last executing test programs: 4m47.431074912s ago: executing program 2 (id=1875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a000000000000020001000020001000000002000000000300"], 0x60}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x1) r4 = dup(r3) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000380)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m46.320527379s ago: executing program 1 (id=1876): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m46.246167251s ago: executing program 3 (id=1877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) mkdir(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 4m46.073642575s ago: executing program 2 (id=1878): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m45.04531303s ago: executing program 1 (id=1879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101701, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xd0009412, &(0x7f0000001480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x24, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00) read$hiddev(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x4, 0x12, 0x0, 0x7}]}}}}}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 4m44.730005334s ago: executing program 3 (id=1881): r0 = socket(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a", 0x23}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x26}}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000fff305000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000e20800020073797a31000000000900010073717a300000000008000540000000253c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000100003800c000080080003400000000114000000100001000000000000000000de84000a"], 0xc0}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) r5 = dup(r4) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x5}, {0x1b, 0xffe0}}}, 0x24}}, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000140)={0x0, 0x0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x7}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000480)={0x3, 0x0, 0x98, &(0x7f00000003c0)={0x2, 0x2aa6, 0x3}}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) 4m44.696623585s ago: executing program 2 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m44.506939327s ago: executing program 3 (id=1886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) mkdir(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 4m44.464341694s ago: executing program 4 (id=1887): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) membarrier(0x4, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) pipe(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r6) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x880) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '/dev/ttyS3\x00'}}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) umount2(&(0x7f0000000540)='.\x00', 0x2) 4m44.387005372s ago: executing program 2 (id=1888): openat$kvm(0xffffffffffffff9c, 0x0, 0x80003, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001e80)=ANY=[@ANYBLOB="eb9c91087522e568fa1b58db832cdb0000", @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYBLOB="0500330001000000"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r8, 0x0, 0x0, 0x40002002) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m44.290027991s ago: executing program 4 (id=1889): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m43.191661832s ago: executing program 3 (id=1890): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m43.074590805s ago: executing program 4 (id=1892): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="019800000000000020001280080001006772650014", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 4m43.039254383s ago: executing program 1 (id=1894): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m43.008993833s ago: executing program 3 (id=1895): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) membarrier(0x4, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) pipe(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r6) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x880) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) umount2(&(0x7f0000000540)='.\x00', 0x2) 4m42.880096333s ago: executing program 1 (id=1896): openat$kvm(0xffffffffffffff9c, 0x0, 0x80003, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001e80)=ANY=[@ANYBLOB="eb9c91087522e568fa1b58db832cdb0000", @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYBLOB="0500330001000000"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r8, &(0x7f0000001e40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/15, 0xf}], 0xa, &(0x7f0000001a80)=[{0xc0, 0x0, 0x0, ""/171}, {0x30, 0x0, 0x0, ""/30}, {0x68, 0x0, 0x0, ""/87}, {0x88, 0x0, 0x0, ""/118}, {0x20, 0x0, 0x0, ""/15}, {0xc0, 0x0, 0x0, ""/176}, {0xa0, 0x0, 0x0, ""/137}, {0x58, 0x0, 0x0, ""/72}], 0x3b8, 0x100}, 0x38, 0x40002002) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m42.813330641s ago: executing program 3 (id=1897): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101701, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xd0009412, &(0x7f0000001480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x24, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00) read$hiddev(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x4, 0x12, 0x0, 0x7}]}}}}}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 4m42.227837929s ago: executing program 2 (id=1898): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m42.14567563s ago: executing program 4 (id=1899): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = eventfd2(0xff, 0x80001) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r2, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0xffffffffffffff60, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) 4m42.106556756s ago: executing program 1 (id=1900): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000008000c00004e07006c001a80540004"], 0x94}}, 0x0) 4m42.046476931s ago: executing program 4 (id=1901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) mkdir(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 4m41.978799391s ago: executing program 2 (id=1902): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m41.911951928s ago: executing program 1 (id=1903): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0x8}]}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x184) r2 = open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) rmdir(&(0x7f0000000280)='./control\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000740)={0x0, @initdev, @empty}, &(0x7f0000000780)=0xc) getpeername$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0}, &(0x7f0000000800)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xe, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1017, 0x4004000, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="10020000", @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf25010000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000400030058000180140002007465616d5f736c6176655f31000000001400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000008000300020000005c2701800800030004000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="940002800c00018008000100060000003c00018008000100070000000800010003000000080001000600000008000100030000000800010000000000080001000600000008000100070000000c00018008000100080000003c0001800800010008000000080001000000000008000100000000000800010006000000080001000200000008000100040000000800010007000000040003005800018008000300010000000800030001000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000400001801400020076657468315f766c616e00000000000008000300000000000800030003000000080003000200000008000300020000000800030001000000"], 0x210}, 0x1, 0x0, 0x0, 0x140048c0}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r8, 0x38, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f212d2b1d9541653fae56c283d3660069a3a61a1ce38f68f4a4c568f00"}, &(0x7f0000000400)=0x40) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x200, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x3, 0x0) read$msr(r2, &(0x7f0000032680)=""/102386, 0x18ff2) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4m40.688900584s ago: executing program 4 (id=1904): pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x12b, 0x2}}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000400)=[{0x34, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}, {0x0, 0xfa, 0xf2, 0x4}, {0xae9, 0xd8, 0x20, 0x8}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESDEC=r3, @ANYBLOB], 0xfc}}, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x0, 0xfffffffd, 0x19, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x0, 0x800, 0xbca}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@private0, 0x59, r11}) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000800000000001000000000000000000000332661ff5fe060b431f1d497f4dfa9a6fa905bdd9e7c75fd8b145dbd17ad8368f00db68c774e3c9f4efba04ac2c5b6bf74392c824203e1b5dd9b0646ef4bd9752d0b60ada313a4514047fb75e7e19a875c16616cf63fc20a1a8bf703f37af8f0d1ee52fe53c698433f7356c6c559eb079726286abc9a5ad2dd4f0c6f78daeca26d675a1a40b5bb7d0c2a987977b03cebe152bc89e3d90baa22b5d20e217515a2afd9f1e853464d3e1e7ca0aa1d3f96c0ce08d600"], 0x10}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e20, @local}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) io_uring_setup(0x661e, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 4m18.849957507s ago: executing program 32 (id=1893): open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fsopen(&(0x7f00000001c0)='affs\x00', 0x1) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4016060100000042bce74bf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x6, 0xd0, {0xd0, 0x2, "049559af001183b219b6e04601dc13ba696724dd58d5298d1949c6947fdd6c84c5d06315fcc13afbe7d284e4bb4ca326781fea106587ec525eb5761289479bd5b960ca158598c9781fe3df65d34a71a70d71e68ab34f6dfbeb62c1dc5fddfbf2cb749e35eed57f834129a3a2be80afce84d5dc3b972af82cea0c8f9e3856c317ab6b8e3bac1dc58602ca76c14578ba78b4af130bda334b55f2144834bd8af1d6bc906ead46e573e8d54f619fcf8e240a99e9186ffe4595de88af8a3b6101b194683e563d8eeeea9cc6b2621c802a"}}, 0x0}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000d450000001d89c036e49cce9f340300bc3488c167abd6e430baef0af3f2dc07dbe3d849c6f81808c1bcfe1e06e4fb4e050980ca3ccb0828d85ee4dfef6bbfabb8917c47457af2f78ad7"], 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x81, 0x1, "a5"}, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000001180)='./bus\x00') (async) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 4m18.770951512s ago: executing program 33 (id=1903): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0x8}]}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x184) r2 = open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) rmdir(&(0x7f0000000280)='./control\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000740)={0x0, @initdev, @empty}, &(0x7f0000000780)=0xc) getpeername$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0}, &(0x7f0000000800)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xe, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1017, 0x4004000, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="10020000", @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf25010000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000400030058000180140002007465616d5f736c6176655f31000000001400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000008000300020000005c2701800800030004000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="940002800c00018008000100060000003c00018008000100070000000800010003000000080001000600000008000100030000000800010000000000080001000600000008000100070000000c00018008000100080000003c0001800800010008000000080001000000000008000100000000000800010006000000080001000200000008000100040000000800010007000000040003005800018008000300010000000800030001000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000400001801400020076657468315f766c616e00000000000008000300000000000800030003000000080003000200000008000300020000000800030001000000"], 0x210}, 0x1, 0x0, 0x0, 0x140048c0}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r8, 0x38, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f212d2b1d9541653fae56c283d3660069a3a61a1ce38f68f4a4c568f00"}, &(0x7f0000000400)=0x40) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x200, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x3, 0x0) read$msr(r2, &(0x7f0000032680)=""/102386, 0x18ff2) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4m18.686607922s ago: executing program 34 (id=1902): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m18.613421046s ago: executing program 35 (id=1897): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101701, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xd0009412, &(0x7f0000001480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x24, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00) read$hiddev(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x4, 0x12, 0x0, 0x7}]}}}}}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 4m18.535490171s ago: executing program 36 (id=1904): pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x12b, 0x2}}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000400)=[{0x34, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}, {0x0, 0xfa, 0xf2, 0x4}, {0xae9, 0xd8, 0x20, 0x8}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESDEC=r3, @ANYBLOB], 0xfc}}, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x0, 0xfffffffd, 0x19, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x0, 0x800, 0xbca}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@private0, 0x59, r11}) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000800000000001000000000000000000000332661ff5fe060b431f1d497f4dfa9a6fa905bdd9e7c75fd8b145dbd17ad8368f00db68c774e3c9f4efba04ac2c5b6bf74392c824203e1b5dd9b0646ef4bd9752d0b60ada313a4514047fb75e7e19a875c16616cf63fc20a1a8bf703f37af8f0d1ee52fe53c698433f7356c6c559eb079726286abc9a5ad2dd4f0c6f78daeca26d675a1a40b5bb7d0c2a987977b03cebe152bc89e3d90baa22b5d20e217515a2afd9f1e853464d3e1e7ca0aa1d3f96c0ce08d600"], 0x10}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e20, @local}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) io_uring_setup(0x661e, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 1m23.809035834s ago: executing program 7 (id=2626): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x74000}], 0x2, 0x101000, 0x0, 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x47bc, 0xeffd, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r6, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x700, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x80) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x220402, 0x0) 1m22.357392227s ago: executing program 7 (id=2635): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000a7e000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x337, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) 1m22.246685611s ago: executing program 7 (id=2637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000229f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x47d4, &(0x7f0000000180)={0x0, 0x8bb2, 0x1, 0x2, 0x14e}, &(0x7f0000000100), &(0x7f0000000200)) r5 = syz_io_uring_setup(0x233, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) init_module(0x0, 0x300, 0x0) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61616161006100"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140)="dbd5", 0xffffd6c0, r1}, 0x38) 1m20.759211489s ago: executing program 7 (id=2642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x34fe}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) iopl(0x3) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x4) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000001c0), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) r3 = getpid() sched_setaffinity(r3, 0x39, &(0x7f0000000240)=0x9) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x280200, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000008c002, 0x0) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0xffffffffffffffff) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r9, 0xaea2, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) process_mrelease(r6, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24) 1m20.671125703s ago: executing program 7 (id=2644): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m20.359219192s ago: executing program 7 (id=2649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2004) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000158, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f00000003c0)={0x62, 0x0, 0x5, 0x7, 0x4, 0x8001}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x5) fcntl$notify(r5, 0x402, 0x8000003d) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/248, 0xf8}], 0x5, &(0x7f0000000040)}, 0x6}], 0x40001b2, 0x712, 0x0) sendfile(r6, r0, 0x0, 0x578410eb) 1m5.050185438s ago: executing program 37 (id=2649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2004) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000158, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f00000003c0)={0x62, 0x0, 0x5, 0x7, 0x4, 0x8001}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x5) fcntl$notify(r5, 0x402, 0x8000003d) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/248, 0xf8}], 0x5, &(0x7f0000000040)}, 0x6}], 0x40001b2, 0x712, 0x0) sendfile(r6, r0, 0x0, 0x578410eb) 24.620405091s ago: executing program 5 (id=2806): fanotify_init(0x8, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)) socket$kcm(0x2d, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 24.39281315s ago: executing program 9 (id=2808): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000200)={&(0x7f000038a000/0x4000)=nil, 0x9, 0x1, 0x84}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x29, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x20, {0x0, 0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) read$char_usb(r2, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x4a) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_usb_disconnect(r1) r9 = io_uring_setup(0x3454, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 23.207920133s ago: executing program 8 (id=2810): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r7, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240040b97d31024d9c15c19ab65bcea6ea7d0000", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008002a402907fea4cc1442ad94a9e1", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20000014) r8 = socket(0xf, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="8405c6e794d2e3283a900300cb0b163a82", 0x11}, {&(0x7f0000000500)="3ced0c74c75350f4a590e15c307b5def62d66a822819e8954bece548af7533ad00ff782394aea71d67540bff3344afddeb649fb2237bd5a4a8d4e0c53c77dbef29e3ea8c516cba69d6010d2ee33c017d7ce5b51a33355a87507452669ad0d9f678816157b29600ab24120082d6af74b89e4ff25431a5b0dafc227ec787ad5506b07a88b58c348abcee579db72318618d42ebf8b5b0b50bab33215377a935f0977f869a", 0xa3}, {&(0x7f0000000680)="9eba947b6ae15dffd068752294a0e568afc5f3174702656085bbe8eead657ffd3407793a7658bfd0651a68eeea9e3f26bebf33759073fb5360ef9c466b38ed92bd272a8c3a5deaad01ef9e65468c4211f19322b0fda27006598f2d37f1cdee613bf614fc49bec47d9125454ea01aa7d50192928887dc6fffcda41086a22e53ea74bcad3bbb69b5e1c83387bc7adf55fe08d240b61482d4d1ccc54c4e9d21852b27427a87d0d9c3a51eb01a49dbc1914011e76c2287fb6efef4600a61b192adf3ee15e3e6f2a76773b55e14b0f4b33d4cafb519d17e645e16d85fe9", 0xdb}, {&(0x7f0000000780)="44fb4f13aed59bedabff482085c06d0da4b34ad5ec2ec2f874a22f9088686f9b4a261fc531e6a3ddf911175544c183c791335fdfd282d4112b0a289ad75ae9d1578ae0949c503cc51c28116a5ef2b6ccf23a67f4815a01c4f5fb8db8dda5fc177c162f3b2f34919ebfe59bcfcbe922d130ca25f08fb7e553d688d4dfc4719951b7b51d121e5c432a7df9b14595b396d4b4f6ff0a30198192a3adce13be23a12631ee", 0xa2}], 0x4, 0x0, 0x0, 0x10}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x2, 0x1, 0x0, 0x6}, 0x20) socket$inet(0x2, 0x5, 0x3ff) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) 22.98578993s ago: executing program 6 (id=2811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 22.435482493s ago: executing program 5 (id=2812): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.277129539s ago: executing program 5 (id=2814): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}], 0x3}, 0x4}], 0x2, 0x60, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r8, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 22.149324446s ago: executing program 8 (id=2815): connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x1010, 0xffffffffffffffff, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) close_range(r3, r4, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0xff8e}}, 0x3c) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @nfc={0x27, r1, 0xffffffffffffffff, 0x3}, @xdp={0x2c, 0x7, r6, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x9bb, &(0x7f0000000000)='ip6_vti0\x00', 0x3, 0x1, 0x3}) 20.706997725s ago: executing program 0 (id=2817): fanotify_init(0x8, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)) socket$kcm(0x2d, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 20.693462696s ago: executing program 8 (id=2818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00', "5ff9dfc8791532b8"}, 0x28) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000540)="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", 0x105}, {&(0x7f0000000280)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588aaf9dce463cb08890097ea29302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfff", 0x7a}, {&(0x7f0000000d00)="7ab285d32f60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1", 0xcd}, {&(0x7f0000001700)="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", 0xbe4}, {&(0x7f00000006c0)="156f35eda3eaf40347c8fcb457593de1fc6e333cc2b86d11cefa6387fed76e61b0bad40d6f6de18452f2ede01ca44de9ed7fa9f1b85663b4edb341e4540122b84005f5ec9cc3b5421dcddec26cc9ff01000000000000b42062e393bbfaa8aac292e2b2fd6c964add609061bb4b97eaf3531f806ffa0d4f71a64ebc154a23b362c2c4b378dfab3e9bfdc247daff233df606f602b0c135c48d08e99b43f7f1cfea3c58b3714b5b8d6d4c", 0xa9}, {&(0x7f0000000a80)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0fc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197df7", 0x50}], 0x8}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 20.491882879s ago: executing program 5 (id=2819): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RMKDIR(r6, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x4, r7, 0x0, &(0x7f0000000280)="d831ccbd244ff7048524faaa44b0358fac8949f0b9441e0e4237f6d990a3f82c2db6ad7986e5971fa1c2624a222ce64160b4f85f73cdc0d5d1b0ea79b8177e1775cacc8994fc83a01e99ac1afc83f2003b3de61e373416c02276b6eed447f748aaafbd5a402cb7b99ad041b2cb54085511d2bb5e20995bee", 0x78, 0x40000000}) 19.789878403s ago: executing program 8 (id=2820): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000000000001f"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000910) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x3, 0x2) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x8, 0x800) kexec_load(0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mq_open(0x0, 0x840, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="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", 0x15e}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002905000034", @ANYRESOCT=r1], 0x18}}], 0x1, 0x24044051) 19.789481086s ago: executing program 6 (id=2821): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x2c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 19.646483559s ago: executing program 0 (id=2822): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x28, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x3}], 0x78, 0x0, &(0x7f0000000580)="f627baf03bb738642e52abe889bd82253cad51d8021c4ff1e50a5634a54e95521c00b738844f15d1a075afe63e0004aca8ce6b6860bf0539b0388f8ee6ff942c417c76deb0a0af403fb851fa558cfafc4a79ca2a355e8d7d3f501807c5e6c08eef4e9b818b29e472dd096f9af3edb34bbefec7746cec1c24"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x4030bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19.17992437s ago: executing program 6 (id=2823): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x28, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x3}], 0x78, 0x0, &(0x7f0000000580)="f627baf03bb738642e52abe889bd82253cad51d8021c4ff1e50a5634a54e95521c00b738844f15d1a075afe63e0004aca8ce6b6860bf0539b0388f8ee6ff942c417c76deb0a0af403fb851fa558cfafc4a79ca2a355e8d7d3f501807c5e6c08eef4e9b818b29e472dd096f9af3edb34bbefec7746cec1c24"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x4030bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.531661881s ago: executing program 9 (id=2824): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.408431152s ago: executing program 0 (id=2825): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r1, &(0x7f0000003c00)=[{{&(0x7f0000000200)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="d596ff04c79a22183c75bab064d8", 0xe}], 0x1}}], 0x1, 0x40840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) signalfd(r0, &(0x7f0000000440)={[0x8000]}, 0x8) 16.853865687s ago: executing program 5 (id=2826): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16.788105535s ago: executing program 0 (id=2827): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x40000005, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x800, 0x7) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a962, 0x2, 0x201, 0x7fff, 0x48cd, 0xfffffffffffffffc, 0x80000001}) 16.787265592s ago: executing program 9 (id=2828): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16.699636682s ago: executing program 5 (id=2829): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}], 0x3}, 0x4}], 0x2, 0x60, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r8, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 16.698422132s ago: executing program 8 (id=2830): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 16.55532327s ago: executing program 6 (id=2831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00', "5ff9dfc8791532b8"}, 0x28) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000540)="1165b65dc1f84946f03562d6913624a2b6d8ec92d3b85d62c12f159214de3618d4dc028c1b6992dc66459f58c8b8b56fe04e31cdde47a1821cf3bddee1076115f9afb5391f0f33219347a02ffb4109374ae3528f700cf1963b704fd24e27b70dd82d3ef5fd0d6c7e9512db1aff64b84d0fe3cce36da98fcc74949374701d31a1418b3fb186b4fc5f661870be567805e16f89688c5b75b19b2081c8026c57eb5eefe65efbb7e34c39a7651531bd31e4bcb66636f5412f2f97dd0f6eba05988d5dbfef41b1382b757fa7654472294d51c5681364bc2e48cfb226168a09933e5851fcf209063fdb938b7d7351e7f065d41ec4fa4090a59490776f19d579833473c5faaf30c40d", 0x105}, {&(0x7f0000000280)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588aaf9dce463cb08890097ea29302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfff", 0x7a}, {&(0x7f0000000d00)="7ab285d32f60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1372c18", 0xd0}, {&(0x7f0000001700)="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", 0xbe4}, {&(0x7f00000006c0)="156f35eda3eaf40347c8fcb457593de1fc6e333cc2b86d11cefa6387fed76e61b0bad40d6f6de18452f2ede01ca44de9ed7fa9f1b85663b4edb341e4540122b84005f5ec9cc3b5421dcddec26cc9ff01000000000000b42062e393bbfaa8aac292e2b2fd6c964add609061bb4b97eaf3531f806ffa0d4f71a64ebc154a23b362c2c4b378dfab3e9bfdc247daff233df606f602b0c135c48d08e99b43f7f1cfea3c58b3714b5b8d6d4c", 0xa9}, {&(0x7f0000000a80)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0fc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197df7", 0x50}], 0x8}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 16.157133521s ago: executing program 6 (id=2832): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 15.637376331s ago: executing program 0 (id=2833): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$vsock(0xffffffffffffff9c, 0x0, 0x230801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000240)={{0x20000000004, 0x2c2}, {0x0, 0xe}, 0xfffffffd, 0x1}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYBLOB="461fa5ed80d7f7ed7e21a1c0129bd59a0c1c712dacd7d1cf7afd2d542c851565193a3973fd2c5d36336e6ff8a76f5870e7a52209869d23f9a28ce6292c6b1d05a246f5b73445dc8760408e8b1476a8f171d5d429a0201aef98f44b78646f957e94cef1024a57ef2824435c5bc30e5d57d2243253417777288861f85017f9e5a0728baf2d3f7c39f5bca0ad2fbd2c5a57aca2aa22e63a64df0ef5", @ANYBLOB="11fe8dcb928a75ca31f3310adde1"]) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) gettid() r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f00000005c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000440)={{0x6, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r3, 0x0, 0x0) 15.636464478s ago: executing program 9 (id=2834): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x40000005, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x800, 0x7) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a962, 0x2, 0x201, 0x7fff, 0x48cd, 0xfffffffffffffffc, 0x80000001}) 15.34648581s ago: executing program 8 (id=2835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = mq_open(&(0x7f0000000100)='&$)+@*^\x00', 0x80, 0x110, &(0x7f0000000140)={0x6, 0x1, 0x3ff, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000200)="5b0f229fe4577fc645402312c0982972971f3cef083ffa2bc5a3761014fe55f969e023d5837195", 0x27, 0x8, &(0x7f0000000280)={r4, r5+60000000}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) unshare(0x68040200) brk(0x689d80000000) 14.463285693s ago: executing program 9 (id=2836): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) mkdir(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 14.047279086s ago: executing program 0 (id=2837): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r2, &(0x7f0000003c00)=[{{&(0x7f0000000200)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="d596ff04c79a22183c75bab064d8", 0xe}], 0x1}}], 0x1, 0x40840) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) signalfd(r0, &(0x7f0000000440)={[0x8000]}, 0x8) 10.551231385s ago: executing program 9 (id=2838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) mkdir(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 0s ago: executing program 6 (id=2839): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0xc9d68689ab008576, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x7f, 0x18}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x20000044) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x59, "c729e27800d699611bee952b401b87a77108f07df122579402845aad0a48640121fdcea2d8c12caa5929d212f05063619c11f106632479dd7abcbfeddd527e543f92af031cdcc0470b91e065b88b2c7b605bc7551661c30913"}, 0x0}) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.5.2376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x0 [ 476.874110][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 477.042365][ T9] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.064354][ T9] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.099454][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 477.108691][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 477.131207][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.153606][ T9] usb 7-1: config 0 descriptor?? [ 477.367079][T13591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.376616][T13591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.394812][T13591] Invalid ELF header magic: != ELF [ 477.411292][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 477.417520][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 477.458998][ T9] usb 7-1: USB disconnect, device number 15 [ 478.447667][ T30] audit: type=1400 audit(2000000242.160:751): avc: denied { set_context_mgr } for pid=13642 comm="syz.5.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 478.471719][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'. [ 478.665304][ T30] audit: type=1326 audit(2000000242.380:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.2396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5479d8e969 code=0x0 [ 478.787755][T13661] netlink: 'syz.7.2397': attribute type 21 has an invalid length. [ 479.839527][T13703] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 479.930498][ T1841] IPVS: starting estimator thread 0... [ 480.050519][T13707] IPVS: using max 39 ests per chain, 93600 per kthread [ 480.436534][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2407'. [ 480.589360][T13736] Invalid ELF header magic: != ELF [ 481.132693][ T30] audit: type=1326 audit(2000000244.850:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc91e98e969 code=0x0 [ 481.333478][ T30] audit: type=1400 audit(2000000245.030:754): avc: denied { read write } for pid=13769 comm="syz.6.2416" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 481.375946][ T30] audit: type=1400 audit(2000000245.030:755): avc: denied { open } for pid=13769 comm="syz.6.2416" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 481.420178][ T30] audit: type=1400 audit(2000000245.080:756): avc: denied { ioctl } for pid=13769 comm="syz.6.2416" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 482.419711][T13778] netlink: 'syz.7.2419': attribute type 10 has an invalid length. [ 482.505801][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2419'. [ 482.819914][T13802] nfs: Unknown parameter ' [ 482.819914][T13802] ' [ 482.932512][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 482.940356][ T5822] Bluetooth: hci6: command 0x0406 tx timeout [ 482.949187][ T5827] Bluetooth: hci7: command 0x0406 tx timeout [ 482.961473][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 483.125928][T13806] Invalid ELF header magic: != ELF [ 483.309311][T13807] netlink: 'syz.8.2425': attribute type 16 has an invalid length. [ 483.317331][T13807] netlink: 'syz.8.2425': attribute type 17 has an invalid length. [ 483.367606][T13812] overlayfs: missing 'lowerdir' [ 484.337481][T13822] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 484.450358][ T5818] Bluetooth: hci8: command 0x0405 tx timeout [ 484.557521][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2432'. [ 484.656664][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.701517][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.709641][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 485.021921][T13860] Dead loop on virtual device ip6_vti0, fix it urgently! [ 485.560775][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 485.575340][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 485.682899][T13881] netlink: 'syz.8.2438': attribute type 16 has an invalid length. [ 485.691019][T13881] netlink: 'syz.8.2438': attribute type 17 has an invalid length. [ 485.744248][T13882] overlayfs: missing 'lowerdir' [ 486.144142][T13886] netlink: ct family unspecified [ 486.166452][T13886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.365838][T13888] FAULT_INJECTION: forcing a failure. [ 486.365838][T13888] name failslab, interval 1, probability 0, space 0, times 0 [ 486.383855][T13888] CPU: 1 UID: 0 PID: 13888 Comm: syz.5.2439 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 486.383883][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.383893][T13888] Call Trace: [ 486.383900][T13888] [ 486.383906][T13888] dump_stack_lvl+0x16c/0x1f0 [ 486.383935][T13888] should_fail_ex+0x512/0x640 [ 486.383956][T13888] ? fs_reclaim_acquire+0xae/0x150 [ 486.383982][T13888] ? tomoyo_encode2+0x100/0x3e0 [ 486.384005][T13888] should_failslab+0xc2/0x120 [ 486.384023][T13888] __kmalloc_noprof+0xd2/0x510 [ 486.384055][T13888] tomoyo_encode2+0x100/0x3e0 [ 486.384082][T13888] tomoyo_encode+0x29/0x50 [ 486.384104][T13888] tomoyo_realpath_from_path+0x18f/0x6e0 [ 486.384130][T13888] ? tomoyo_profile+0x47/0x60 [ 486.384148][T13888] tomoyo_path_number_perm+0x245/0x580 [ 486.384167][T13888] ? tomoyo_path_number_perm+0x237/0x580 [ 486.384189][T13888] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.384211][T13888] ? find_held_lock+0x2b/0x80 [ 486.384253][T13888] ? find_held_lock+0x2b/0x80 [ 486.384272][T13888] ? hook_file_ioctl_common+0x145/0x410 [ 486.384294][T13888] ? __fget_files+0x20e/0x3c0 [ 486.384325][T13888] security_file_ioctl+0x9b/0x240 [ 486.384350][T13888] __x64_sys_ioctl+0xb7/0x200 [ 486.384374][T13888] do_syscall_64+0xcd/0x260 [ 486.384398][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.384415][T13888] RIP: 0033:0x7f079b38e969 [ 486.384429][T13888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.384445][T13888] RSP: 002b:00007f079c1bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.384461][T13888] RAX: ffffffffffffffda RBX: 00007f079b5b6080 RCX: 00007f079b38e969 [ 486.384472][T13888] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000005 [ 486.384482][T13888] RBP: 00007f079c1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 486.384491][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.384500][T13888] R13: 0000000000000000 R14: 00007f079b5b6080 R15: 00007ffe474d13c8 [ 486.384523][T13888] [ 486.384579][T13888] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.748311][T13924] netlink: 'syz.5.2452': attribute type 16 has an invalid length. [ 487.756524][T13924] netlink: 'syz.5.2452': attribute type 17 has an invalid length. [ 487.870784][ T24] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 487.892170][T13924] overlayfs: missing 'lowerdir' [ 488.160627][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 488.264911][ T24] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 488.404795][ T24] usb 10-1: config 0 has no interface number 0 [ 488.608365][ T24] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.625197][ T24] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 488.638313][ T24] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.649651][ T24] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.713087][ T24] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 488.930479][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.186114][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.205486][ T24] usb 10-1: config 0 descriptor?? [ 489.661336][ T24] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 489.729678][ T24] usb 10-1: USB disconnect, device number 21 [ 489.773152][ T5865] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 489.774656][ T24] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 489.940382][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 489.971123][ T5865] usb 6-1: config index 0 descriptor too short (expected 2596, got 36) [ 489.979430][ T5865] usb 6-1: config 255 has too many interfaces: 249, using maximum allowed: 32 [ 490.002992][ T5865] usb 6-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 490.055548][ T5865] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 249 [ 490.143797][ T5865] usb 6-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=82.aa [ 490.184416][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.218290][ T5865] usb 6-1: Product: syz [ 490.250901][ T5865] usb 6-1: Manufacturer: syz [ 490.290448][ T5865] usb 6-1: SerialNumber: syz [ 491.101114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.258059][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2461'. [ 491.344877][ T5865] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 491.360293][ T5865] usb 6-1: no configuration chosen from 1 choice [ 491.880655][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2463'. [ 491.889658][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2463'. [ 491.934924][T14004] gretap0: entered promiscuous mode [ 492.021670][T14004] batadv_slave_1: entered promiscuous mode [ 492.717755][ T5944] usb 6-1: USB disconnect, device number 16 [ 492.720748][T14031] infiniband syz!: set active [ 492.728613][T14031] infiniband syz!: added team_slave_0 [ 492.818773][T14031] RDS/IB: syz!: added [ 492.823735][T14031] smc: adding ib device syz! with port count 1 [ 492.830333][T14031] smc: ib device syz! port 1 has pnetid [ 493.111411][T14048] netlink: 'syz.8.2467': attribute type 3 has an invalid length. [ 493.430442][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 493.550437][ T5944] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 493.734832][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 493.752057][ T24] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 493.770299][ T24] usb 9-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 494.242356][ T5944] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.285339][ T24] usb 9-1: config 0 has no interface number 0 [ 494.393874][ T24] usb 9-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 494.494968][ T5944] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.544363][ T24] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 494.577219][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 494.618340][ T5944] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 494.631347][ T24] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 494.645108][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.660358][ T24] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 25970, setting to 1024 [ 494.682071][ T24] usb 9-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 494.693091][ T5944] usb 6-1: config 0 descriptor?? [ 494.723923][ T24] usb 9-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 494.758870][ T24] usb 9-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 494.762834][ T30] audit: type=1400 audit(2000000258.480:757): avc: denied { bind } for pid=14064 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 494.769560][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.801005][ T30] audit: type=1400 audit(2000000258.510:758): avc: denied { listen } for pid=14064 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 494.821848][ T24] usb 9-1: config 0 descriptor?? [ 494.828962][T14048] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 494.840831][T14048] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 494.846103][ T30] audit: type=1400 audit(2000000258.510:759): avc: denied { read } for pid=14064 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 494.849186][T14068] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2474'. [ 494.884447][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.910043][T14050] Invalid ELF header magic: != ELF [ 494.934007][ T5944] usbhid 6-1:0.0: can't add hid device: -71 [ 494.949147][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 494.990144][ T5944] usb 6-1: USB disconnect, device number 17 [ 495.095840][ T5899] usb 9-1: USB disconnect, device number 18 [ 495.181252][T14079] nfs: Unknown parameter '' [ 495.212189][ T30] audit: type=1400 audit(2000000258.930:760): avc: denied { write } for pid=14077 comm="syz.9.2476" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 495.215267][T14078] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 495.253365][T14078] SELinux: failed to load policy [ 495.263394][ T30] audit: type=1400 audit(2000000258.930:761): avc: denied { load_policy } for pid=14077 comm="syz.9.2476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 496.224993][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 496.530489][ T2147] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 496.605358][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 496.760360][ T2147] usb 9-1: device descriptor read/64, error -32 [ 497.140980][ T2147] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 497.295556][T14120] nfs: Unknown parameter ' [ 497.295556][T14120] ' [ 497.315062][ T2147] usb 9-1: Using ep0 maxpacket: 16 [ 497.385932][ T2147] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 497.416737][ T2147] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 497.425443][ T2147] usb 9-1: Product: syz [ 497.429829][ T2147] usb 9-1: Manufacturer: syz [ 497.434833][ T2147] usb 9-1: SerialNumber: syz [ 497.456675][ T2147] usb 9-1: config 0 descriptor?? [ 497.490447][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.824064][ T2147] usb 9-1: USB disconnect, device number 20 [ 498.243579][T14130] fuse: Bad value for 'user_id' [ 498.248690][T14130] fuse: Bad value for 'user_id' [ 498.560449][ T30] audit: type=1326 audit(2000000262.270:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 498.603421][T14143] gfs2: not a GFS2 filesystem [ 498.670387][ T30] audit: type=1326 audit(2000000262.270:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 498.778781][ T30] audit: type=1326 audit(2000000262.310:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 498.851463][T14148] netlink: 'syz.9.2493': attribute type 10 has an invalid length. [ 498.952312][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2493'. [ 499.690361][ T30] audit: type=1326 audit(2000000262.319:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 499.720459][ T30] audit: type=1326 audit(2000000262.319:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 499.814492][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2493'. [ 500.034694][T12643] udevd[12643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 500.149357][T12643] udevd[12643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 501.733580][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.132156][T14205] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2504'. [ 502.344137][T14205] erspan0: entered allmulticast mode [ 502.705075][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 502.705092][ T30] audit: type=1400 audit(2000000266.419:772): avc: denied { watch_mount } for pid=14214 comm="syz.6.2507" path="/118" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 502.727274][T14215] xt_policy: output policy not valid in PREROUTING and INPUT [ 502.990496][ T5809] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 503.191860][ T5809] usb 10-1: Using ep0 maxpacket: 16 [ 503.234713][ T5809] usb 10-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 503.244533][ T30] audit: type=1400 audit(2000000266.949:773): avc: denied { write } for pid=14233 comm="syz.8.2511" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 503.278552][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.293966][ T5809] usb 10-1: Product: syz [ 503.304214][ T30] audit: type=1400 audit(2000000266.949:774): avc: denied { open } for pid=14233 comm="syz.8.2511" path="/112/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 503.336112][ T5809] usb 10-1: Manufacturer: syz [ 503.341912][ T5809] usb 10-1: SerialNumber: syz [ 503.381182][ T5809] usb 10-1: config 0 descriptor?? [ 503.389227][ T5809] safe_serial 10-1:0.0: safe_serial converter detected [ 503.407615][ T30] audit: type=1400 audit(2000000266.989:775): avc: denied { ioctl } for pid=14226 comm="syz.5.2510" path="socket:[38355]" dev="sockfs" ino=38355 ioctlcmd=0x89ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 503.462225][ T5809] usb 10-1: safe_serial converter now attached to ttyUSB0 [ 503.494724][ T30] audit: type=1400 audit(2000000266.989:776): avc: denied { map } for pid=14233 comm="syz.8.2511" path="pipe:[38411]" dev="pipefs" ino=38411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 503.554775][T14241] FAULT_INJECTION: forcing a failure. [ 503.554775][T14241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.622385][T14241] CPU: 1 UID: 0 PID: 14241 Comm: syz.6.2512 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 503.622413][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.622423][T14241] Call Trace: [ 503.622429][T14241] [ 503.622436][T14241] dump_stack_lvl+0x16c/0x1f0 [ 503.622464][T14241] should_fail_ex+0x512/0x640 [ 503.622489][T14241] _copy_to_user+0x32/0xd0 [ 503.622514][T14241] simple_read_from_buffer+0xcb/0x170 [ 503.622540][T14241] proc_fail_nth_read+0x197/0x270 [ 503.622565][T14241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.622590][T14241] ? rw_verify_area+0xcf/0x680 [ 503.622610][T14241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.622635][T14241] vfs_read+0x1de/0xc70 [ 503.622660][T14241] ? __pfx___mutex_lock+0x10/0x10 [ 503.622682][T14241] ? __pfx_vfs_read+0x10/0x10 [ 503.622712][T14241] ? __fget_files+0x20e/0x3c0 [ 503.622743][T14241] ksys_read+0x12a/0x240 [ 503.622766][T14241] ? __pfx_ksys_read+0x10/0x10 [ 503.622787][T14241] ? rcu_is_watching+0x12/0xc0 [ 503.622813][T14241] do_syscall_64+0xcd/0x260 [ 503.622837][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.622853][T14241] RIP: 0033:0x7f5479d8d37c [ 503.622866][T14241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 503.622882][T14241] RSP: 002b:00007f547ac14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.622899][T14241] RAX: ffffffffffffffda RBX: 00007f5479fb5fa0 RCX: 00007f5479d8d37c [ 503.622909][T14241] RDX: 000000000000000f RSI: 00007f547ac140a0 RDI: 0000000000000008 [ 503.622919][T14241] RBP: 00007f547ac14090 R08: 0000000000000000 R09: 0000000000000005 [ 503.622928][T14241] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 503.622937][T14241] R13: 0000000000000000 R14: 00007f5479fb5fa0 R15: 00007ffc29d1b718 [ 503.622959][T14241] [ 503.933880][T11417] usb 10-1: USB disconnect, device number 22 [ 504.086035][T11417] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 504.103420][T11417] safe_serial 10-1:0.0: device disconnected [ 504.364364][T14269] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2517'. [ 504.790009][T14288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.880322][ T5902] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 505.031672][ T5902] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.041702][ T5809] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 505.053865][ T5902] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.067321][ T5902] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 505.077289][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.180404][ T5809] usb 9-1: device descriptor read/64, error -71 [ 505.220417][ T949] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 505.310706][ T5902] usb 7-1: usb_control_msg returned -32 [ 505.324749][ T5902] usbtmc 7-1:16.0: can't read capabilities [ 505.359616][ T5126] block nbd4: Receive control failed (result -104) [ 505.384559][ T949] usb 6-1: Using ep0 maxpacket: 32 [ 505.397762][ T949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 505.423374][ T5809] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 505.430324][ T949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 505.442947][ T949] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.461982][ T949] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 505.471723][ T949] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 505.481026][ T949] usb 6-1: Product: syz [ 505.486858][ T949] usb 6-1: Manufacturer: syz [ 505.491639][ T949] usb 6-1: SerialNumber: syz [ 505.512299][ T949] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input27 [ 505.702199][ T5809] usb 9-1: device descriptor read/64, error -71 [ 505.777133][T11417] usb 6-1: USB disconnect, device number 18 [ 505.811047][ T5809] usb usb9-port1: attempt power cycle [ 505.816563][ T30] audit: type=1326 audit(2000000269.529:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 505.861385][ T949] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 505.865129][ T30] audit: type=1326 audit(2000000269.529:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f079b38d2d0 code=0x7ffc0000 [ 505.870937][T11417] appletouch 6-1:1.0: input: appletouch disconnected [ 505.912098][ T30] audit: type=1326 audit(2000000269.529:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 506.014000][ T30] audit: type=1326 audit(2000000269.529:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 506.039155][ T30] audit: type=1326 audit(2000000269.529:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 506.090354][ T949] usb 10-1: Using ep0 maxpacket: 16 [ 506.102695][ T949] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 506.118201][ T949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 506.148394][ T949] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 506.158167][ T949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.166700][ T949] usb 10-1: Product: syz [ 506.183233][ T949] usb 10-1: Manufacturer: syz [ 506.205772][ T949] usb 10-1: SerialNumber: syz [ 506.210405][ T5809] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 506.222510][ T949] usb 10-1: config 0 descriptor?? [ 506.240884][ T5809] usb 9-1: device descriptor read/8, error -71 [ 506.241538][T11417] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 506.420420][T11417] usb 6-1: device descriptor read/64, error -71 [ 506.490346][ T5809] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 506.504826][ T949] appledisplay 10-1:0.0: Error while getting initial brightness: -110 [ 506.517795][ T949] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110 [ 506.571559][ T5809] usb 9-1: device descriptor read/8, error -71 [ 506.645022][ T5944] usb 10-1: USB disconnect, device number 23 [ 506.670351][T11417] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 506.685220][ T5809] usb usb9-port1: unable to enumerate USB device [ 506.896704][T11417] usb 6-1: device descriptor read/64, error -71 [ 507.030677][T11417] usb usb6-port1: attempt power cycle [ 507.203494][T14358] erspan0: entered allmulticast mode [ 507.855634][T11417] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 507.867804][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 507.867826][ T30] audit: type=1400 audit(2000000271.589:805): avc: denied { append } for pid=14367 comm="syz.9.2532" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 507.933142][T11417] usb 6-1: device descriptor read/8, error -71 [ 508.438334][ T30] audit: type=1400 audit(2000000271.619:806): avc: denied { map } for pid=14367 comm="syz.9.2532" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 508.466651][T14375] syz.8.2533: attempt to access beyond end of device [ 508.466651][T14375] loop17: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 508.587278][T14375] EXT4-fs (loop17): unable to read superblock [ 508.614568][ T30] audit: type=1400 audit(2000000271.619:807): avc: denied { write execute } for pid=14367 comm="syz.9.2532" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 508.639016][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.735853][ T30] audit: type=1326 audit(2000000271.649:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 508.759189][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.829964][T14385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.231786][ T30] audit: type=1326 audit(2000000271.649:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 509.255129][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.460521][ T5865] usb 7-1: USB disconnect, device number 16 [ 510.001554][ T30] audit: type=1400 audit(2000000273.709:810): avc: denied { getopt } for pid=14401 comm="syz.6.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 510.020961][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.027410][ T9] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 510.112118][T14400] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2541'. [ 510.206131][T14400] erspan0: entered allmulticast mode [ 510.210911][ T9] usb 9-1: config 0 has an invalid interface number: 3 but max is 0 [ 510.229691][ T9] usb 9-1: config 0 has no interface number 0 [ 510.241162][ T30] audit: type=1326 audit(2000000273.959:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 510.292920][ T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 510.309041][ T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 510.344038][ T30] audit: type=1326 audit(2000000273.999:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 510.368657][ T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 510.390083][ T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 510.421575][ T30] audit: type=1326 audit(2000000273.999:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000 [ 510.447515][ T9] usb 9-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 510.481969][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.503470][ T30] audit: type=1326 audit(2000000273.999:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f079b38d2d0 code=0x7ffc0000 [ 510.537132][ T9] usb 9-1: config 0 descriptor?? [ 510.542326][ T5865] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 510.564481][ T9] hub 9-1:0.3: bad descriptor, ignoring hub [ 510.585096][ T9] hub 9-1:0.3: probe with driver hub failed with error -5 [ 510.590568][ T5902] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 510.593221][ T9] sierra 9-1:0.3: Sierra USB modem converter detected [ 511.360648][ T5902] usb 10-1: Using ep0 maxpacket: 32 [ 511.361054][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 511.612799][ T5902] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 511.632734][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 511.642297][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.700734][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.722759][ T5902] usb 10-1: config 0 descriptor?? [ 511.762495][ T5902] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 511.786776][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.817717][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.898344][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 511.935904][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 511.960506][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.963839][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2546'. [ 512.050501][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 512.149080][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 512.244184][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 512.276807][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 512.305428][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 512.457609][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 512.494293][T14446] nfs: Unknown parameter ' [ 512.494293][T14446] ' [ 512.792734][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 512.891023][ T5902] gspca_nw80x: reg_r err -110 [ 512.897450][ T5902] nw80x 10-1:0.0: probe with driver nw80x failed with error -110 [ 512.910446][ T9] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 512.951367][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 512.971580][T14453] netlink: 'syz.8.2554': attribute type 10 has an invalid length. [ 513.009690][ T9] usb 9-1: Sierra USB modem converter now attached to ttyUSB1 [ 513.034532][T14447] SELinux: failed to load policy [ 513.044414][T14453] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2554'. [ 513.056270][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 513.056309][ T30] audit: type=1326 audit(2000000276.779:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 513.110114][ T5865] usb 6-1: string descriptor 0 read error: -22 [ 513.125642][ T5865] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 513.138397][ T9] usb 9-1: USB disconnect, device number 25 [ 513.175482][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.191253][T14453] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2554'. [ 513.230087][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 513.258068][ T30] audit: type=1326 audit(2000000276.809:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 513.294683][ T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 513.303588][ T5865] usb 6-1: can't set config #168, error -71 [ 513.331879][ T30] audit: type=1326 audit(2000000276.819:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 513.363017][ T5865] usb 6-1: USB disconnect, device number 23 [ 513.375808][ T9] sierra 9-1:0.3: device disconnected [ 513.395663][ T30] audit: type=1326 audit(2000000276.819:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 513.419332][ T30] audit: type=1326 audit(2000000276.819:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 513.444027][ T30] audit: type=1326 audit(2000000276.819:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 513.468615][ T30] audit: type=1326 audit(2000000276.819:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 513.492087][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.706876][T12643] udevd[12643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 513.797732][ T30] audit: type=1326 audit(2000000276.819:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 514.218862][ T9] usb 10-1: USB disconnect, device number 24 [ 514.258844][ T30] audit: type=1326 audit(2000000276.819:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 514.286653][T14475] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2559'. [ 514.297667][ T30] audit: type=1326 audit(2000000276.819:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000 [ 514.333519][T14482] bond2: entered promiscuous mode [ 514.352666][T14482] bond2: entered allmulticast mode [ 514.358325][T14482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.830045][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2564'. [ 514.836874][T14510] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2566'. [ 515.062088][ T5863] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 515.231099][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 515.261075][ T5863] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 515.299280][ T5863] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 515.450328][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.478752][ T5863] usb 7-1: Product: syz [ 515.498433][ T5863] usb 7-1: Manufacturer: syz [ 515.539573][ T5863] usb 7-1: SerialNumber: syz [ 515.569109][ T5863] usb 7-1: config 0 descriptor?? [ 515.594333][ T5863] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 515.890553][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 516.062162][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 516.080614][ T24] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 516.098382][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.108210][ T24] usb 6-1: Product: syz [ 516.116529][ T24] usb 6-1: Manufacturer: syz [ 516.123421][ T24] usb 6-1: SerialNumber: syz [ 516.130754][T11417] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 516.167567][ T24] usb 6-1: config 0 descriptor?? [ 516.180841][ T24] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 516.290911][T11417] usb 10-1: Using ep0 maxpacket: 32 [ 516.313476][T11417] usb 10-1: config 0 has an invalid interface number: 199 but max is 0 [ 516.334170][T11417] usb 10-1: config 0 has no interface number 0 [ 516.346607][T11417] usb 10-1: config 0 interface 199 has no altsetting 0 [ 516.363991][T11417] usb 10-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 516.380326][T11417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.388832][T11417] usb 10-1: Product: syz [ 516.389010][ T24] usb 6-1: USB disconnect, device number 24 [ 516.398708][T11417] usb 10-1: Manufacturer: syz [ 516.411536][T11417] usb 10-1: SerialNumber: syz [ 516.435548][T11417] usb 10-1: config 0 descriptor?? [ 516.452360][T14514] netlink: 'syz.8.2568': attribute type 11 has an invalid length. [ 516.465425][T11417] usbtouchscreen 10-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 516.683660][ T9] usb 10-1: USB disconnect, device number 25 [ 517.735087][T14580] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2578'. [ 518.240365][ T9] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 518.442003][ T9] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 518.457507][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 518.479857][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 518.495086][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.513890][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.530357][ T9] usb 6-1: Product: syz [ 518.538935][ T9] usb 6-1: Manufacturer: syz [ 518.548369][ T9] usb 6-1: SerialNumber: syz [ 518.890109][ T5863] gspca_zc3xx: reg_w_i err -71 [ 518.924256][T14562] [U]  [ 518.986030][ T5863] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 519.035783][ T5863] usb 7-1: USB disconnect, device number 17 [ 519.129896][T14616] netlink: 'syz.9.2583': attribute type 10 has an invalid length. [ 519.159422][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2583'. [ 519.325618][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2583'. [ 520.077563][T11796] udevd[11796]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 520.970740][T11417] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 521.169379][ T9] usb 6-1: 0:10 : does not exist [ 521.214797][ T9] usb 6-1: 0:36 : does not exist [ 521.277646][ T9] usb 6-1: USB disconnect, device number 25 [ 521.305331][T11417] usb 10-1: Using ep0 maxpacket: 8 [ 521.319676][T14660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2590'. [ 521.329016][T11417] usb 10-1: config 7 has an invalid interface number: 102 but max is 2 [ 521.329044][T11417] usb 10-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 521.329059][T11417] usb 10-1: config 7 has 1 interface, different from the descriptor's value: 3 [ 521.329078][T11417] usb 10-1: config 7 has no interface number 0 [ 521.329109][T11417] usb 10-1: config 7 interface 102 altsetting 255 endpoint 0x3 has invalid maxpacket 25431, setting to 1024 [ 521.483313][T11417] usb 10-1: config 7 interface 102 altsetting 255 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 521.581072][T11417] usb 10-1: config 7 interface 102 altsetting 255 endpoint 0x89 has an invalid bInterval 85, changing to 10 [ 521.618001][T11417] usb 10-1: config 7 interface 102 altsetting 255 endpoint 0x89 has invalid maxpacket 42313, setting to 1024 [ 521.769716][T11417] usb 10-1: config 7 interface 102 has no altsetting 0 [ 522.076020][ T5864] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 522.273040][T11417] usb 10-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=13.6f [ 522.298317][T11417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.320570][T11417] usb 10-1: Product: syz [ 522.324906][T11417] usb 10-1: Manufacturer: 爞⨣䈅꼖⯑曻阍ᇴ虌᥋窋ජ옜䔄焒鴤瑂Ꝅ履庰硕ૂꓰ尗䖖⇑켳ꪟ꯲ [ 522.362302][T11417] usb 10-1: SerialNumber: syz [ 522.400928][T14650] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 522.495889][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 522.495907][ T30] audit: type=1400 audit(2000000286.209:854): avc: denied { read } for pid=14684 comm="syz.8.2595" path="socket:[40128]" dev="sockfs" ino=40128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 522.570490][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 522.591695][ T5864] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 522.611913][ T5864] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.653988][ T5864] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.686953][T14690] syz_tun: entered allmulticast mode [ 522.751721][ T5864] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 522.926091][ T5864] usb 7-1: config 7 interface 0 has no altsetting 0 [ 522.994859][ T5864] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 523.051334][T11417] usb 10-1: Invalid firmware size=520. [ 523.064936][T11417] usb 10-1: USB disconnect, device number 26 [ 523.150436][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.211532][T14681] syz_tun: left allmulticast mode [ 523.557800][T14708] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 523.575694][T14708] PKCS7: Only support pkcs7_signedData type [ 523.669492][T14709] nfs: Unknown parameter '' [ 523.702368][ T5864] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0009/input/input31 [ 523.722395][ T30] audit: type=1400 audit(2000000287.439:855): avc: denied { map } for pid=14707 comm="syz.5.2600" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 523.777144][ T5864] kye 0003:0458:5010.0009: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 524.486713][ T30] audit: type=1400 audit(2000000287.619:856): avc: denied { write } for pid=14669 comm="syz.6.2592" name="file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 524.511186][ T30] audit: type=1400 audit(2000000287.619:857): avc: denied { open } for pid=14669 comm="syz.6.2592" path="/135/file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 524.533861][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.574857][ T5864] usb 7-1: USB disconnect, device number 18 [ 524.655647][ T30] audit: type=1400 audit(2000000287.629:858): avc: denied { ioctl } for pid=14669 comm="syz.6.2592" path="/135/file0" dev="tmpfs" ino=739 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 524.759594][T14717] fido_id[14717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 524.803363][ T30] audit: type=1400 audit(2000000288.269:859): avc: denied { call } for pid=14707 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 524.880338][ T30] audit: type=1400 audit(2000000288.269:860): avc: denied { transfer } for pid=14707 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 524.899574][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.145200][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2606'. [ 525.476007][ T30] audit: type=1400 audit(2000000289.089:861): avc: denied { watch } for pid=14721 comm="syz.9.2604" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 525.520559][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.672178][ T30] audit: type=1400 audit(2000000289.099:862): avc: denied { watch_sb watch_reads } for pid=14721 comm="syz.9.2604" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 525.717778][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.997861][ T30] audit: type=1400 audit(2000000289.649:863): avc: denied { write } for pid=14740 comm="syz.8.2609" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 528.498359][T14757] erspan0: left allmulticast mode [ 529.117238][T14757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.258282][T14757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.662124][T14779] SELinux: failed to load policy [ 529.790772][ T949] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 529.937486][T14757] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.954330][ T949] usb 6-1: Using ep0 maxpacket: 16 [ 530.348355][T14757] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.357520][T14757] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.374376][T14757] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.475288][ T949] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 530.499002][ T949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.507259][ T949] usb 6-1: Product: syz [ 530.511763][ T949] usb 6-1: Manufacturer: syz [ 530.517041][ T949] usb 6-1: SerialNumber: syz [ 530.578670][ T949] r8152-cfgselector 6-1: Unknown version 0x0000 [ 530.585133][ T949] r8152-cfgselector 6-1: config 0 descriptor?? [ 530.599938][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 530.599957][ T30] audit: type=1326 audit(2000000294.279:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.8.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91e98e969 code=0x7fc00000 [ 530.629736][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.637735][T14786] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2616'. [ 530.986286][T14781] FAULT_INJECTION: forcing a failure. [ 530.986286][T14781] name failslab, interval 1, probability 0, space 0, times 0 [ 531.050676][T14781] CPU: 0 UID: 0 PID: 14781 Comm: syz.5.2615 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 531.050703][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.050713][T14781] Call Trace: [ 531.050718][T14781] [ 531.050725][T14781] dump_stack_lvl+0x16c/0x1f0 [ 531.050751][T14781] should_fail_ex+0x512/0x640 [ 531.050768][T14781] ? fs_reclaim_acquire+0xae/0x150 [ 531.050795][T14781] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 531.050816][T14781] should_failslab+0xc2/0x120 [ 531.050832][T14781] __kmalloc_noprof+0xd2/0x510 [ 531.050860][T14781] tomoyo_realpath_from_path+0xc2/0x6e0 [ 531.050883][T14781] ? tomoyo_profile+0x47/0x60 [ 531.050899][T14781] tomoyo_path_number_perm+0x245/0x580 [ 531.050916][T14781] ? tomoyo_path_number_perm+0x237/0x580 [ 531.050936][T14781] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.050955][T14781] ? find_held_lock+0x2b/0x80 [ 531.050992][T14781] ? find_held_lock+0x2b/0x80 [ 531.051010][T14781] ? hook_file_ioctl_common+0x145/0x410 [ 531.051033][T14781] ? __fget_files+0x20e/0x3c0 [ 531.051062][T14781] security_file_ioctl+0x9b/0x240 [ 531.051084][T14781] __x64_sys_ioctl+0xb7/0x200 [ 531.051106][T14781] do_syscall_64+0xcd/0x260 [ 531.051131][T14781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.051146][T14781] RIP: 0033:0x7f079b38e969 [ 531.051161][T14781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.051177][T14781] RSP: 002b:00007f079c1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.051193][T14781] RAX: ffffffffffffffda RBX: 00007f079b5b5fa0 RCX: 00007f079b38e969 [ 531.051204][T14781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 531.051213][T14781] RBP: 00007f079c1dc090 R08: 0000000000000000 R09: 0000000000000000 [ 531.051222][T14781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.051231][T14781] R13: 0000000000000000 R14: 00007f079b5b5fa0 R15: 00007ffe474d13c8 [ 531.051254][T14781] [ 531.051277][T14781] ERROR: Out of memory at tomoyo_realpath_from_path. [ 531.501626][T14811] netlink: 'syz.6.2623': attribute type 10 has an invalid length. [ 531.591448][T14811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'. [ 531.635537][ T949] r8152-cfgselector 6-1: Unknown version 0x0000 [ 531.665321][ T949] r8152-cfgselector 6-1: bad CDC descriptors [ 531.729601][ T949] r8152-cfgselector 6-1: USB disconnect, device number 26 [ 531.759123][T14811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'. [ 531.927889][T14836] FAULT_INJECTION: forcing a failure. [ 531.927889][T14836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.969943][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.9.2628 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 531.969968][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.969978][T14836] Call Trace: [ 531.969983][T14836] [ 531.969990][T14836] dump_stack_lvl+0x16c/0x1f0 [ 531.970024][T14836] should_fail_ex+0x512/0x640 [ 531.970054][T14836] _copy_from_user+0x2e/0xd0 [ 531.970074][T14836] kstrtouint_from_user+0xd6/0x1d0 [ 531.970090][T14836] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 531.970106][T14836] ? __lock_acquire+0xaa4/0x1ba0 [ 531.970140][T14836] proc_fail_nth_write+0x83/0x250 [ 531.970170][T14836] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.970197][T14836] vfs_write+0x25c/0x1180 [ 531.970218][T14836] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.970246][T14836] ? __pfx___mutex_lock+0x10/0x10 [ 531.970266][T14836] ? __pfx_vfs_write+0x10/0x10 [ 531.970291][T14836] ? __fget_files+0x20e/0x3c0 [ 531.970322][T14836] ksys_write+0x12a/0x240 [ 531.970344][T14836] ? __pfx_ksys_write+0x10/0x10 [ 531.970364][T14836] ? rcu_is_watching+0x12/0xc0 [ 531.970395][T14836] do_syscall_64+0xcd/0x260 [ 531.970417][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.970431][T14836] RIP: 0033:0x7f8f6258d41f [ 531.970443][T14836] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 531.970457][T14836] RSP: 002b:00007f8f63375030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 531.970471][T14836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f6258d41f [ 531.970480][T14836] RDX: 0000000000000001 RSI: 00007f8f633750a0 RDI: 0000000000000006 [ 531.970488][T14836] RBP: 00007f8f63375090 R08: 0000000000000000 R09: 0000000000000000 [ 531.970497][T14836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 531.970505][T14836] R13: 0000000000000000 R14: 00007f8f627b5fa0 R15: 00007ffe488f7348 [ 531.970524][T14836] [ 532.280034][T14840] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2629'. [ 532.316992][T11796] udevd[11796]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 532.507867][T14854] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 532.540605][ T30] audit: type=1400 audit(2000000296.249:867): avc: denied { name_bind } for pid=14847 comm="syz.5.2631" path="socket:[40457]" dev="sockfs" ino=40457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 532.553450][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.584231][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.179842][ T30] audit: type=1400 audit(2000000296.889:868): avc: denied { read write } for pid=14872 comm="syz.8.2636" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 533.217907][ T30] audit: type=1400 audit(2000000296.889:869): avc: denied { open } for pid=14872 comm="syz.8.2636" path="/141/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 533.294632][ T30] audit: type=1400 audit(2000000297.009:870): avc: denied { module_load } for pid=14874 comm="syz.7.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 533.791666][ T30] audit: type=1326 audit(2000000297.509:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14885 comm="syz.5.2639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x0 [ 534.708575][T14910] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2643'. [ 535.319685][T14915] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 535.480663][ T949] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 535.563147][T14941] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2651'. [ 535.672786][ T949] usb 9-1: Using ep0 maxpacket: 16 [ 535.684336][ T949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.713666][ T949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.746293][ T949] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 535.826240][ T949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.849828][ T949] usb 9-1: config 0 descriptor?? [ 536.020392][T14951] netlink: 'syz.6.2652': attribute type 16 has an invalid length. [ 536.028391][T14951] netlink: 'syz.6.2652': attribute type 17 has an invalid length. [ 536.120920][T14951] overlayfs: failed to resolve './file1': -2 [ 536.745327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.785402][ T949] usbhid 9-1:0.0: can't add hid device: -71 [ 536.793155][ T949] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 536.805271][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.812741][ T949] usb 9-1: USB disconnect, device number 26 [ 537.674500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.261943][T14973] xt_HMARK: spi-set and port-set can't be combined [ 538.276129][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 538.309929][T14974] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2657'. [ 538.496632][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2656'. [ 538.506196][T14975] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2656'. [ 538.613508][T14975] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.623459][T14975] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.632329][T14975] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.641177][T14975] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.850653][ T30] audit: type=1400 audit(2000000302.539:872): avc: denied { getopt } for pid=14978 comm="syz.9.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.871375][T14983] xt_HMARK: spi-set and port-set can't be combined [ 538.941238][ T30] audit: type=1400 audit(2000000302.549:873): avc: denied { map } for pid=14978 comm="syz.9.2659" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 540.218759][ T30] audit: type=1400 audit(2000000303.929:874): avc: denied { create } for pid=14978 comm="syz.9.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 541.221262][T15023] xt_HMARK: spi-set and port-set can't be combined [ 541.577236][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 541.586415][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2667'. [ 541.673558][T15027] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.682432][T15027] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.691264][T15027] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.701014][T15027] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.935849][T15032] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2668'. [ 542.155476][T15037] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 542.200432][ T5944] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 542.487457][ T5944] usb 9-1: Using ep0 maxpacket: 16 [ 542.915752][ T5944] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 543.735634][ T5944] usb 9-1: config 0 has no interface number 0 [ 543.790741][ T5944] usb 9-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 543.911105][ T5944] usb 9-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 543.940302][ T5944] usb 9-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 544.023838][ T5944] usb 9-1: string descriptor 0 read error: -71 [ 544.030137][ T5944] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 544.072705][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.121088][ T5944] usb 9-1: config 0 descriptor?? [ 544.152105][ T5944] usb 9-1: can't set config #0, error -71 [ 544.195007][ T5944] usb 9-1: USB disconnect, device number 27 [ 545.206533][T15090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2680'. [ 545.852713][ T5944] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 546.063362][ T5944] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.130482][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.218810][ T5944] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 546.308608][ T5944] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 546.614762][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.735821][T15094] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 546.749265][ T5944] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.131443][ T30] audit: type=1800 audit(2000000310.849:875): pid=15124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.2686" name="/newroot/160/bus" dev="tmpfs" ino=874 res=0 errno=0 [ 547.154885][T15127] Invalid ELF header magic: != ELF [ 547.216344][ T5944] usb 10-1: USB disconnect, device number 27 [ 547.853286][T15145] __vm_enough_memory: pid: 15145, comm: syz.8.2688, bytes: 21199604740096 not enough memory for the allocation [ 548.401132][T15153] erofs (device nullb0): cannot find valid erofs superblock [ 549.098734][T15152] netdevsim netdevsim6: Direct firmware load for . [ 549.098734][T15152] failed with error -2 [ 549.258511][ T30] audit: type=1400 audit(2000000312.969:876): avc: denied { firmware_load } for pid=15136 comm="syz.6.2690" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 549.758780][T15152] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 549.758780][T15152] [ 550.428418][T15179] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.2696'. [ 550.438611][T15179] netlink: zone id is out of range [ 552.657843][ T30] audit: type=1400 audit(2000000316.369:877): avc: denied { write } for pid=15195 comm="syz.5.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 552.658024][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2701'. [ 552.777045][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2701'. [ 552.797852][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.808098][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.818334][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.827575][ T30] audit: type=1400 audit(2000000316.369:878): avc: denied { nlmsg_write } for pid=15195 comm="syz.5.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 552.859181][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.871877][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.370320][ T30] audit: type=1400 audit(2000000317.079:879): avc: denied { search } for pid=15210 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.442697][ T30] audit: type=1400 audit(2000000317.079:880): avc: denied { read } for pid=15210 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.517374][ T30] audit: type=1400 audit(2000000317.079:881): avc: denied { open } for pid=15210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.593839][ T30] audit: type=1400 audit(2000000317.079:882): avc: denied { getattr } for pid=15210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.703225][ T30] audit: type=1400 audit(2000000317.109:883): avc: denied { prog_load } for pid=15204 comm="syz.6.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 553.753755][ T30] audit: type=1400 audit(2000000317.109:884): avc: denied { bpf } for pid=15204 comm="syz.6.2703" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 553.807361][ T30] audit: type=1400 audit(2000000317.119:885): avc: denied { getattr } for pid=15210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 553.836360][ T30] audit: type=1400 audit(2000000317.219:886): avc: denied { read write } for pid=11312 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 554.252570][T15218] nbd9: detected capacity change from 0 to 4294967296 [ 554.410149][T15199] block nbd9: shutting down sockets [ 554.508980][T11796] blk_print_req_error: 27 callbacks suppressed [ 554.509023][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.866647][T11796] buffer_io_error: 310 callbacks suppressed [ 554.867263][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 554.932019][ T5818] Bluetooth: hci0: command tx timeout [ 555.258027][ T6872] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.267610][ T6872] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.282650][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.442783][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.601239][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.791641][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.824029][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.833203][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.842661][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.851932][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.859932][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.870345][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.880473][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.889534][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.906368][T11796] ldm_validate_partition_table(): Disk read failed. [ 555.913236][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.923306][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 555.941011][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.962214][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read [ 556.239368][T11796] Dev nbd9: unable to read RDB block 0 [ 556.255984][T11796] nbd9: unable to read partition table [ 556.294785][T11796] ldm_validate_partition_table(): Disk read failed. [ 556.295957][T15230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2707'. [ 556.313487][T11796] Dev nbd9: unable to read RDB block 0 [ 556.319458][T11796] nbd9: unable to read partition table [ 556.487776][T15240] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2709'. [ 557.013504][ T5818] Bluetooth: hci0: command tx timeout [ 557.439002][T12437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.470837][T12437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.482665][T12437] bond0 (unregistering): Released all slaves [ 557.665685][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 557.665696][ T30] audit: type=1400 audit(2000000321.379:948): avc: denied { module_request } for pid=15200 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 557.830907][ T30] audit: type=1400 audit(2000000321.539:949): avc: denied { create } for pid=15284 comm="syz.5.2715" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 557.852501][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.891935][T15200] chnl_net:caif_netlink_parms(): no params data found [ 557.931224][ T30] audit: type=1400 audit(2000000321.579:950): avc: denied { ioctl } for pid=15284 comm="syz.5.2715" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42460 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 557.957242][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.096366][ T30] audit: type=1400 audit(2000000321.779:951): avc: denied { create } for pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 558.118222][ T30] audit: type=1400 audit(2000000321.809:952): avc: denied { setopt } for pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 558.222362][ T30] audit: type=1400 audit(2000000321.849:953): avc: denied { execmem } for pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 558.443950][ T30] audit: type=1400 audit(2000000322.089:954): avc: denied { bind } for pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 559.101012][ T5818] Bluetooth: hci0: command tx timeout [ 559.442398][ T30] audit: type=1400 audit(2000000322.089:955): avc: denied { name_bind } for pid=15288 comm="syz.6.2716" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 559.470166][ T30] audit: type=1400 audit(2000000322.089:956): avc: denied { node_bind } for pid=15288 comm="syz.6.2716" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 559.522868][ T30] audit: type=1400 audit(2000000322.099:957): avc: denied { write } for pid=15288 comm="syz.6.2716" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 559.628802][T15200] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.668395][T15200] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.678834][T15200] bridge_slave_0: entered allmulticast mode [ 559.688362][T15200] bridge_slave_0: entered promiscuous mode [ 559.702766][T15200] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.817488][T15200] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.825708][T15200] bridge_slave_1: entered allmulticast mode [ 559.869752][T15200] bridge_slave_1: entered promiscuous mode [ 560.773063][T15314] Invalid ELF header magic: != ELF [ 560.989161][T15200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.130949][T15200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.172469][ T5818] Bluetooth: hci0: command tx timeout [ 561.206110][T12437] hsr_slave_0: left promiscuous mode [ 561.259375][T12437] hsr_slave_1: left promiscuous mode [ 561.283439][T15339] overlay: filesystem on ./bus not supported as upperdir [ 561.312686][T12437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.353189][T12437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.484051][T12437] batman_adv: batadv0: Removing interface: macvtap0 [ 561.750383][ T5865] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 562.030298][ T5865] usb 9-1: Using ep0 maxpacket: 32 [ 562.037077][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.048278][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.058405][ T5865] usb 9-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 562.067704][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.117511][ T5865] usb 9-1: config 0 descriptor?? [ 562.720755][ T5865] hkems 0003:2006:0118.000A: hidraw0: USB HID v0.03 Device [HID 2006:0118] on usb-dummy_hcd.8-1/input0 [ 562.743103][ T5865] hkems 0003:2006:0118.000A: no inputs found [ 562.759437][ T5865] hkems 0003:2006:0118.000A: force feedback init failed [ 562.777576][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.250313][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 563.250332][ T30] audit: type=1400 audit(2000000326.849:988): avc: denied { accept } for pid=15349 comm="syz.6.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 563.544364][T12437] team0 (unregistering): Port device team_slave_1 removed [ 563.620087][T12437] team0 (unregistering): Port device team_slave_0 removed [ 563.635072][ T36] smc: removing ib device syz! [ 563.910062][ T30] audit: type=1400 audit(2000000327.619:989): avc: denied { ioctl } for pid=15356 comm="syz.6.2728" path="socket:[43054]" dev="sockfs" ino=43054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 565.004873][ T24] usb 9-1: USB disconnect, device number 28 [ 565.012934][T15200] team0: Port device team_slave_0 added [ 565.022045][T15344] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2725'. [ 565.132450][T15200] team0: Port device team_slave_1 added [ 565.257442][ T30] audit: type=1400 audit(2000000328.879:990): avc: denied { append } for pid=15369 comm="syz.5.2730" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 565.427399][ T30] audit: type=1400 audit(2000000328.879:991): avc: denied { ioctl } for pid=15369 comm="syz.5.2730" path="socket:[43132]" dev="sockfs" ino=43132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 565.476036][ T30] audit: type=1400 audit(2000000329.169:992): avc: denied { mount } for pid=15377 comm="syz.6.2732" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 565.539397][ T30] audit: type=1400 audit(2000000329.239:993): avc: denied { read } for pid=15383 comm="syz.8.2733" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 565.587260][T15388] fuse: Unknown parameter '000000000000000000000110x000000000000000b' [ 565.847031][ T30] audit: type=1400 audit(2000000329.299:995): avc: denied { read write } for pid=15377 comm="syz.6.2732" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 566.005199][ T30] audit: type=1400 audit(2000000329.299:996): avc: denied { open } for pid=15377 comm="syz.6.2732" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 566.051498][T15200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.058504][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.084770][T15381] Invalid ELF header magic: != ELF [ 566.125978][ T30] audit: type=1400 audit(2000000329.299:997): avc: denied { mounton } for pid=15377 comm="syz.6.2732" path="/172/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 566.188406][T15200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.333853][ T30] audit: type=1400 audit(2000000329.239:994): avc: denied { open } for pid=15383 comm="syz.8.2733" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 566.358476][T15395] tipc: Started in network mode [ 566.370630][T15395] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 566.409773][T15395] tipc: Enabled bearer , priority 10 [ 566.427045][T15200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.474179][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.770592][T15200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.532243][ T5863] tipc: Node number set to 4269801488 [ 567.560612][T15200] hsr_slave_0: entered promiscuous mode [ 567.677522][T15200] hsr_slave_1: entered promiscuous mode [ 568.238220][ T5863] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 568.358897][T15429] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2741'. [ 568.372884][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 568.372915][ T30] audit: type=1400 audit(2000000332.069:1017): avc: denied { create } for pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 568.789029][ T5863] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.905932][T15428] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2740'. [ 568.953785][ T30] audit: type=1400 audit(2000000332.069:1018): avc: denied { setopt } for pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 568.974000][ T5863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 569.034557][T15434] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 569.056090][ T5863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.164423][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2744'. [ 569.180457][ T30] audit: type=1400 audit(2000000332.069:1019): avc: denied { create } for pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 569.208751][ T5863] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.269021][ T5863] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.280177][ T30] audit: type=1400 audit(2000000332.069:1020): avc: denied { write } for pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 569.308956][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.425498][ T30] audit: type=1400 audit(2000000332.089:1021): avc: denied { connect } for pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 569.519093][T15445] FAULT_INJECTION: forcing a failure. [ 569.519093][T15445] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 569.532579][T15445] CPU: 1 UID: 0 PID: 15445 Comm: syz.6.2743 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 569.532604][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.532613][T15445] Call Trace: [ 569.532619][T15445] [ 569.532625][T15445] dump_stack_lvl+0x16c/0x1f0 [ 569.532653][T15445] should_fail_ex+0x512/0x640 [ 569.532678][T15445] should_fail_alloc_page+0xe7/0x130 [ 569.532698][T15445] prepare_alloc_pages+0x3c2/0x610 [ 569.532724][T15445] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 569.532755][T15445] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.532783][T15445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.532811][T15445] ? _parse_integer_limit+0x17f/0x1d0 [ 569.532832][T15445] ? _kstrtoull+0x145/0x200 [ 569.532847][T15445] ? __pfx__kstrtoull+0x10/0x10 [ 569.532870][T15445] ? rcu_is_watching+0x12/0xc0 [ 569.532889][T15445] ? irqentry_exit+0x3b/0x90 [ 569.532908][T15445] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.532933][T15445] ? iovec_from_user+0x108/0x140 [ 569.532955][T15445] __alloc_pages_noprof+0xb/0x1b0 [ 569.532980][T15445] ___kmalloc_large_node+0x82/0x1e0 [ 569.532999][T15445] ? __import_iovec+0x438/0x660 [ 569.533023][T15445] __kmalloc_large_node_noprof+0x1c/0x70 [ 569.533046][T15445] __kmalloc_noprof.cold+0xc/0x61 [ 569.533074][T15445] iovec_from_user+0x108/0x140 [ 569.533099][T15445] process_vm_rw+0x2c5/0x360 [ 569.533116][T15445] ? __pfx_process_vm_rw+0x10/0x10 [ 569.533140][T15445] ? ksys_write+0x190/0x240 [ 569.533184][T15445] ? ksys_write+0x1b9/0x240 [ 569.533206][T15445] ? __pfx_ksys_write+0x10/0x10 [ 569.533232][T15445] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 569.533249][T15445] ? do_syscall_64+0x91/0x260 [ 569.533271][T15445] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.533292][T15445] do_syscall_64+0xcd/0x260 [ 569.533315][T15445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.533331][T15445] RIP: 0033:0x7f5479d8e969 [ 569.533343][T15445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.533359][T15445] RSP: 002b:00007f547abd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 569.533374][T15445] RAX: ffffffffffffffda RBX: 00007f5479fb6160 RCX: 00007f5479d8e969 [ 569.533385][T15445] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000221 [ 569.533394][T15445] RBP: 00007f547abd2090 R08: 000000000000023a R09: 0000000000000000 [ 569.533404][T15445] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 569.533413][T15445] R13: 0000000000000000 R14: 00007f5479fb6160 R15: 00007ffc29d1b718 [ 569.533435][T15445] [ 569.911726][ T30] audit: type=1400 audit(2000000332.159:1022): avc: denied { write } for pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 569.932257][ T30] audit: type=1400 audit(2000000332.419:1023): avc: denied { getopt } for pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 569.952757][ T5863] usb 9-1: config 0 descriptor?? [ 569.959471][T15420] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 569.970901][ T5126] Bluetooth: hci8: command 0x0405 tx timeout [ 569.993241][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2744'. [ 570.267040][ T30] audit: type=1400 audit(2000000333.899:1024): avc: denied { ioctl } for pid=15415 comm="syz.8.2738" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 570.428401][T15455] fuse: Unknown parameter '0xffffffffffffffff0x000000000000000400000000000000000000' [ 570.487042][ T5863] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 570.529394][ T5863] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 570.539497][T15458] syz_tun: entered allmulticast mode [ 570.567706][ T30] audit: type=1400 audit(2000000333.969:1025): avc: denied { read write } for pid=11314 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 570.602178][ T5863] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 570.728256][ T5863] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 570.901861][ T30] audit: type=1400 audit(2000000333.969:1026): avc: denied { open } for pid=11314 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 571.052797][ T5865] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 571.273522][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 571.288231][T15452] syz_tun: left allmulticast mode [ 571.358096][ T5865] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 571.399029][ T5865] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.484441][ T5865] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.520062][ T5865] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 571.777569][ T5865] usb 6-1: config 7 interface 0 has no altsetting 0 [ 571.789896][ T5865] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 571.829643][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.880710][ T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 572.052581][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 572.064156][ T9] usb 7-1: config 6 has an invalid interface number: 146 but max is 2 [ 572.084720][ T9] usb 7-1: config 6 has an invalid descriptor of length 67, skipping remainder of the config [ 572.133890][ T9] usb 7-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 572.160974][ T5863] usb 9-1: reset high-speed USB device number 29 using dummy_hcd [ 572.182496][ T9] usb 7-1: config 6 has no interface number 0 [ 572.206692][ T9] usb 7-1: config 6 interface 146 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 572.218432][T15200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.256652][ T9] usb 7-1: config 6 interface 146 has no altsetting 0 [ 572.257067][T15200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.293303][ T9] usb 7-1: New USB device found, idVendor=13d3, idProduct=f84d, bcdDevice=4f.ad [ 572.304171][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.315108][T15200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 572.337223][T15200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 572.355770][ T9] usb 7-1: Product: 貆笠렒သῠG㯈跞襈矜墢왓ꄂ㬣ى㚞絬姇ᡜꆐ洛덊宋뽞Ӈ׹挓鬩㑈יּ뭰ᐥ菚㐭馇滸鼛呂≚下 [ 572.428543][ T9] usb 7-1: Manufacturer: ཮ʏ헮刿𥉉죅쾻ჰ☒А滋輱ȝ㬜黖넗풉酙ꑶಖ〧냰⥿嗉꼥᷌⨞ᦍ⌷뀐壭ⓢﮫ횀۱䠱⢢ꍯ耢ꛌ⮵쓯쮳ړ뀞䶷룉㿞ₛ๕臃鯎땼沼Ὑ궨돎໅ꢭ십꽒ஶ苦婗ꥶ痃돩鞓텦桟⨡䦏枷＝ണ㮪簇ೄ껨踰䲶渲앯䋬௚諦 [ 573.347938][ T9] usb 7-1: SerialNumber: ᫉㍰ƀ鬖⹮쳰ꚛ㏒⼆㕓肹ᜪ爧㕘뗄飖饗뿇䚡딘ﻃ媪ᚊ䕳ູ牔擳鶟뀑൨㸂婱嚛㻵턟堈曁뇌㕦嵣꙾誀鷒멯㍦蕖咃幃䴃ᎄ櫹쥄ኾ쓗㩭粮쯱䍓豷빅뛞쪀﷘שׂ큏恉᥵꼓绰￿夾됉껙қ䵱鶡섋ị퍃 [ 573.394989][ T5865] usbhid 6-1:7.0: can't add hid device: -71 [ 573.406865][ T5865] usbhid 6-1:7.0: probe with driver usbhid failed with error -71 [ 573.471141][ T5865] usb 6-1: USB disconnect, device number 27 [ 573.549107][T15200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.591871][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 573.591887][ T30] audit: type=1400 audit(2000000337.309:1082): avc: denied { create } for pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 573.609745][T15200] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.639509][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.646725][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.649523][ T30] audit: type=1400 audit(2000000337.339:1083): avc: denied { bind } for pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 573.803416][T15501] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2751'. [ 574.031363][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.038511][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.053054][ T30] audit: type=1400 audit(2000000337.339:1084): avc: denied { setopt } for pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 574.072151][ T5899] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 574.116477][ T30] audit: type=1400 audit(2000000337.339:1085): avc: denied { accept } for pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 574.141878][T15200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.170365][T15200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.220845][ T30] audit: type=1400 audit(2000000337.339:1086): avc: denied { write } for pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 574.269275][ T5899] usb 10-1: Using ep0 maxpacket: 32 [ 574.297974][ T5899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 574.298568][ T30] audit: type=1400 audit(2000000337.339:1087): avc: denied { read } for pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 574.359432][ T5899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 574.379809][ T30] audit: type=1400 audit(2000000337.349:1088): avc: denied { create } for pid=15482 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 574.422236][ T5864] usb 9-1: USB disconnect, device number 29 [ 574.460360][ T5899] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.476809][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2756'. [ 574.521206][ T30] audit: type=1400 audit(2000000337.449:1089): avc: denied { create } for pid=15482 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 574.556911][ T5899] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 574.573898][ T30] audit: type=1400 audit(2000000337.459:1090): avc: denied { getopt } for pid=15482 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 574.600641][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 574.636393][ T5899] usb 10-1: Product: syz [ 574.644708][ T30] audit: type=1400 audit(2000000337.459:1091): avc: denied { read write } for pid=15482 comm="syz.6.2751" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 574.660529][ T5899] usb 10-1: Manufacturer: syz [ 574.704269][ T5899] usb 10-1: SerialNumber: syz [ 574.810389][ T5899] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input33 [ 574.989285][T15200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.082754][T11546] usb 10-1: USB disconnect, device number 28 [ 575.082888][ C1] appletouch 10-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 575.184081][T15200] veth0_vlan: entered promiscuous mode [ 575.261038][T11546] appletouch 10-1:1.0: input: appletouch disconnected [ 575.522782][ T9] usb 7-1: USB disconnect, device number 19 [ 575.566462][T15200] veth1_vlan: entered promiscuous mode [ 575.674951][T15200] veth0_macvtap: entered promiscuous mode [ 575.705373][T15200] veth1_macvtap: entered promiscuous mode [ 576.569370][T15200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.622172][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.633401][T15200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.662499][T15200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.687057][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.743104][T15200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.098218][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 577.135853][T15548] block device autoloading is deprecated and will be removed. [ 577.150945][T15548] syz.8.2762: attempt to access beyond end of device [ 577.150945][T15548] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 577.254193][T15200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.283895][ T9] usb 7-1: config 0 has no interfaces? [ 577.586582][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 577.696001][T15200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.033799][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.119924][T15200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.166795][ T9] usb 7-1: Product: syz [ 578.378349][T15200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.380293][ T9] usb 7-1: Manufacturer: syz [ 578.498567][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.548346][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.555846][ T9] usb 7-1: SerialNumber: syz [ 578.566139][ T9] usb 7-1: config 0 descriptor?? [ 578.724269][ T6696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.789146][ T6696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.943434][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 578.943451][ T30] audit: type=1400 audit(2000000342.659:1130): avc: denied { mounton } for pid=15200 comm="syz-executor" path="/root/syzkaller.601xXw/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 579.474692][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2760'. [ 579.521417][ T30] audit: type=1400 audit(2000000342.709:1131): avc: denied { mount } for pid=15200 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 579.531405][T15577] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2760'. [ 579.552881][ T30] audit: type=1400 audit(2000000342.719:1132): avc: denied { mount } for pid=15200 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 579.625563][T15580] ALSA: mixer_oss: invalid index 40000 [ 579.707183][ T30] audit: type=1400 audit(2000000342.719:1133): avc: denied { mounton } for pid=15200 comm="syz-executor" path="/root/syzkaller.601xXw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 579.734014][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.893643][ T30] audit: type=1400 audit(2000000342.719:1134): avc: denied { mounton } for pid=15200 comm="syz-executor" path="/root/syzkaller.601xXw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 579.921277][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.942940][ T30] audit: type=1400 audit(2000000342.719:1135): avc: denied { read write } for pid=15541 comm="syz.6.2760" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 579.967828][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.979902][ T30] audit: type=1400 audit(2000000342.719:1136): avc: denied { open } for pid=15541 comm="syz.6.2760" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 580.004699][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.016479][ T30] audit: type=1400 audit(2000000342.719:1137): avc: denied { ioctl } for pid=15541 comm="syz.6.2760" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 580.049056][ T30] audit: type=1400 audit(2000000343.209:1138): avc: denied { write } for pid=15570 comm="syz.9.2766" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 580.077392][ T30] audit: type=1400 audit(2000000343.229:1139): avc: denied { unmount } for pid=15200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 580.097182][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.046280][T11546] usb 7-1: USB disconnect, device number 20 [ 582.418715][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 582.802596][ T5863] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 583.080394][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 583.100154][ T5863] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 583.121902][ T5863] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 583.138637][ T5863] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.154322][ T5863] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 583.163835][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 583.176922][ T5863] usb 7-1: Product: syz [ 583.188894][ T5863] usb 7-1: Manufacturer: syz [ 583.230357][ T5863] usb 7-1: SerialNumber: syz [ 583.279168][ T5863] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input34 [ 583.627034][ T5863] usb 7-1: USB disconnect, device number 21 [ 583.633171][ C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 583.755542][ T5863] appletouch 7-1:1.0: input: appletouch disconnected [ 584.487120][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 584.487130][ T30] audit: type=1400 audit(2000000348.199:1154): avc: denied { create } for pid=15660 comm="syz.5.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 584.873963][ T30] audit: type=1400 audit(2000000348.289:1155): avc: denied { setopt } for pid=15660 comm="syz.5.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 584.957552][ T30] audit: type=1400 audit(2000000348.569:1156): avc: denied { create } for pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 584.982806][ T30] audit: type=1400 audit(2000000348.629:1157): avc: denied { setopt } for pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 585.007529][ T30] audit: type=1400 audit(2000000348.629:1158): avc: denied { write } for pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 585.061079][ T30] audit: type=1400 audit(2000000348.629:1159): avc: denied { create } for pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.107153][ T30] audit: type=1400 audit(2000000348.629:1160): avc: denied { bind } for pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.128407][ T30] audit: type=1400 audit(2000000348.629:1161): avc: denied { setopt } for pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.154781][ T30] audit: type=1326 audit(2000000348.639:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.8.2786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc91e98e969 code=0x0 [ 585.192603][ T30] audit: type=1400 audit(2000000348.749:1163): avc: denied { write } for pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.274295][T11546] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 585.390780][T15682] ubi31: attaching mtd0 [ 585.402239][T15682] ubi31: scanning is finished [ 585.407073][T15682] ubi31: empty MTD device detected [ 585.490643][T11546] usb 10-1: Using ep0 maxpacket: 32 [ 585.518254][T11546] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 585.568366][T11546] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 585.575546][T15682] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 585.587878][T15682] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 585.595425][T15682] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 585.599407][T11546] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.618114][T15682] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 585.627460][T15682] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 585.634816][T15682] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 585.666619][T15682] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3220878802 [ 585.672174][T11546] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 585.689821][T11546] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 585.704669][T15682] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 585.721515][T15693] ubi31: background thread "ubi_bgt31d" started, PID 15693 [ 585.742264][T15696] FAULT_INJECTION: forcing a failure. [ 585.742264][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 585.755188][T11546] usb 10-1: Product: syz [ 585.787626][T11546] usb 10-1: Manufacturer: syz [ 585.809844][T11546] usb 10-1: SerialNumber: syz [ 585.816248][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.8.2792 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 585.816273][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 585.816284][T15696] Call Trace: [ 585.816289][T15696] [ 585.816295][T15696] dump_stack_lvl+0x16c/0x1f0 [ 585.816324][T15696] should_fail_ex+0x512/0x640 [ 585.816349][T15696] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 585.816379][T15696] should_failslab+0xc2/0x120 [ 585.816397][T15696] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 585.816422][T15696] ? __alloc_skb+0x2b2/0x380 [ 585.816443][T15696] __alloc_skb+0x2b2/0x380 [ 585.816458][T15696] ? __pfx___alloc_skb+0x10/0x10 [ 585.816476][T15696] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 585.816501][T15696] netlink_alloc_large_skb+0x69/0x130 [ 585.816522][T15696] netlink_sendmsg+0x6a1/0xdd0 [ 585.816545][T15696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.816574][T15696] ____sys_sendmsg+0xa95/0xc70 [ 585.816598][T15696] ? copy_msghdr_from_user+0x10a/0x160 [ 585.816615][T15696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.816647][T15696] ___sys_sendmsg+0x134/0x1d0 [ 585.816666][T15696] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.816706][T15696] __sys_sendmsg+0x16d/0x220 [ 585.816724][T15696] ? __pfx___sys_sendmsg+0x10/0x10 [ 585.816755][T15696] ? rcu_is_watching+0x12/0xc0 [ 585.816782][T15696] do_syscall_64+0xcd/0x260 [ 585.816803][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.816818][T15696] RIP: 0033:0x7fc91e98e969 [ 585.816831][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.816846][T15696] RSP: 002b:00007fc91f8a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.816864][T15696] RAX: ffffffffffffffda RBX: 00007fc91ebb5fa0 RCX: 00007fc91e98e969 [ 585.816874][T15696] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 585.816883][T15696] RBP: 00007fc91f8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 585.816893][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.816902][T15696] R13: 0000000000000000 R14: 00007fc91ebb5fa0 R15: 00007ffd02053ba8 [ 585.816924][T15696] [ 586.211765][T11546] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input35 [ 586.400319][ T5863] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 586.580336][ T5863] usb 9-1: Using ep0 maxpacket: 32 [ 586.645536][ T5863] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 586.802666][ T5863] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 586.817780][T15718] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.842104][T11417] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 586.844710][ T5863] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.874832][T11546] usb 10-1: USB disconnect, device number 29 [ 586.905810][ T5863] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 586.926445][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 586.951344][T11546] appletouch 10-1:1.0: input: appletouch disconnected [ 586.961949][ T5863] usb 9-1: Product: syz [ 586.969300][ T5863] usb 9-1: Manufacturer: syz [ 586.987537][ T5863] usb 9-1: SerialNumber: syz [ 587.008977][ T5863] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input36 [ 587.055515][T11417] usb 1-1: unable to get BOS descriptor or descriptor too short [ 587.081989][T11417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.110351][T11417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 587.124885][T11417] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 587.148170][T11417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.157715][ T9] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 587.168660][T11417] usb 1-1: Product: syz [ 587.175181][T11417] usb 1-1: Manufacturer: syz [ 587.211616][T11417] usb 1-1: SerialNumber: syz [ 587.225979][T11417] smsusb:smsusb_probe: board id=8, interface number 0 [ 587.228378][ T5863] usb 9-1: USB disconnect, device number 30 [ 587.239676][T11417] smsusb:smsusb_probe: Device initialized with return code -19 [ 587.321915][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.334426][ T9] usb 7-1: config 0 has no interfaces? [ 587.335255][ T5863] appletouch 9-1:1.0: input: appletouch disconnected [ 587.342584][ T9] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 587.356910][ T9] usb 7-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 587.365738][ T9] usb 7-1: Product: syz [ 587.370041][ T9] usb 7-1: Manufacturer: syz [ 587.377214][ T9] usb 7-1: SerialNumber: syz [ 587.386681][ T9] usb 7-1: config 0 descriptor?? [ 587.470816][ T5899] usb 1-1: USB disconnect, device number 10 [ 587.595531][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x7 [ 587.657466][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 587.665997][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 587.678199][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 587.687935][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 587.723392][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 587.748867][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 587.862084][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 587.889136][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.007564][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.460961][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.472185][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.505223][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.684784][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.712683][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.851333][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 588.972589][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'. [ 588.981707][T15754] netlink: 'syz.0.2802': attribute type 5 has an invalid length. [ 588.994475][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2802'. [ 589.002010][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.017299][T15754] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 589.490686][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.498182][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.513734][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.521390][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.528850][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.610914][T15754] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 589.635517][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.670346][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.681790][ T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0 [ 589.718083][ T9] hid-generic 0001:0000:0000.000C: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 589.739978][T15754] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 589.815533][T15768] fido_id[15768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 589.892002][T15754] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 590.392607][T15754] geneve2: entered promiscuous mode [ 590.440410][T15754] geneve2: entered allmulticast mode [ 590.718309][ T9] usb 7-1: USB disconnect, device number 22 [ 590.790089][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 590.790105][ T30] audit: type=1400 audit(2000000354.499:1190): avc: denied { create } for pid=15774 comm="syz.8.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 591.292989][T15795] xt_HMARK: spi-set and port-set can't be combined [ 591.611496][ T5818] block nbd5: Receive control failed (result -104) [ 591.620348][ T5899] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 591.754175][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'. [ 591.763297][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2809'. [ 591.857546][T15800] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.866396][T15800] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.875187][T15800] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.883895][T15800] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.010320][ T5899] usb 10-1: Using ep0 maxpacket: 16 [ 592.026566][ T5899] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 592.035241][ T5899] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 592.045770][ T5899] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 592.054417][ T5899] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 592.079629][ T5899] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 592.120503][ T5899] usb 10-1: config 0 has no interface number 0 [ 592.157307][ T5899] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 592.189011][ T5899] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 592.220990][ T5899] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.274730][ T5899] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.318871][ T5899] usb 10-1: config 0 interface 125 has no altsetting 0 [ 592.337604][ T5899] usb 10-1: config 0 interface 125 has no altsetting 2 [ 592.374743][ T5899] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 592.454096][ T30] audit: type=1400 audit(2000000356.159:1191): avc: denied { connect } for pid=15807 comm="syz.8.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 592.538978][ T30] audit: type=1400 audit(2000000356.219:1192): avc: denied { shutdown } for pid=15807 comm="syz.8.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 592.809335][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.817567][ T5899] usb 10-1: Product: syz [ 592.821893][ T5899] usb 10-1: Manufacturer: syz [ 592.826617][ T5899] usb 10-1: SerialNumber: syz [ 592.881772][ T5899] usb 10-1: config 0 descriptor?? [ 592.909756][ T5899] usb 10-1: selecting invalid altsetting 2 [ 593.128727][T15798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.140768][T11546] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 593.201502][T15798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.580420][T11546] usb 7-1: Using ep0 maxpacket: 32 [ 593.587933][T11546] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 593.698278][T11546] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 593.844816][T11546] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.866897][T11546] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 593.884091][T11546] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 594.108095][T15842] xt_connbytes: Forcing CT accounting to be enabled [ 594.115200][T15842] Cannot find set identified by id 0 to match [ 594.393382][ T5899] get_1284_register timeout [ 594.398018][ T5899] uss720 10-1:0.125: probe with driver uss720 failed with error -5 [ 594.406023][ C0] usb 10-1: async_complete: urb error -104 [ 594.406134][ C0] usb 10-1: async_complete: urb error -104 [ 594.406225][ C0] usb 10-1: async_complete: urb error -104 [ 594.406314][ C0] usb 10-1: async_complete: urb error -104 [ 594.446418][ T30] audit: type=1400 audit(2000000357.669:1193): avc: denied { mounton } for pid=15834 comm="syz.0.2816" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 594.497516][T11546] usb 7-1: Product: syz [ 594.511007][T11546] usb 7-1: Manufacturer: syz [ 594.515689][T11546] usb 7-1: SerialNumber: syz [ 594.638778][T11546] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input37 [ 594.883968][ T5126] Bluetooth: hci0: command 0x0405 tx timeout [ 594.948123][ C0] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 594.958237][T11546] usb 7-1: USB disconnect, device number 23 [ 595.241075][T11546] appletouch 7-1:1.0: input: appletouch disconnected [ 595.338587][ T30] audit: type=1400 audit(2000000359.039:1194): avc: denied { bind } for pid=15852 comm="syz.5.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 595.654469][ T30] audit: type=1400 audit(2000000359.299:1195): avc: denied { load_policy } for pid=15852 comm="syz.5.2819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 596.107217][T15858] SELinux: failed to load policy [ 596.970297][ T30] audit: type=1400 audit(2000000360.659:1196): avc: denied { kexec_image_load } for pid=15860 comm="syz.8.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 597.453487][T15869] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.460387][T15869] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 597.462274][ T30] audit: type=1326 audit(2000000361.109:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000 [ 597.492405][T15869] audit: backlog limit exceeded [ 597.726320][ T9] usb 10-1: USB disconnect, device number 30 [ 597.736082][ T30] audit: type=1326 audit(2000000361.109:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f079b38e969 code=0x7fc00000 [ 597.768592][ T30] audit: type=1326 audit(2000000361.109:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000 [ 597.959526][ T30] audit: type=1326 audit(2000000361.109:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000 [ 597.986456][ T30] audit: type=1326 audit(2000000361.109:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000 [ 598.350441][ T30] audit: type=1326 audit(2000000361.109:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000 [ 599.527322][T15903] SELinux: failed to load policy [ 600.090937][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 600.270750][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 600.297797][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 600.337295][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 600.374951][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.492408][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 600.492561][T15924] nfs: Unknown parameter ' [ 600.492561][T15924] ' [ 600.502084][ T24] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 600.730341][ T24] usb 7-1: Product: syz [ 600.745065][ T24] usb 7-1: Manufacturer: syz [ 600.749712][ T24] usb 7-1: SerialNumber: syz [ 600.900042][ T24] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input38 [ 601.138203][ T24] usb 7-1: USB disconnect, device number 24 [ 601.416683][ T24] appletouch 7-1:1.0: input: appletouch disconnected [ 602.656308][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 602.656327][ T30] audit: type=1400 audit(2000000365.389:1341): avc: denied { read } for pid=15928 comm="syz.9.2836" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 608.069345][T11314] sched: DL replenish lagged too much [ 608.852375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.852547][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.823133][ T30] audit: type=1400 audit(2000000365.389:1342): avc: denied { open } for pid=15928 comm="syz.9.2836" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 619.094870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.314896][ T30] audit: type=1400 audit(2000000365.389:1343): avc: denied { name_bind } for pid=15928 comm="syz.9.2836" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 624.511250][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.433941][ T30] audit: type=1400 audit(2000000365.389:1344): avc: denied { node_bind } for pid=15928 comm="syz.9.2836" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 642.895679][ T30] audit: type=1400 audit(2000000365.389:1345): avc: denied { write } for pid=15928 comm="syz.9.2836" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.852258][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.240174][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 745.247160][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15920/1:b..l P5899/1:b..l P11316/1:b..l P15934/1:b..l [ 745.259132][ C0] rcu: (detected by 0, t=10503 jiffies, g=59689, q=377 ncpus=2) [ 745.266855][ C0] task:syz.0.2837 state:R running task stack:27608 pid:15934 tgid:15930 ppid:15200 task_flags:0x40044c flags:0x00004006 [ 745.281430][ C0] Call Trace: [ 745.284711][ C0] [ 745.287623][ C0] __schedule+0x116f/0x5de0 [ 745.292135][ C0] ? __pfx___schedule+0x10/0x10 [ 745.296997][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 745.302117][ C0] ? find_held_lock+0x2b/0x80 [ 745.306799][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 745.312183][ C0] preempt_schedule_common+0x44/0xc0 [ 745.317518][ C0] preempt_schedule_thunk+0x16/0x30 [ 745.322726][ C0] _raw_spin_unlock+0x3e/0x50 [ 745.327414][ C0] unmap_page_range+0xf08/0x4320 [ 745.332383][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 745.337775][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 745.342992][ C0] ? uprobe_munmap+0x20/0x5c0 [ 745.347681][ C0] unmap_single_vma+0x194/0x2a0 [ 745.352548][ C0] unmap_vmas+0x22c/0x490 [ 745.356895][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 745.361834][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 745.366773][ C0] exit_mmap+0x1b9/0xb90 [ 745.371025][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 745.375813][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 745.380879][ C0] __mmput+0x12a/0x410 [ 745.384952][ C0] mmput+0x62/0x70 [ 745.388653][ C0] do_exit+0x9d1/0x2c30 [ 745.392798][ C0] ? __pfx___might_resched+0x10/0x10 [ 745.398100][ C0] ? __pfx_do_exit+0x10/0x10 [ 745.402694][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 745.407734][ C0] ? find_held_lock+0x2b/0x80 [ 745.412423][ C0] do_group_exit+0xd3/0x2a0 [ 745.416921][ C0] get_signal+0x2673/0x26d0 [ 745.421415][ C0] ? percpu_counter_add_batch+0xb8/0x1f0 [ 745.427066][ C0] ? __pfx_get_signal+0x10/0x10 [ 745.431932][ C0] ? find_held_lock+0x2b/0x80 [ 745.436673][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 745.442558][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 745.448723][ C0] ? fd_install+0x244/0x750 [ 745.453258][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 745.458878][ C0] do_syscall_64+0xda/0x260 [ 745.463378][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.469284][ C0] RIP: 0033:0x7fcd9018e969 [ 745.473770][ C0] RSP: 002b:00007fcd91029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 745.482196][ C0] RAX: 0000000000000003 RBX: 00007fcd903b5fa0 RCX: 00007fcd9018e969 [ 745.490175][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 745.498236][ C0] RBP: 00007fcd90210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 745.506309][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.514313][ C0] R13: 0000000000000001 R14: 00007fcd903b5fa0 R15: 00007fff2c84bd28 [ 745.522315][ C0] [ 745.525392][ C0] task:syz-executor state:R running task stack:23976 pid:11316 tgid:11316 ppid:11310 task_flags:0x400140 flags:0x00000000 [ 745.538996][ C0] Call Trace: [ 745.542264][ C0] [ 745.545204][ C0] __schedule+0x116f/0x5de0 [ 745.549837][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 745.554789][ C0] ? __pfx___schedule+0x10/0x10 [ 745.559624][ C0] ? mark_held_locks+0x49/0x80 [ 745.564558][ C0] preempt_schedule_irq+0x51/0x90 [ 745.569679][ C0] irqentry_exit+0x36/0x90 [ 745.574116][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.580088][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 745.585312][ C0] Code: ee 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 52 f4 ec 0e 0f 82 74 02 00 00 8b 35 ea 23 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 ee 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 745.605540][ C0] RSP: 0018:ffffc900039df808 EFLAGS: 00000206 [ 745.611611][ C0] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 000000005a3aa682 [ 745.619571][ C0] RDX: 0000000000000000 RSI: ffffffff8dbbbf57 RDI: ffffffff8bf483a0 [ 745.627534][ C0] RBP: 0000000000000002 R08: 5266d60a7c66fcff R09: 0000000000000000 [ 745.635504][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 745.643462][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.651459][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 745.656666][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 745.662819][ C0] unwind_next_frame+0xd1/0x20a0 [ 745.667761][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 745.672873][ C0] ? __sys_socket+0x14d/0x260 [ 745.677550][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 745.683693][ C0] arch_stack_walk+0x94/0x100 [ 745.688390][ C0] ? __sys_socket+0x14d/0x260 [ 745.693164][ C0] stack_trace_save+0x8e/0xc0 [ 745.697837][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 745.703215][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 745.708184][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 745.713139][ C0] save_stack+0x160/0x1f0 [ 745.717838][ C0] ? __pfx_save_stack+0x10/0x10 [ 745.722682][ C0] ? __free_frozen_pages+0x69d/0xff0 [ 745.728006][ C0] ? __put_partials+0x16d/0x1c0 [ 745.732882][ C0] ? qlist_free_all+0x4e/0x120 [ 745.737623][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 745.743242][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 745.748276][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 745.753922][ C0] ? sk_prot_alloc+0x60/0x2a0 [ 745.758613][ C0] ? sk_alloc+0x36/0xc20 [ 745.762839][ C0] ? inet_create+0x3a1/0x1090 [ 745.767522][ C0] ? __sock_create+0x335/0x8d0 [ 745.772293][ C0] ? __sys_socket+0x14d/0x260 [ 745.776965][ C0] ? page_ext_put+0x3e/0xd0 [ 745.781489][ C0] __reset_page_owner+0x84/0x1a0 [ 745.786436][ C0] __free_frozen_pages+0x69d/0xff0 [ 745.791575][ C0] __put_partials+0x16d/0x1c0 [ 745.796432][ C0] qlist_free_all+0x4e/0x120 [ 745.801046][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 745.806516][ C0] __kasan_slab_alloc+0x69/0x90 [ 745.811384][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 745.816854][ C0] ? sk_prot_alloc+0x60/0x2a0 [ 745.821551][ C0] sk_prot_alloc+0x60/0x2a0 [ 745.826059][ C0] sk_alloc+0x36/0xc20 [ 745.830108][ C0] inet_create+0x3a1/0x1090 [ 745.834609][ C0] ? inet_create+0x93/0x1090 [ 745.839216][ C0] __sock_create+0x335/0x8d0 [ 745.843816][ C0] __sys_socket+0x14d/0x260 [ 745.848326][ C0] ? __pfx___sys_socket+0x10/0x10 [ 745.853341][ C0] ? rcu_is_watching+0x12/0xc0 [ 745.858117][ C0] __x64_sys_socket+0x72/0xb0 [ 745.862813][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 745.868023][ C0] do_syscall_64+0xcd/0x260 [ 745.872517][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.878408][ C0] RIP: 0033:0x7f8f62590887 [ 745.882818][ C0] RSP: 002b:00007ffe488f6fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 745.891314][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8f62590887 [ 745.899284][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 745.907274][ C0] RBP: 00007ffe488f770c R08: 00007ffe488f702c R09: 00007ffe488f7417 [ 745.915238][ C0] R10: 00007ffe488f7080 R11: 0000000000000202 R12: 00007f8f62780e40 [ 745.923205][ C0] R13: 00000000000927c0 R14: 0000000000092d31 R15: 00007f8f62783000 [ 745.931189][ C0] [ 745.934207][ C0] task:kworker/0:6 state:R running task stack:23080 pid:5899 tgid:5899 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 745.947778][ C0] Workqueue: events_power_efficient gc_worker [ 745.953838][ C0] Call Trace: [ 745.957112][ C0] [ 745.960042][ C0] __schedule+0x116f/0x5de0 [ 745.964551][ C0] ? __pfx___schedule+0x10/0x10 [ 745.969390][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 745.974940][ C0] ? mark_held_locks+0x49/0x80 [ 745.979712][ C0] preempt_schedule_irq+0x51/0x90 [ 745.984732][ C0] irqentry_exit+0x36/0x90 [ 745.989211][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.995177][ C0] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 746.000292][ C0] Code: 00 00 48 c7 c7 c8 a1 85 90 e8 57 76 04 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 d5 99 27 f8 58 48 85 db 0f 85 d4 0f 00 00 56 9e 27 f8 8b 1d 30 1d f2 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 746.019916][ C0] RSP: 0018:ffffc9000404fb60 EFLAGS: 00000293 [ 746.026004][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89938fc9 [ 746.033969][ C0] RDX: ffff888030b00000 RSI: ffffffff89938fd8 RDI: 0000000000000007 [ 746.041941][ C0] RBP: ffffffff9afaca4c R08: 0000000000000007 R09: 0000000000000000 [ 746.050065][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024400000 [ 746.058125][ C0] R13: 0000000000040000 R14: dffffc0000000000 R15: 000000000000179f [ 746.066114][ C0] ? gc_worker+0xe19/0x16e0 [ 746.070609][ C0] ? gc_worker+0xe28/0x16e0 [ 746.075127][ C0] ? __pfx_gc_worker+0x10/0x10 [ 746.079897][ C0] ? rcu_is_watching+0x12/0xc0 [ 746.084685][ C0] process_one_work+0x9cc/0x1b70 [ 746.089633][ C0] ? __pfx_defense_work_handler+0x10/0x10 [ 746.095349][ C0] ? __pfx_process_one_work+0x10/0x10 [ 746.100768][ C0] ? assign_work+0x1a0/0x250 [ 746.105369][ C0] worker_thread+0x6c8/0xf10 [ 746.109946][ C0] ? __pfx_worker_thread+0x10/0x10 [ 746.115053][ C0] kthread+0x3c2/0x780 [ 746.119125][ C0] ? __pfx_kthread+0x10/0x10 [ 746.123733][ C0] ? __pfx_kthread+0x10/0x10 [ 746.128336][ C0] ? __pfx_kthread+0x10/0x10 [ 746.132942][ C0] ? __pfx_kthread+0x10/0x10 [ 746.137524][ C0] ? rcu_is_watching+0x12/0xc0 [ 746.142275][ C0] ? __pfx_kthread+0x10/0x10 [ 746.146872][ C0] ret_from_fork+0x45/0x80 [ 746.151286][ C0] ? __pfx_kthread+0x10/0x10 [ 746.155917][ C0] ret_from_fork_asm+0x1a/0x30 [ 746.160703][ C0] [ 746.163730][ C0] task:dhcpcd-run-hook state:R running task stack:25672 pid:15920 tgid:15920 ppid:5480 task_flags:0x400000 flags:0x00004002 [ 746.177224][ C0] Call Trace: [ 746.180492][ C0] [ 746.183441][ C0] __schedule+0x116f/0x5de0 [ 746.187960][ C0] ? find_held_lock+0x2b/0x80 [ 746.192666][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 746.197862][ C0] ? __pfx___schedule+0x10/0x10 [ 746.202722][ C0] ? mark_held_locks+0x49/0x80 [ 746.207511][ C0] preempt_schedule_irq+0x51/0x90 [ 746.212555][ C0] irqentry_exit+0x36/0x90 [ 746.216948][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.222917][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 746.228129][ C0] Code: ee 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 52 f4 ec 0e 0f 82 74 02 00 00 8b 35 ea 23 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 ee 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 746.247840][ C0] RSP: 0018:ffffc90004cdf7c0 EFLAGS: 00000206 [ 746.253919][ C0] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 00000000bbabe528 [ 746.261885][ C0] RDX: 0000000000000000 RSI: ffffffff8dbbbf57 RDI: ffffffff8bf483a0 [ 746.269869][ C0] RBP: 0000000000000002 R08: afdc9d0852442f86 R09: 0000000000000000 [ 746.277840][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 746.285828][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.293808][ C0] ? lock_acquire+0x179/0x350 [ 746.298498][ C0] page_ext_get+0x36/0x1a0 [ 746.302928][ C0] ? page_ext_get+0x25/0x1a0 [ 746.307559][ C0] __reset_page_owner+0x2b/0x1a0 [ 746.312529][ C0] __free_frozen_pages+0x69d/0xff0 [ 746.317639][ C0] __put_partials+0x16d/0x1c0 [ 746.322325][ C0] qlist_free_all+0x4e/0x120 [ 746.326924][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 746.332410][ C0] __kasan_slab_alloc+0x69/0x90 [ 746.337265][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 746.342729][ C0] ? vm_area_dup+0x25/0x760 [ 746.347244][ C0] vm_area_dup+0x25/0x760 [ 746.351621][ C0] copy_process+0x7f67/0x91a0 [ 746.356348][ C0] ? __pfx_copy_process+0x10/0x10 [ 746.361397][ C0] kernel_clone+0xfc/0x960 [ 746.365847][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 746.370797][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 746.375826][ C0] __do_sys_clone+0xce/0x120 [ 746.380410][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 746.385627][ C0] ? rcu_is_watching+0x12/0xc0 [ 746.390405][ C0] do_syscall_64+0xcd/0x260 [ 746.394909][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.400887][ C0] RIP: 0033:0x7ff0a1a50636 [ 746.405315][ C0] RSP: 002b:00007ffeac209f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 746.413729][ C0] RAX: ffffffffffffffda RBX: 00007ffeac209f48 RCX: 00007ff0a1a50636 [ 746.421702][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 746.429672][ C0] RBP: 000055fbc9d0e5e0 R08: 0000000000000000 R09: 0000000000000000 [ 746.437649][ C0] R10: 00007ff0a18b6f50 R11: 0000000000000246 R12: 000055fbc9d1caa8 [ 746.445616][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.453612][ C0] [ 746.456631][ C0] rcu: rcu_preempt kthread starved for 9717 jiffies! g59689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 746.467730][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 746.477695][ C0] rcu: RCU grace-period kthread stack dump: [ 746.483597][ C0] task:rcu_preempt state:R running task stack:27608 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 746.497127][ C0] Call Trace: [ 746.500421][ C0] [ 746.503361][ C0] __schedule+0x116f/0x5de0 [ 746.507897][ C0] ? __pfx___schedule+0x10/0x10 [ 746.512757][ C0] ? find_held_lock+0x2b/0x80 [ 746.517430][ C0] ? schedule+0x2d7/0x3a0 [ 746.521753][ C0] schedule+0xe7/0x3a0 [ 746.525836][ C0] schedule_timeout+0x123/0x290 [ 746.530687][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 746.536057][ C0] ? __pfx_process_timeout+0x10/0x10 [ 746.541350][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 746.547157][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 746.552613][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 746.557389][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 746.562685][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 746.567537][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 746.573336][ C0] rcu_gp_kthread+0x270/0x380 [ 746.578023][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 746.583228][ C0] ? rcu_is_watching+0x12/0xc0 [ 746.587997][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.593188][ C0] ? __kthread_parkme+0x19e/0x250 [ 746.598234][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 746.603451][ C0] kthread+0x3c2/0x780 [ 746.607519][ C0] ? __pfx_kthread+0x10/0x10 [ 746.612097][ C0] ? __pfx_kthread+0x10/0x10 [ 746.616686][ C0] ? __pfx_kthread+0x10/0x10 [ 746.621277][ C0] ? __pfx_kthread+0x10/0x10 [ 746.625865][ C0] ? rcu_is_watching+0x12/0xc0 [ 746.630643][ C0] ? __pfx_kthread+0x10/0x10 [ 746.635250][ C0] ret_from_fork+0x45/0x80 [ 746.639678][ C0] ? __pfx_kthread+0x10/0x10 [ 746.644268][ C0] ret_from_fork_asm+0x1a/0x30 [ 746.649020][ C0] [ 746.652042][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 746.658365][ C0] Sending NMI from CPU 0 to CPUs 1: [ 746.663579][ C1] NMI backtrace for cpu 1 [ 746.663593][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 746.663612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.663619][ C1] RIP: 0010:__kasan_check_byte+0x0/0x50 [ 746.663640][ C1] Code: fe ff ff 48 8d 42 ff 48 89 c3 e9 89 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 54 49 89 f4 55 48 89 fd 53 e8 0d 1f 00 00 89 c3 84 [ 746.663654][ C1] RSP: 0018:ffffc90000a081d8 EFLAGS: 00000002 [ 746.663667][ C1] RAX: 0000000000000001 RBX: ffff8880352bd9f0 RCX: 0000000000000002 [ 746.663676][ C1] RDX: 0000000000000000 RSI: ffffffff8a166a80 RDI: ffff8880352bd9f0 [ 746.663685][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 746.663692][ C1] R10: ffffffff9084f617 R11: 0000000000000000 R12: 0000000000000001 [ 746.663701][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.663710][ C1] FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 746.663724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.663733][ C1] CR2: 00007fcd91028f98 CR3: 00000000216b6000 CR4: 00000000003526f0 [ 746.663743][ C1] Call Trace: [ 746.663748][ C1] [ 746.663752][ C1] lock_acquire+0xfc/0x350 [ 746.663773][ C1] ? nf_hook_slow+0x132/0x200 [ 746.663798][ C1] ip6_finish_output2+0x19c0/0x2020 [ 746.663820][ C1] ? ip6_finish_output+0x3f9/0x1360 [ 746.663840][ C1] ip6_finish_output+0x3f9/0x1360 [ 746.663858][ C1] ip6_output+0x1f9/0x540 [ 746.663874][ C1] ? __pfx_ip6_output+0x10/0x10 [ 746.663890][ C1] ip6_local_out+0xcd/0x4a0 [ 746.663911][ C1] synproxy_send_tcp_ipv6+0x59e/0x680 [ 746.663930][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 746.663948][ C1] ? __cookie_v6_init_sequence+0x2d3/0x3c0 [ 746.663968][ C1] synproxy_send_client_synack_ipv6+0x635/0x7e0 [ 746.663986][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 746.664001][ C1] ? nft_socket_eval+0x324/0xb20 [ 746.664019][ C1] nft_synproxy_do_eval+0x93b/0xd80 [ 746.664038][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 746.664055][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 746.664076][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 746.664095][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 746.664113][ C1] nft_do_chain+0x2e6/0x1920 [ 746.664129][ C1] ? ip6t_do_table+0xbf0/0x1be0 [ 746.664147][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 746.664172][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 746.664192][ C1] nft_do_chain_inet+0x18a/0x340 [ 746.664208][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 746.664223][ C1] ? nf_log_ip6_packet+0x1e0/0x230 [ 746.664240][ C1] ? lock_acquire+0x179/0x350 [ 746.664260][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 746.664274][ C1] nf_hook_slow+0xbb/0x200 [ 746.664293][ C1] nf_hook.constprop.0+0x422/0x750 [ 746.664310][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 746.664327][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 746.664346][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 746.664365][ C1] ip6_input+0xe0/0x2f0 [ 746.664381][ C1] ? __pfx_ip6_input+0x10/0x10 [ 746.664398][ C1] ipv6_rcv+0x265/0x680 [ 746.664430][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 746.664446][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 746.664467][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 746.664488][ C1] ? lock_acquire+0x179/0x350 [ 746.664509][ C1] ? process_backlog+0x3f0/0x15e0 [ 746.664527][ C1] __netif_receive_skb+0x1d/0x160 [ 746.664546][ C1] process_backlog+0x442/0x15e0 [ 746.664567][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 746.664586][ C1] ? rcu_is_watching+0x12/0xc0 [ 746.664604][ C1] net_rx_action+0xa97/0x1010 [ 746.664620][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 746.664640][ C1] ? sched_balance_domains+0x283/0xee0 [ 746.664666][ C1] handle_softirqs+0x216/0x8e0 [ 746.664685][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 746.664702][ C1] __irq_exit_rcu+0x109/0x170 [ 746.664718][ C1] irq_exit_rcu+0x9/0x30 [ 746.664733][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 746.664751][ C1] [ 746.664755][ C1] [ 746.664760][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.664775][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 746.664793][ C1] Code: 25 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 746.664805][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 746.664822][ C1] RAX: 00000000035a8781 RBX: 0000000000000001 RCX: ffffffff8b6cd419 [ 746.664831][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe1547 RDI: ffffffff8bf483a0 [ 746.664840][ C1] RBP: ffffed1003b5d488 R08: 0000000000000001 R09: ffffed10170a65bd [ 746.664849][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 746.664857][ C1] R13: ffff88801daea440 R14: ffffffff9084f610 R15: 0000000000000000 [ 746.664869][ C1] ? ct_kernel_exit+0x139/0x190 [ 746.664889][ C1] default_idle+0x13/0x20 [ 746.664907][ C1] default_idle_call+0x6d/0xb0 [ 746.664925][ C1] do_idle+0x391/0x510 [ 746.664941][ C1] ? __pfx_do_idle+0x10/0x10 [ 746.664957][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 746.664977][ C1] cpu_startup_entry+0x4f/0x60 [ 746.664993][ C1] start_secondary+0x21d/0x2b0 [ 746.665014][ C1] ? __pfx_start_secondary+0x10/0x10 [ 746.665036][ C1] common_startup_64+0x13e/0x148 [ 746.665057][ C1] [ 747.334424][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.044626][ T1293] ieee802154 phy0 wpan0: encryption failed: -22