20 [ 3575.153694][ T4416] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 3575.153735][ T4416] __io_uring_add_tctx_node+0x33e/0x4e0 [ 3575.153766][ T4416] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 3575.153792][ T4416] ? __fget_files+0x2a/0x420 [ 3575.153829][ T4416] ? __fget_files+0x2a/0x420 [ 3575.153861][ T4416] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 3575.153892][ T4416] __se_sys_io_uring_enter+0x2502/0x2b20 [ 3575.153943][ T4416] ? ksys_write+0x1cb/0x250 [ 3575.153972][ T4416] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 3575.153998][ T4416] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3575.154026][ T4416] ? __pfx_vfs_write+0x10/0x10 [ 3575.154054][ T4416] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3575.154086][ T4416] ? __fget_files+0x3a0/0x420 [ 3575.154122][ T4416] ? fput+0xa0/0xd0 [ 3575.154141][ T4416] ? ksys_write+0x22a/0x250 [ 3575.154169][ T4416] ? __pfx_ksys_write+0x10/0x10 [ 3575.154218][ T4416] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 3575.154251][ T4416] do_syscall_64+0xfa/0x3b0 [ 3575.154278][ T4416] ? lockdep_hardirqs_on+0x9c/0x150 [ 3575.154304][ T4416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3575.154325][ T4416] ? clear_bhb_loop+0x60/0xb0 [ 3575.154351][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3575.154371][ T4416] RIP: 0033:0x7fe00cd8e929 [ 3575.154390][ T4416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3575.154408][ T4416] RSP: 002b:00007fe00db12038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3575.154430][ T4416] RAX: ffffffffffffffda RBX: 00007fe00cfb6080 RCX: 00007fe00cd8e929 [ 3575.154446][ T4416] RDX: 0000000000008acb RSI: 0000000000000edd RDI: 0000000000000003 [ 3575.154459][ T4416] RBP: 00007fe00db12090 R08: 0000000000000000 R09: 0000000000000000 [ 3575.154472][ T4416] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 3575.154484][ T4416] R13: 0000000000000001 R14: 00007fe00cfb6080 R15: 00007ffcde695498 [ 3575.154519][ T4416] [ 3577.412716][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8531'. [ 3585.270506][ T4513] FAULT_INJECTION: forcing a failure. [ 3585.270506][ T4513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3585.347229][ T4518] netlink: 'syz.8.8558': attribute type 1 has an invalid length. [ 3585.355104][ T4518] netlink: 500 bytes leftover after parsing attributes in process `syz.8.8558'. [ 3585.378732][ T4513] CPU: 0 UID: 0 PID: 4513 Comm: syz.7.8554 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3585.378766][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3585.378779][ T4513] Call Trace: [ 3585.378788][ T4513] [ 3585.378798][ T4513] dump_stack_lvl+0x189/0x250 [ 3585.378850][ T4513] ? __pfx____ratelimit+0x10/0x10 [ 3585.378881][ T4513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3585.378905][ T4513] ? __pfx__printk+0x10/0x10 [ 3585.378964][ T4513] should_fail_ex+0x414/0x560 [ 3585.379001][ T4513] _copy_to_user+0x31/0xb0 [ 3585.379029][ T4513] msr_read+0x177/0x250 [ 3585.379061][ T4513] ? __pfx_msr_read+0x10/0x10 [ 3585.379084][ T4513] ? security_file_permission+0x75/0x290 [ 3585.379118][ T4513] ? rw_verify_area+0x2a6/0x4d0 [ 3585.379148][ T4513] ? __lock_acquire+0xab9/0xd20 [ 3585.379165][ T4513] ? __pfx_msr_read+0x10/0x10 [ 3585.379191][ T4513] vfs_read+0x200/0x980 [ 3585.379226][ T4513] ? __pfx_vfs_read+0x10/0x10 [ 3585.379252][ T4513] ? __fget_files+0x2a/0x420 [ 3585.379285][ T4513] ? __fget_files+0x2a/0x420 [ 3585.379312][ T4513] ? __fget_files+0x3a0/0x420 [ 3585.379344][ T4513] ? __fget_files+0x2a/0x420 [ 3585.379387][ T4513] ksys_read+0x145/0x250 [ 3585.379415][ T4513] ? __pfx_ksys_read+0x10/0x10 [ 3585.379438][ T4513] ? rcu_is_watching+0x15/0xb0 [ 3585.379468][ T4513] ? do_syscall_64+0xbe/0x3b0 [ 3585.379511][ T4513] do_syscall_64+0xfa/0x3b0 [ 3585.379538][ T4513] ? lockdep_hardirqs_on+0x9c/0x150 [ 3585.379565][ T4513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3585.379586][ T4513] ? clear_bhb_loop+0x60/0xb0 [ 3585.379611][ T4513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3585.379629][ T4513] RIP: 0033:0x7fe00cd8e929 [ 3585.379655][ T4513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3585.379672][ T4513] RSP: 002b:00007fe00db77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3585.379693][ T4513] RAX: ffffffffffffffda RBX: 00007fe00cfb6080 RCX: 00007fe00cd8e929 [ 3585.379708][ T4513] RDX: 0000000000018ff8 RSI: 0000200000002700 RDI: 0000000000000003 [ 3585.379722][ T4513] RBP: 00007fe00db77090 R08: 0000000000000000 R09: 0000000000000000 [ 3585.379734][ T4513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3585.379746][ T4513] R13: 0000000000000000 R14: 00007fe00cfb6080 R15: 00007ffcde695498 [ 3585.379779][ T4513] [ 3585.381409][ T4519] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 3587.482671][T13402] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 3587.584323][ T4548] FAULT_INJECTION: forcing a failure. [ 3587.584323][ T4548] name failslab, interval 1, probability 0, space 0, times 0 [ 3587.617536][ T4548] CPU: 0 UID: 0 PID: 4548 Comm: syz.1.8568 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3587.617559][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3587.617569][ T4548] Call Trace: [ 3587.617576][ T4548] [ 3587.617584][ T4548] dump_stack_lvl+0x189/0x250 [ 3587.617606][ T4548] ? __pfx____ratelimit+0x10/0x10 [ 3587.617626][ T4548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3587.617643][ T4548] ? __pfx__printk+0x10/0x10 [ 3587.617669][ T4548] ? __pfx___might_resched+0x10/0x10 [ 3587.617683][ T4548] ? fs_reclaim_acquire+0x7d/0x100 [ 3587.617709][ T4548] should_fail_ex+0x414/0x560 [ 3587.617732][ T4548] should_failslab+0xa8/0x100 [ 3587.617753][ T4548] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3587.617772][ T4548] ? getname_flags+0xb8/0x540 [ 3587.617793][ T4548] ? __fget_files+0x3a0/0x420 [ 3587.617817][ T4548] getname_flags+0xb8/0x540 [ 3587.617842][ T4548] path_listxattrat+0xd4/0x3a0 [ 3587.617861][ T4548] ? __pfx_path_listxattrat+0x10/0x10 [ 3587.617876][ T4548] ? rcu_is_watching+0x15/0xb0 [ 3587.617896][ T4548] ? do_syscall_64+0xbe/0x3b0 [ 3587.617920][ T4548] do_syscall_64+0xfa/0x3b0 [ 3587.617940][ T4548] ? lockdep_hardirqs_on+0x9c/0x150 [ 3587.617959][ T4548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3587.617973][ T4548] ? clear_bhb_loop+0x60/0xb0 [ 3587.617992][ T4548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3587.618006][ T4548] RIP: 0033:0x7fa3dfd8e929 [ 3587.618020][ T4548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3587.618033][ T4548] RSP: 002b:00007fa3e0c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 3587.618049][ T4548] RAX: ffffffffffffffda RBX: 00007fa3dffb5fa0 RCX: 00007fa3dfd8e929 [ 3587.618061][ T4548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 3587.618070][ T4548] RBP: 00007fa3e0c97090 R08: 0000000000000000 R09: 0000000000000000 [ 3587.618080][ T4548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3587.618088][ T4548] R13: 0000000000000000 R14: 00007fa3dffb5fa0 R15: 00007fff81475d58 [ 3587.618112][ T4548] [ 3587.849597][ T4533] delete_channel: no stack [ 3588.048786][T13402] usb 8-1: not running at top speed; connect to a high speed hub [ 3588.061305][T13402] usb 8-1: config 8 has an invalid interface number: 110 but max is 0 [ 3588.069682][T13402] usb 8-1: config 8 has no interface number 0 [ 3588.081545][T13402] usb 8-1: config 8 interface 110 has no altsetting 0 [ 3588.115695][T13402] usb 8-1: New USB device found, idVendor=0403, idProduct=f9e9, bcdDevice=38.da [ 3588.134851][T13402] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3588.172196][T13402] usb 8-1: Product: syz [ 3588.176522][T13402] usb 8-1: Manufacturer: syz [ 3588.181135][T13402] usb 8-1: SerialNumber: syz [ 3588.471725][ T4558] FAULT_INJECTION: forcing a failure. [ 3588.471725][ T4558] name failslab, interval 1, probability 0, space 0, times 0 [ 3588.484544][ T4558] CPU: 0 UID: 0 PID: 4558 Comm: syz.1.8570 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3588.484572][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3588.484586][ T4558] Call Trace: [ 3588.484597][ T4558] [ 3588.484606][ T4558] dump_stack_lvl+0x189/0x250 [ 3588.484640][ T4558] ? __pfx____ratelimit+0x10/0x10 [ 3588.484667][ T4558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3588.484691][ T4558] ? __pfx__printk+0x10/0x10 [ 3588.484726][ T4558] ? __pfx___might_resched+0x10/0x10 [ 3588.484756][ T4558] should_fail_ex+0x414/0x560 [ 3588.484789][ T4558] should_failslab+0xa8/0x100 [ 3588.484819][ T4558] __kmalloc_noprof+0xcb/0x4f0 [ 3588.484843][ T4558] ? kfree+0x4d/0x440 [ 3588.484863][ T4558] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3588.484895][ T4558] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3588.484923][ T4558] ? tomoyo_domain+0xd9/0x130 [ 3588.484956][ T4558] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3588.484977][ T4558] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3588.485002][ T4558] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3588.485023][ T4558] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 3588.485073][ T4558] ? rcu_read_unlock_special+0x472/0x590 [ 3588.485100][ T4558] ? __fget_files+0x2a/0x420 [ 3588.485154][ T4558] ? __rcu_read_unlock+0x84/0xe0 [ 3588.485183][ T4558] ? __fget_files+0x2a/0x420 [ 3588.485210][ T4558] ? __fget_files+0x3a0/0x420 [ 3588.485238][ T4558] ? __fget_files+0x2a/0x420 [ 3588.485272][ T4558] security_file_ioctl+0xcb/0x2d0 [ 3588.485306][ T4558] __se_sys_ioctl+0x47/0x170 [ 3588.485333][ T4558] do_syscall_64+0xfa/0x3b0 [ 3588.485363][ T4558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3588.485382][ T4558] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3588.485403][ T4558] ? clear_bhb_loop+0x60/0xb0 [ 3588.485454][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3588.485475][ T4558] RIP: 0033:0x7fa3dfd8e929 [ 3588.485493][ T4558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3588.485512][ T4558] RSP: 002b:00007fa3e0c55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3588.485534][ T4558] RAX: ffffffffffffffda RBX: 00007fa3dffb6160 RCX: 00007fa3dfd8e929 [ 3588.485550][ T4558] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000005 [ 3588.485564][ T4558] RBP: 00007fa3e0c55090 R08: 0000000000000000 R09: 0000000000000000 [ 3588.485577][ T4558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3588.485602][ T4558] R13: 0000000000000000 R14: 00007fa3dffb6160 R15: 00007fff81475d58 [ 3588.485637][ T4558] [ 3588.485691][ T4558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3588.838854][T13402] usb 8-1: USB disconnect, device number 33 [ 3589.426570][T13402] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3589.813008][T13402] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3589.851495][T13402] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3589.873005][T13402] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3589.883850][T13402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3589.909771][T13402] usb 2-1: config 0 descriptor?? [ 3590.145090][T13402] usb 2-1: USB disconnect, device number 25 [ 3591.223593][ T4594] tmpfs: Bad value for 'mpol' [ 3591.512379][T13402] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 3591.692845][T13402] usb 8-1: Using ep0 maxpacket: 32 [ 3591.718408][T13402] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3591.765355][T13402] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3591.789153][T13402] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3591.812828][T13402] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3591.840150][T13402] usb 8-1: config 0 descriptor?? [ 3591.867261][T13402] hub 8-1:0.0: USB hub found [ 3592.063240][T13402] hub 8-1:0.0: 1 port detected [ 3593.324309][T13402] hub 8-1:0.0: activate --> -90 [ 3594.516146][T13402] hub 8-1:0.0: hub_ext_port_status failed (err = -32) [ 3595.077000][T13402] usb 8-1: USB disconnect, device number 34 [ 3599.383011][T14935] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 3600.072274][T14935] usb 2-1: device descriptor read/64, error -71 [ 3600.534310][T14935] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 3600.683338][T14935] usb 2-1: device descriptor read/64, error -71 [ 3600.953990][T14935] usb usb2-port1: attempt power cycle [ 3601.924234][T14935] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 3605.542244][T14935] usb 2-1: device descriptor read/8, error -71 [ 3607.634083][ T4742] FAULT_INJECTION: forcing a failure. [ 3607.634083][ T4742] name failslab, interval 1, probability 0, space 0, times 0 [ 3607.657098][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.5.8628 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3607.657128][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3607.657141][ T4742] Call Trace: [ 3607.657150][ T4742] [ 3607.657160][ T4742] dump_stack_lvl+0x189/0x250 [ 3607.657190][ T4742] ? __pfx____ratelimit+0x10/0x10 [ 3607.657217][ T4742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3607.657242][ T4742] ? __pfx__printk+0x10/0x10 [ 3607.657274][ T4742] ? __pfx___might_resched+0x10/0x10 [ 3607.657297][ T4742] ? fs_reclaim_acquire+0x7d/0x100 [ 3607.657334][ T4742] should_fail_ex+0x414/0x560 [ 3607.657367][ T4742] should_failslab+0xa8/0x100 [ 3607.657398][ T4742] __kmalloc_noprof+0xcb/0x4f0 [ 3607.657422][ T4742] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3607.657443][ T4742] ? sock_kmalloc+0xd6/0x160 [ 3607.657476][ T4742] sock_kmalloc+0xd6/0x160 [ 3607.657501][ T4742] af_alg_sendmsg+0x109c/0x22e0 [ 3607.657561][ T4742] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 3607.657589][ T4742] ? do_raw_spin_unlock+0x122/0x240 [ 3607.657618][ T4742] ? skcipher_check_key+0x173/0x1e0 [ 3607.657652][ T4742] ? skcipher_check_key+0x173/0x1e0 [ 3607.657682][ T4742] ? __pfx_skcipher_sendmsg_nokey+0x10/0x10 [ 3607.657715][ T4742] ? skcipher_sendmsg_nokey+0x59/0x120 [ 3607.657746][ T4742] ? __pfx_skcipher_sendmsg_nokey+0x10/0x10 [ 3607.657779][ T4742] __sock_sendmsg+0x219/0x270 [ 3607.657809][ T4742] __sys_sendto+0x3bd/0x520 [ 3607.657841][ T4742] ? __pfx___sys_sendto+0x10/0x10 [ 3607.657867][ T4742] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3607.657912][ T4742] ? __fget_files+0x3a0/0x420 [ 3607.657955][ T4742] ? ksys_write+0x22a/0x250 [ 3607.657985][ T4742] ? __pfx_ksys_write+0x10/0x10 [ 3607.658008][ T4742] ? rcu_is_watching+0x15/0xb0 [ 3607.658038][ T4742] __x64_sys_sendto+0xde/0x100 [ 3607.658072][ T4742] do_syscall_64+0xfa/0x3b0 [ 3607.658099][ T4742] ? lockdep_hardirqs_on+0x9c/0x150 [ 3607.658125][ T4742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3607.658146][ T4742] ? clear_bhb_loop+0x60/0xb0 [ 3607.658173][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3607.658193][ T4742] RIP: 0033:0x7efc5f98e929 [ 3607.658224][ T4742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3607.658242][ T4742] RSP: 002b:00007efc60711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3607.658263][ T4742] RAX: ffffffffffffffda RBX: 00007efc5fbb5fa0 RCX: 00007efc5f98e929 [ 3607.658278][ T4742] RDX: 703d59595f6742a8 RSI: 0000200000000440 RDI: 0000000000000006 [ 3607.658293][ T4742] RBP: 00007efc60711090 R08: 0000000000000000 R09: 0000000000000000 [ 3607.658305][ T4742] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 3607.658318][ T4742] R13: 0000000000000000 R14: 00007efc5fbb5fa0 R15: 00007ffe25ca32d8 [ 3607.658352][ T4742] [ 3610.307490][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8638'. [ 3610.605020][T13402] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 3610.647877][ T4779] overlayfs: failed to clone upperpath [ 3610.992386][T13402] usb 2-1: Using ep0 maxpacket: 16 [ 3611.004125][T13402] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3611.032445][T13402] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3611.039125][T13402] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3611.063084][T13402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3611.090727][T13402] usb 2-1: config 0 descriptor?? [ 3611.154357][ T4786] overlayfs: failed to clone upperpath [ 3611.544756][T13402] zydacron 0003:13EC:0006.0028: item fetching failed at offset 2/3 [ 3611.578692][T13402] zydacron 0003:13EC:0006.0028: parse failed [ 3611.595348][T13402] zydacron 0003:13EC:0006.0028: probe with driver zydacron failed with error -22 [ 3611.632083][ T4791] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.8643'. [ 3611.794839][T13402] usb 2-1: USB disconnect, device number 30 [ 3613.507516][T31279] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 3614.152286][T31279] usb 6-1: Using ep0 maxpacket: 8 [ 3614.192427][T31279] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3614.824538][T31279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3614.859678][T31279] usb 6-1: Product: syz [ 3615.177890][T31279] usb 6-1: Manufacturer: syz [ 3615.192046][T31279] usb 6-1: SerialNumber: syz [ 3615.459697][T31279] usb 6-1: config 0 descriptor?? [ 3615.698012][T31279] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3616.572755][T31279] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3616.672765][T31279] usb 6-1: USB disconnect, device number 61 [ 3616.953670][ T4838] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8657'. [ 3619.736632][ T4873] FAULT_INJECTION: forcing a failure. [ 3619.736632][ T4873] name failslab, interval 1, probability 0, space 0, times 0 [ 3619.758235][ T4873] CPU: 1 UID: 0 PID: 4873 Comm: syz.1.8668 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3619.758264][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3619.758283][ T4873] Call Trace: [ 3619.758292][ T4873] [ 3619.758302][ T4873] dump_stack_lvl+0x189/0x250 [ 3619.758332][ T4873] ? __pfx____ratelimit+0x10/0x10 [ 3619.758360][ T4873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3619.758384][ T4873] ? __pfx__printk+0x10/0x10 [ 3619.758420][ T4873] ? __pfx___might_resched+0x10/0x10 [ 3619.758440][ T4873] ? fs_reclaim_acquire+0x7d/0x100 [ 3619.758479][ T4873] should_fail_ex+0x414/0x560 [ 3619.758513][ T4873] should_failslab+0xa8/0x100 [ 3619.758543][ T4873] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3619.758567][ T4873] ? getname_flags+0xb8/0x540 [ 3619.758604][ T4873] getname_flags+0xb8/0x540 [ 3619.758640][ T4873] do_sys_openat2+0xbc/0x1c0 [ 3619.758665][ T4873] ? __pfx_do_sys_openat2+0x10/0x10 [ 3619.758688][ T4873] ? ksys_write+0x22a/0x250 [ 3619.758717][ T4873] ? __pfx_ksys_write+0x10/0x10 [ 3619.758740][ T4873] ? rcu_is_watching+0x15/0xb0 [ 3619.758768][ T4873] __x64_sys_openat+0x138/0x170 [ 3619.758796][ T4873] do_syscall_64+0xfa/0x3b0 [ 3619.758822][ T4873] ? lockdep_hardirqs_on+0x9c/0x150 [ 3619.758849][ T4873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3619.758869][ T4873] ? clear_bhb_loop+0x60/0xb0 [ 3619.758896][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3619.758920][ T4873] RIP: 0033:0x7fa3dfd8e929 [ 3619.758939][ T4873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3619.758957][ T4873] RSP: 002b:00007fa3e0c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3619.758985][ T4873] RAX: ffffffffffffffda RBX: 00007fa3dffb6080 RCX: 00007fa3dfd8e929 [ 3619.759001][ T4873] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 3619.759016][ T4873] RBP: 00007fa3e0c76090 R08: 0000000000000000 R09: 0000000000000000 [ 3619.759030][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3619.759042][ T4873] R13: 0000000000000000 R14: 00007fa3dffb6080 R15: 00007fff81475d58 [ 3619.759078][ T4873] [ 3620.346154][ T4882] netlink: 'syz.9.8669': attribute type 1 has an invalid length. [ 3620.354043][ T4882] netlink: 500 bytes leftover after parsing attributes in process `syz.9.8669'. [ 3621.974897][ T4898] can0: slcan on ptm0. [ 3622.528275][ T4887] can0 (unregistered): slcan off ptm0. [ 3622.750173][ T4910] FAULT_INJECTION: forcing a failure. [ 3622.750173][ T4910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3622.779699][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: syz.7.8682 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3622.779728][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3622.779742][ T4910] Call Trace: [ 3622.779751][ T4910] [ 3622.779761][ T4910] dump_stack_lvl+0x189/0x250 [ 3622.779790][ T4910] ? __pfx____ratelimit+0x10/0x10 [ 3622.779818][ T4910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3622.779842][ T4910] ? __pfx__printk+0x10/0x10 [ 3622.779871][ T4910] ? __might_fault+0xb0/0x130 [ 3622.779911][ T4910] should_fail_ex+0x414/0x560 [ 3622.779944][ T4910] _copy_from_user+0x2d/0xb0 [ 3622.779971][ T4910] ___sys_sendmsg+0x158/0x2a0 [ 3622.780006][ T4910] ? __pfx____sys_sendmsg+0x10/0x10 [ 3622.780080][ T4910] ? __fget_files+0x2a/0x420 [ 3622.780108][ T4910] ? __fget_files+0x3a0/0x420 [ 3622.780149][ T4910] __x64_sys_sendmsg+0x19b/0x260 [ 3622.780184][ T4910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3622.780227][ T4910] ? __pfx_ksys_write+0x10/0x10 [ 3622.780250][ T4910] ? rcu_is_watching+0x15/0xb0 [ 3622.780279][ T4910] ? do_syscall_64+0xbe/0x3b0 [ 3622.780312][ T4910] do_syscall_64+0xfa/0x3b0 [ 3622.780337][ T4910] ? lockdep_hardirqs_on+0x9c/0x150 [ 3622.780364][ T4910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3622.780384][ T4910] ? clear_bhb_loop+0x60/0xb0 [ 3622.780410][ T4910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3622.780430][ T4910] RIP: 0033:0x7fe00cd8e929 [ 3622.780448][ T4910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3622.780467][ T4910] RSP: 002b:00007fe00db98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3622.780489][ T4910] RAX: ffffffffffffffda RBX: 00007fe00cfb5fa0 RCX: 00007fe00cd8e929 [ 3622.780504][ T4910] RDX: 0000000020008005 RSI: 00002000000006c0 RDI: 0000000000000004 [ 3622.780518][ T4910] RBP: 00007fe00db98090 R08: 0000000000000000 R09: 0000000000000000 [ 3622.780531][ T4910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3622.780543][ T4910] R13: 0000000000000000 R14: 00007fe00cfb5fa0 R15: 00007ffcde695498 [ 3622.780577][ T4910] [ 3623.306607][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8683'. [ 3623.587178][ T4920] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8684'. [ 3628.259104][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8690'. [ 3630.018114][ T4961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8695'. [ 3637.608202][ T5036] syz.9.8717 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3637.720344][ T5036] netlink: zone id is out of range [ 3637.756427][ T5036] netlink: zone id is out of range [ 3637.769003][ T5036] netlink: zone id is out of range [ 3637.804881][ T5036] netlink: zone id is out of range [ 3637.810097][ T5036] netlink: zone id is out of range [ 3638.085927][ T5036] netlink: zone id is out of range [ 3638.109209][ T5036] netlink: zone id is out of range [ 3638.177906][ T5036] netlink: zone id is out of range [ 3638.212700][ T5036] netlink: zone id is out of range [ 3638.229126][ T5036] netlink: zone id is out of range [ 3641.363720][T29939] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3643.900363][ T5119] 9pnet_fd: Insufficient options for proto=fd [ 3644.297290][ T5122] rdma_rxe: rxe_newlink: failed to add bond0 [ 3646.282208][ T3596] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 3646.587301][ T5148] 9pnet_fd: Insufficient options for proto=fd [ 3646.934525][ T3596] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3646.960384][ T3596] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3646.987059][ T3596] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3646.999987][ T3596] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3647.015996][ T3596] usb 8-1: Product: syz [ 3647.034199][ T3596] usb 8-1: Manufacturer: syz [ 3647.043584][ T3596] usb 8-1: SerialNumber: syz [ 3647.088193][ T3596] usb 8-1: config 0 descriptor?? [ 3647.118612][ T3596] usb 8-1: selecting invalid altsetting 0 [ 3647.307369][ T3596] usb 8-1: USB disconnect, device number 35 [ 3647.508135][ T5156] udevd[5156]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3648.012181][T14935] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 3648.214434][T14935] usb 6-1: config 184 has an invalid interface number: 240 but max is 0 [ 3648.763282][T14935] usb 6-1: config 184 has an invalid descriptor of length 255, skipping remainder of the config [ 3648.826051][T14935] usb 6-1: config 184 has no interface number 0 [ 3648.835956][T14935] usb 6-1: config 184 interface 240 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3648.896863][T14935] usb 6-1: config 184 interface 240 has no altsetting 0 [ 3648.909157][T14935] usb 6-1: New USB device found, idVendor=0bfd, idProduct=ffff, bcdDevice=ff.ff [ 3648.921902][T14935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3648.940394][T14935] usb 6-1: Product: syz [ 3648.947545][T14935] usb 6-1: Manufacturer: syz [ 3648.956583][T14935] usb 6-1: SerialNumber: syz [ 3648.966225][T32005] Bluetooth: hci4: Frame reassembly failed (-84) [ 3649.307065][ T5179] lo speed is unknown, defaulting to 1000 [ 3649.916470][T14935] usb 6-1: USB disconnect, device number 62 [ 3650.655026][ T5187] FAULT_INJECTION: forcing a failure. [ 3650.655026][ T5187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3650.672535][ T5187] CPU: 1 UID: 0 PID: 5187 Comm: syz.7.8761 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3650.672566][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3650.672579][ T5187] Call Trace: [ 3650.672588][ T5187] [ 3650.672598][ T5187] dump_stack_lvl+0x189/0x250 [ 3650.672628][ T5187] ? __pfx____ratelimit+0x10/0x10 [ 3650.672664][ T5187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3650.672689][ T5187] ? __pfx__printk+0x10/0x10 [ 3650.672717][ T5187] ? __might_fault+0xb0/0x130 [ 3650.672760][ T5187] should_fail_ex+0x414/0x560 [ 3650.672793][ T5187] _copy_from_user+0x2d/0xb0 [ 3650.672819][ T5187] core_sys_select+0x4b7/0xa20 [ 3650.672861][ T5187] ? __pfx_core_sys_select+0x10/0x10 [ 3650.672918][ T5187] ? __pfx_set_user_sigmask+0x10/0x10 [ 3650.672939][ T5187] ? do_sys_openat2+0x154/0x1c0 [ 3650.672970][ T5187] ? kmem_cache_free+0x18f/0x400 [ 3650.673005][ T5187] __se_sys_pselect6+0x27a/0x300 [ 3650.673039][ T5187] ? __pfx___se_sys_pselect6+0x10/0x10 [ 3650.673067][ T5187] ? __pfx_ksys_write+0x10/0x10 [ 3650.673089][ T5187] ? rcu_is_watching+0x15/0xb0 [ 3650.673118][ T5187] ? __x64_sys_pselect6+0x21/0xf0 [ 3650.673147][ T5187] do_syscall_64+0xfa/0x3b0 [ 3650.673191][ T5187] ? lockdep_hardirqs_on+0x9c/0x150 [ 3650.673217][ T5187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3650.673239][ T5187] ? clear_bhb_loop+0x60/0xb0 [ 3650.673264][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3650.673285][ T5187] RIP: 0033:0x7fe00cd8e929 [ 3650.673303][ T5187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3650.673322][ T5187] RSP: 002b:00007fe00db77038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 3650.673345][ T5187] RAX: ffffffffffffffda RBX: 00007fe00cfb6080 RCX: 00007fe00cd8e929 [ 3650.673361][ T5187] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 3650.673375][ T5187] RBP: 00007fe00db77090 R08: 0000000000000000 R09: 0000000000000000 [ 3650.673388][ T5187] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 3650.673401][ T5187] R13: 0000000000000000 R14: 00007fe00cfb6080 R15: 00007ffcde695498 [ 3650.673436][ T5187] [ 3650.992269][T29939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3650.992340][T20108] Bluetooth: hci4: command 0x1003 tx timeout [ 3653.110952][ T5223] ------------[ cut here ]------------ [ 3653.116847][ T5223] WARNING: mm/page_alloc.c:5124 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#0: syz.7.8769/5223 [ 3653.127674][ T5223] Modules linked in: [ 3653.131840][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.7.8769 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3653.143373][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3653.153531][ T5223] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 3653.160136][ T5223] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 ad 20 75 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 3653.182586][ T5223] RSP: 0018:ffffc9000c06f920 EFLAGS: 00010246 [ 3653.188729][ T5223] RAX: ffffc9000c06f900 RBX: 0000000000000019 RCX: 0000000000000000 [ 3653.197186][ T5223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c06f988 [ 3653.205541][ T5223] RBP: ffffc9000c06fa08 R08: ffffc9000c06f987 R09: 0000000000000000 [ 3653.213680][ T5223] R10: ffffc9000c06f960 R11: fffff5200180df31 R12: 0000000000000000 [ 3653.221712][ T5223] R13: 1ffff9200180df28 R14: 0000000000040dc0 R15: dffffc0000000000 [ 3653.229801][ T5223] FS: 00007fe00db776c0(0000) GS:ffff888125bed000(0000) knlGS:0000000000000000 [ 3653.238900][ T5223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3653.245571][ T5223] CR2: 0000001b31320220 CR3: 000000002eb5c000 CR4: 00000000003526f0 [ 3653.253667][ T5223] Call Trace: [ 3653.256991][ T5223] [ 3653.259971][ T5223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3653.266442][ T5223] ? policy_nodemask+0x27c/0x720 [ 3653.271459][ T5223] alloc_pages_mpol+0x232/0x4a0 [ 3653.278735][ T5223] ___kmalloc_large_node+0x5f/0x1b0 [ 3653.284114][ T5223] __kmalloc_large_node_noprof+0x18/0x90 [ 3653.289817][ T5223] __kmalloc_noprof+0x36f/0x4f0 [ 3653.294797][ T5223] ? comedi_unlocked_ioctl+0x9ee/0xf40 [ 3653.300311][ T5223] comedi_unlocked_ioctl+0x9ee/0xf40 [ 3653.305736][ T5223] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 3653.311608][ T5223] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3653.317721][ T5223] ? do_vfs_ioctl+0xbe8/0x1430 [ 3653.322622][ T5223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3653.327709][ T5223] ? __lock_acquire+0xab9/0xd20 [ 3653.332766][ T5223] ? __fget_files+0x2a/0x420 [ 3653.337428][ T5223] ? __fget_files+0x2a/0x420 [ 3653.342131][ T5223] ? __fget_files+0x3a0/0x420 [ 3653.346860][ T5223] ? __fget_files+0x2a/0x420 [ 3653.351524][ T5223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3653.356628][ T5223] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 3653.362592][ T5223] __se_sys_ioctl+0xf9/0x170 [ 3653.367253][ T5223] do_syscall_64+0xfa/0x3b0 [ 3653.371827][ T5223] ? lockdep_hardirqs_on+0x9c/0x150 [ 3653.377202][ T5223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3653.386017][ T5223] ? clear_bhb_loop+0x60/0xb0 [ 3653.390760][ T5223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3653.396835][ T5223] RIP: 0033:0x7fe00cd8e929 [ 3653.401298][ T5223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3653.421085][ T5223] RSP: 002b:00007fe00db77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3653.429762][ T5223] RAX: ffffffffffffffda RBX: 00007fe00cfb6080 RCX: 00007fe00cd8e929 [ 3653.437869][ T5223] RDX: 0000200000000100 RSI: 000000008010640b RDI: 0000000000000007 [ 3653.445946][ T5223] RBP: 00007fe00ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 3653.454091][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3653.462169][ T5223] R13: 0000000000000000 R14: 00007fe00cfb6080 R15: 00007ffcde695498 [ 3653.470208][ T5223] [ 3653.473371][ T5223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3653.480684][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.7.8769 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 3653.492187][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3653.502266][ T5223] Call Trace: [ 3653.505551][ T5223] [ 3653.508491][ T5223] dump_stack_lvl+0x99/0x250 [ 3653.513090][ T5223] ? __asan_memcpy+0x40/0x70 [ 3653.517679][ T5223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3653.522892][ T5223] ? __pfx__printk+0x10/0x10 [ 3653.527496][ T5223] vpanic+0x281/0x750 [ 3653.531489][ T5223] ? __pfx_vpanic+0x10/0x10 [ 3653.535993][ T5223] ? is_bpf_text_address+0x292/0x2b0 [ 3653.541273][ T5223] ? is_bpf_text_address+0x26/0x2b0 [ 3653.546483][ T5223] panic+0xb9/0xc0 [ 3653.550214][ T5223] ? __pfx_panic+0x10/0x10 [ 3653.554667][ T5223] __warn+0x334/0x4c0 [ 3653.558655][ T5223] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 3653.564665][ T5223] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 3653.570650][ T5223] report_bug+0x2be/0x4f0 [ 3653.574980][ T5223] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 3653.580965][ T5223] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 3653.586947][ T5223] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 3653.592930][ T5223] handle_bug+0x84/0x160 [ 3653.597201][ T5223] exc_invalid_op+0x1a/0x50 [ 3653.601715][ T5223] asm_exc_invalid_op+0x1a/0x20 [ 3653.606561][ T5223] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 3653.613159][ T5223] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 ad 20 75 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 3653.632787][ T5223] RSP: 0018:ffffc9000c06f920 EFLAGS: 00010246 [ 3653.638880][ T5223] RAX: ffffc9000c06f900 RBX: 0000000000000019 RCX: 0000000000000000 [ 3653.646852][ T5223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c06f988 [ 3653.654820][ T5223] RBP: ffffc9000c06fa08 R08: ffffc9000c06f987 R09: 0000000000000000 [ 3653.662785][ T5223] R10: ffffc9000c06f960 R11: fffff5200180df31 R12: 0000000000000000 [ 3653.670754][ T5223] R13: 1ffff9200180df28 R14: 0000000000040dc0 R15: dffffc0000000000 [ 3653.678747][ T5223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3653.685092][ T5223] ? policy_nodemask+0x27c/0x720 [ 3653.690053][ T5223] alloc_pages_mpol+0x232/0x4a0 [ 3653.694915][ T5223] ___kmalloc_large_node+0x5f/0x1b0 [ 3653.700119][ T5223] __kmalloc_large_node_noprof+0x18/0x90 [ 3653.705760][ T5223] __kmalloc_noprof+0x36f/0x4f0 [ 3653.710612][ T5223] ? comedi_unlocked_ioctl+0x9ee/0xf40 [ 3653.716097][ T5223] comedi_unlocked_ioctl+0x9ee/0xf40 [ 3653.721402][ T5223] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 3653.727241][ T5223] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3653.732898][ T5223] ? do_vfs_ioctl+0xbe8/0x1430 [ 3653.737681][ T5223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3653.742716][ T5223] ? __lock_acquire+0xab9/0xd20 [ 3653.747584][ T5223] ? __fget_files+0x2a/0x420 [ 3653.752194][ T5223] ? __fget_files+0x2a/0x420 [ 3653.756805][ T5223] ? __fget_files+0x3a0/0x420 [ 3653.761481][ T5223] ? __fget_files+0x2a/0x420 [ 3653.766073][ T5223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3653.771003][ T5223] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 3653.776812][ T5223] __se_sys_ioctl+0xf9/0x170 [ 3653.781403][ T5223] do_syscall_64+0xfa/0x3b0 [ 3653.785901][ T5223] ? lockdep_hardirqs_on+0x9c/0x150 [ 3653.791095][ T5223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3653.797156][ T5223] ? clear_bhb_loop+0x60/0xb0 [ 3653.801847][ T5223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3653.807730][ T5223] RIP: 0033:0x7fe00cd8e929 [ 3653.812322][ T5223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3653.831928][ T5223] RSP: 002b:00007fe00db77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3653.840342][ T5223] RAX: ffffffffffffffda RBX: 00007fe00cfb6080 RCX: 00007fe00cd8e929 [ 3653.848310][ T5223] RDX: 0000200000000100 RSI: 000000008010640b RDI: 0000000000000007 [ 3653.856297][ T5223] RBP: 00007fe00ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 3653.864268][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3653.872236][ T5223] R13: 0000000000000000 R14: 00007fe00cfb6080 R15: 00007ffcde695498 [ 3653.880219][ T5223] [ 3653.883587][ T5223] Kernel Offset: disabled [ 3653.887911][ T5223] Rebooting in 86400 seconds..