last executing test programs: 2m47.243686169s ago: executing program 3 (id=849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b, 0x400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xdc}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) readahead(0xffffffffffffffff, 0x0, 0x1) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x57, 0x0, r4, 0x5, '\x00', 0x0, r4, 0x1, 0x4, 0x1}, 0x50) 2m45.374539313s ago: executing program 3 (id=859): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8d0300dd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)) syncfs(r4) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r7, 0x0, 0xf, &(0x7f0000000140)="e9", 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) 2m43.700295172s ago: executing program 3 (id=868): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="980500002c0007012bbd7000ffdbdf25087c0000180001801400dd8008004700ac1414bb0800da00ff235e006c050380660503"], 0x598}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m41.431721403s ago: executing program 3 (id=872): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0x9e, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m39.600884481s ago: executing program 3 (id=878): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/power/wakeup_count', 0x602, 0x1d2) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) 2m37.962326106s ago: executing program 3 (id=881): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002700), 0x8d82, 0x0) fallocate(r0, 0x11, 0x0, 0x40000000007c800) 2m35.707403292s ago: executing program 1 (id=885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000001480)=ANY=[@ANYRESDEC=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000100)='\'\xf7\xad\xd2\v\xed\xd2\xcd/\xbf`:JY\xd8\x9c\xc3\x18\x95H\xcf\xf2\x94{\xcc\x9d\x89\x18\xb2X\xe0tk\x9fC\xda\xa4DG\xc6e]\xc91\xd6\x12\xec\xec\'\xc5i\x95\x86trK&\x88\x19MeQ\x910\xf1:\xe7\xd9n<\xec\x9eY\x04\xbf\xb1\x00\xbdTw\xcd]]\x11xJ6\xad\xc5|\xce\xce\xbc\xe1V\xb81\xa4g\xf2\xad') chdir(&(0x7f00000001c0)='./file1\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) setpgid(r1, r1) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mcast2, @random="4d237bf6449d", @dev={0xfe, 0x80, '\x00', 0x25}}}}}, &(0x7f00000003c0)={0x1, 0x1, [0xe52, 0x6c5, 0x83b, 0x1d7]}) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') setpgid(0x0, r1) acct(&(0x7f0000000240)='./file0\x00') r4 = open$dir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x214c42, 0x189) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x8, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='autofs\x00', &(0x7f00000000c0)='./file1\x00', r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183741, 0x180) pwritev2(r6, &(0x7f0000022e80)=[{&(0x7f0000000240)="8a", 0x1}], 0x1, 0x0, 0x0, 0x0) renameat2(r4, &(0x7f0000000180)='./file1\x00', r4, &(0x7f0000001440)='./file1\x00', 0x1) 2m34.809261653s ago: executing program 1 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x10000, 0x4000}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 2m31.655333926s ago: executing program 1 (id=892): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x2, 0x8, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x7f, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000, 0xfffffffc, 0x8, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2000100, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x9, 0x1, 0x6, 0x0, 0x101, 0x1, 0x10001, 0x0, 0x4, 0x2, 0x0, 0x3, 0xfffffffa, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x4]}) listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x4000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002140)='rdma.current\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x28240200, 0x0, 0xb, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000640)) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1800040000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x1}]}]}, 0x23c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r10, 0x25, 0x3, @void}, 0x10) 2m30.822331457s ago: executing program 1 (id=896): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x5, @sliced={0x8, [0x4, 0x3, 0xc99, 0x644c, 0x4, 0x7f, 0x1, 0x0, 0x7fff, 0x7, 0x5cd1, 0xc, 0x8, 0xbb, 0x4, 0x0, 0x8, 0xc5, 0x9, 0xffff, 0x9, 0x2, 0x7, 0x4, 0x1, 0x6, 0x2, 0x2, 0x9507, 0x7, 0x2, 0x9bc, 0x400, 0x7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x0, 0x800, 0xe6ef, 0x8, 0x100, 0x6, 0x2000, 0x2, 0x3], 0x8001}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000040006000000000000000005"], 0x310) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m29.038132108s ago: executing program 1 (id=900): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x8000032, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10001, 0x2, 0x50000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:11 1', 0x1b) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020800000400000001000000090001", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_setup(0x6db4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x118}}, 0x240408d0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2m27.2796242s ago: executing program 1 (id=902): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x102b}}, 0x2000) (fail_nth: 1) 2m22.607163216s ago: executing program 32 (id=881): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002700), 0x8d82, 0x0) fallocate(r0, 0x11, 0x0, 0x40000000007c800) 2m12.191911921s ago: executing program 33 (id=902): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) (fail_nth: 1) 1m15.607779044s ago: executing program 4 (id=1087): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801f", 0xb9}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0", 0xa5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m13.727285842s ago: executing program 0 (id=1092): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x23, 0x83, {0x83, 0x24, "70c4f902ae5af6f3ffe23e6a5a47b3626998e5a9396c908f38d87e0f46b9ff4bdf8bc36094e23499fa294bdee49de5b5c0330b4505c39e56790d085ed14830068dfa7c910d4470ff4ecf06dd9f031c31547479ca6519c951e5e02b019584898bcbfe3f15059d8bb57c5b52d5c160d39ca733ffaaa91fb0cbc530dcc8b27fe21695"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x40, 0x5, 0xe3, "19b6710da94e2fb5bafcf3c532d74acae3363f7b4dbf51b96a8c2a88abcc1b010bac3467df90fdb72dc216c4cd9de929245bf3b7d0362fc8c5656cdbb654f580302a9dbbe374cd3ec5326330be4979c699a694ecf30da6cb804c8d66bdee2a9328982a79d0e3564ef21a5b3e14573a3f24e3cf9b1dd0d6388e95bfdff83a48b48fb9657f6153d64c485e772e871374104b407caea273f9d1255beeb977b69e70a31c26e325a7bb3c33c5a04eea8e405c45943153843f7a793dc9e667ed3dc9f8842de2d84c1d9a8eebf08513267c456ed1807b35165b111fbe95c7e0d65f05aa279543"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000480)={0x20, 0x81, 0x1, "af"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "8e"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "a3b863"}, &(0x7f0000000540)={0x20, 0x84, 0x2, "e543"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "5c5617"}}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\a('], 0x0, 0x0}) 1m13.394142181s ago: executing program 4 (id=1094): kexec_load(0x3, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442da", 0x3a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m12.927637661s ago: executing program 2 (id=1097): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x2, "a0cdeec531a074a26db039dde81d11b8af83517a06ca27cdfb355e723f8cab95"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) read$FUSE(r4, &(0x7f0000001c00)={0x2020}, 0x2020) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000140)="de", &(0x7f0000000180)=""/252, &(0x7f0000000300)="ebb46a5dde305c70a5284f81b4ff9b1776ab0c75c8f2f9e96550ef362dd01fbe47b0588dfd98b84a2297237184437175d67167fdd553c504a8050bcc1c99eae58de31a6cfb48bfc2441fcd48c4a65f5d1f1cc4b1ba11ebb97004e87304a2d3234db98de9f811932789", &(0x7f0000000380)="4d276fad1e10b992cb59423ede5097a48eb8d84edf9336adb6a4d76bcb402193cea8c24b9490b1e6c24aecc1b78d9a574c1f343409135eeefcadf48095073cb52437b7f68dffec2237d8643b1769a3c4998f39fb2ad3280d353f1d34277747870fcb7613fbfe70bf6d8e52bd2029fb26adb28c5f86b8dde8a0d533a8d26d96", 0xe212, r4}, 0x38) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x6) 1m12.721260352s ago: executing program 0 (id=1098): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 1m12.395815669s ago: executing program 0 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000400)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040015}, 0x24040808) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @rand_addr, 0x1}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x28, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x6, 0x2, 0x0, 0x0, 0x203081b4}, @generic={0x2, 0x2}]}}}}}}}}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15) 1m12.113056502s ago: executing program 2 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r1) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x15622}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c20508000000000003007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x4004010) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf", 0x6}], 0x1}, 0x20000840) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x141082, 0x106) r5 = openat2(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x123100, 0x81, 0x24}, 0x18) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e0a030c"], 0xd) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x40, 0x140c, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x11, &(0x7f0000000b40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x40001}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x10}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='GPL\x00', 0xb328, 0xc3, &(0x7f00000005c0)=""/195, 0x40f00, 0xa, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x1, 0x7, 0x10000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r5, r5, r5, r5], &(0x7f0000000780)=[{0x2, 0x1, 0x3, 0x6}, {0x2, 0x1, 0x8, 0x3}, {0x5, 0x3, 0xb}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@ifindex, 0x2f, 0x0, 0x50, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a00)={0x6, 0x0}, 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3ddec543aa9d54208b62faee9f02b0b5b5fc2f628cd71eae1b081fd1bf09785b3e69377b3022e4791dc4b84e90864a35b755d6a8fabd98e8778270a5836f05c4edb16f04569a36b3634e4c0acce21b35ebc2a84bbc0ee414ffaee8326d502f1bea8ca888f395b8d2b95d27", @ANYRESHEX, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@delqdisc={0x184, 0x25, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xd}, {0xfff1, 0x3}, {0x8, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x25}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @TCA_RATE={0x6, 0x5, {0x2, 0xd}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc6, 0x84, 0x6, 0x7ff, 0x0, 0x2, 0x6, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x5, 0x34, 0xa, 0x8afb, 0x0, 0x3, 0xe, 0x9}}, {0x16, 0x2, [0x2, 0x6, 0x4, 0x6, 0x8, 0xfffb, 0x1000, 0x1, 0x8]}}, {{0x1c, 0x1, {0x2, 0xe, 0x4, 0x7, 0x2, 0x2c79, 0x110000, 0xa}}, {0x18, 0x2, [0xfff4, 0x40, 0x8, 0x5, 0xd, 0x2, 0x4, 0x7, 0x3, 0x5]}}, {{0x1c, 0x1, {0xb3, 0xe, 0x6, 0x3ff, 0x1, 0x6212, 0xa, 0x7}}, {0x12, 0x2, [0x7ff, 0x6, 0x0, 0xfff4, 0xf702, 0x2, 0x20]}}, {{0x1c, 0x1, {0x53, 0x5, 0x0, 0x5, 0x0, 0xfffffff5, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xc1, 0x4, 0x6, 0x7, 0x1, 0x59, 0x6, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x6c, 0x1, {0xac, 0x1, 0x8, 0xfffff168, 0x0, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0x101, 0x7fab]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0xf6}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40840}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000840)={'dvmrp0\x00', 0x2000}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB='*\x00\x00\x001 \x00\x00', @ANYRES32=r2, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="7d1a47c3fadd6f94847562e3b11b80e4b31e3b8e83c4f5c850f6ba582d071af77b1ef7dc5ffb2767ff8b866e41d0b57e7fbf615f2312fe164b6dbedc00e05ebb9fa5accb93bcd5b08c4cc9fa64fb4c758c7c4452b262f6ed5797cb21ababa869d48511ca3f990bb02bc8bd02b91eb0b8dbee1c45e1ca6121efc8c5ad22c0c9f9c762f98f88e59fdb1918bb6b4ced9743d66bcb067865ad0e3905a6f8fdea1fb978725b9186aee9802c7bc7b3e64f1551c10ce68297354e9bdf57f4877488c890c11e", @ANYRES64=r8], 0x20) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) 1m11.87368854s ago: executing program 4 (id=1103): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) fremovexattr(r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x2, r0, 0x0, 0x80000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) 1m11.768028777s ago: executing program 0 (id=1104): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801f", 0xb9}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0", 0xa5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m11.611051007s ago: executing program 2 (id=1105): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m11.19971174s ago: executing program 2 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m11.091759833s ago: executing program 4 (id=1109): r0 = socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) (fail_nth: 1) 1m10.388269093s ago: executing program 2 (id=1110): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 1m10.375087862s ago: executing program 4 (id=1112): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0, 0x61}, {0x0}, {0x0, 0x54}, {0x0}, {0x0}, {0x0, 0xfffffdbf}, {0x0}], 0x9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x60000600) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000100)={0xb, 0x5, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x101, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x9, 0x2}], 0xa0000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r4, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="48386440ce17cb2fa3d3c2fd73405f3af6d4800497bfeb066dcd42bf71b3db37568c8e0e5c029eb43a21f7c9b84fff41d8408c2ab9da3f399f40d110c2b8b423cfb3f200b0b0ad7e6f68df7d50f2cde564664c0ffe17acd54dc37f0ba4cd83fb86cbaa35", 0x64}, {&(0x7f0000000340)}], 0x2, &(0x7f0000000580)=[@op={0x18}], 0x18, 0x8040}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000940)="ea8786a1a14c39a8d35feb8a9e4f2e0ad0f162b22d9319dda125f456f5be41bb9daa2e608e38f197b64a5c2dd5d57e98624c48fa1165e471a64e014f3d82ae0eec8cd615bcd88975054d12bc78c60c577efd6ec59e048d1f3adafa534eb03b916b02ae8dd4937186fe0e0c00c3f3e632c3d6289099dd70aacbc442bad816b4ba0a1c6656eea850aceca350597c2aa890cb0949ed109639dbdd596a6123d19103cbdf48d608320ad3eb312c2ac86c688a66093cc3e2502aa5b6dd0253e0dca83bbd16668157b738c9e9038c4e08bb8343e0920b0dd3a25885c3dd4a159e9476aace5144886f596c3b11c8f326b1ee72989f9899f3b921", 0xf6}, {&(0x7f0000000a40)="7716e4ea8c467a5b85202bfe092805bd7a95872e474c76199e7bfcae1303c994797d03bfbb5a46eb0dd2c7cc8f7425e86ea2c0ee9cc4be06c3da011fbd1f4622a6a8624bac3ae65b9bacb1b72a72729d8da3c4dc36706333beee650f1cd18ca6f95fade3039f1f35bb4d64310c6c8ae1ac0368a04a63ea958b3c026028bc8fd671eaab8028c233793a12a8d4e899aba8c8872400e68d243431e9d1c8afcdc9a807ed183c24989b9d6fe46447c8c1a5", 0xaf}, {&(0x7f0000000b40)="442472711a609795f6647ac67d7c0c97652e93e92ca718725894b1113496df5cfc70451df02ed1a1cb82a979cebb1d91c4f87e8ceae545db447213707051f3811dd89c07b7090847190974f02b261735c16870602573d7ef2581c77d5f3b63b138dcb44595799c5d60b829c30245f71ad5593e0a052b3d6e2fefaec4b47612e9e6e33c0c4d14d0713814dc8d8bd1bebc653ffa409142014aa5ab55cf65a4d34676357d3f64d0059830716bd68bbd48726253e92d5beaba5f8fb149c5a4ec9284fdfd120e6f10976d7bf74be90eafd603f826e1050194c4ebcb3a52bf72da339fc081fec0247fc234230db95a3f", 0xed}], 0x3, &(0x7f0000000c80)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18}, @iv={0x30, 0x117, 0x2, 0x17, "bac466de497c16990c348268d5e8fc8054983bf55f03dd"}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0xa8, 0x4000}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f700000034d2a54400a8", 0xa}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)}, {&(0x7f0000000e80)="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", 0x1aa}, {&(0x7f00000008c0)}], 0x3, &(0x7f0000001040)=ANY=[]}], 0x2, 0x48800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m10.045348149s ago: executing program 0 (id=1114): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x5) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r4, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r4, 0x0, r5}) 1m9.968264687s ago: executing program 2 (id=1115): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 1m8.467020163s ago: executing program 4 (id=1117): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) (fail_nth: 1) 1m8.387853876s ago: executing program 0 (id=1118): socket$kcm(0x29, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 54.760815052s ago: executing program 34 (id=1115): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 53.352632973s ago: executing program 35 (id=1117): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) (fail_nth: 1) 53.259692971s ago: executing program 36 (id=1118): socket$kcm(0x29, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 15.378636804s ago: executing program 6 (id=1221): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc) 11.221795751s ago: executing program 6 (id=1233): r0 = socket$l2tp(0x2, 0x2, 0x73) listen(r0, 0x5) (async) unshare(0x28000600) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x922000000001, 0x106) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x9, 0x2}) (async) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x7}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x162) mount(&(0x7f0000000180)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='exfat\x00', 0x8000, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x100000001, 0x10000003, 0x8edd, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffffc, 0x110fff}) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r4) (async) ioctl$I2C_PEC(r5, 0x708, 0x9) 9.903434697s ago: executing program 7 (id=1234): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) (fail_nth: 1) 9.726705755s ago: executing program 6 (id=1235): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000100000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001811000038714d6672ed2d4bc319f9e44aa1fa64035acfbf357f40ee48387761b871542917364e34baa12dc9669da4a660f59566851dd47f2981967b984bb8ac613dab050153aa22a0f9324f9de141ae1a9de550119deccf332cc56d972d751e7de5d967c1e5a30cea184a162585", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bind(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote}, 0x4, 0x0, 0x1, 0x3}}, 0x80) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x1, &(0x7f0000000440)=0x8, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xc, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='cifs\x00', 0x0, &(0x7f00000001c0)='\x00') 9.710457517s ago: executing program 9 (id=1237): syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e0c000310", @ANYRES16], 0xf) 9.426383636s ago: executing program 8 (id=1238): timer_create(0x0, &(0x7f0000001040)={0x0, 0x21}, &(0x7f0000001080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002440)={0x0, 0x4, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002840)={0x0, 0x3, {0x5a3dee97, @usage=0xfff, 0x0, 0x6, 0x8, 0x100000000, 0xb6e, 0x8000000000000000, 0x2, @struct={0x4, 0x8}, 0x5, 0x1f5, [0x9, 0xa, 0x8, 0x0, 0x6]}, {0x1, @usage=0x7, 0x0, 0x100000000, 0x101, 0x8, 0x1959, 0xb, 0x80, @struct={0x4, 0x1}, 0x0, 0x4, [0x15b, 0x10000, 0x23, 0x55a, 0xbd4, 0x3]}, {0x50, @usage=0x8, 0x0, 0x3, 0xfd13, 0x1000000000000, 0x6, 0x7, 0x1, @usage=0x10, 0x1, 0x2, [0x5, 0xff, 0x6, 0x1, 0x6, 0x10001]}, {0x0, 0x8, 0x5}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002c40)={0x11, 0x2, {0x4ef74b99, @usage=0x9, 0x0, 0x5b34, 0x4, 0x9, 0x6, 0x1, 0x0, @struct={0x400, 0x101}, 0x6, 0x300000, [0x9, 0x2, 0x5, 0x5, 0x8, 0x7fffffff]}, {0x7, @struct={0x32, 0x4}, r0, 0xc3, 0xe, 0x7, 0x7, 0x2, 0x50, @usage=0x9, 0xf0b, 0x81, [0x7, 0x10001, 0x4, 0x80, 0x5, 0x9]}, {0x98, @struct={0x4, 0xd}, r1, 0x8000000000000000, 0x5, 0x8, 0x8000000000000000, 0x8, 0x10, @usage=0x10, 0x8, 0x80000001, [0xffffffff80000001, 0x2, 0x6, 0xcda, 0x0, 0xf]}, {0xe8b, 0x80000001, 0x3}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r2) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003040)=ANY=[@ANYBLOB="1ab5e43e0eeb4ff2e98585214249860bdf695d81234c3d99824af1eba7bbb58ce78a87d074de65f5ab470300000000000000fadd378287a38ee93e5c104443294f9b8182d21448296d21a409f4402662ec4dd8bc6d0598da2935c0445c9ca78e2af7adfc8fe0810d05d082bcd0f08af655482572b5f9dd581f1551030cfe9406ee8c4b0407fdc44bcc265bbb0de19148d71c4ae6fe5e67aa404eea1286883e229c1d70b05b07506a0fddf73eb97473de7fe5e15402ff7c9c579e02f2da4e829f03516b2f0968d786bfffaa238b5e45ff6a119e5550f49ee833134a8fb9b2944af7b1941fbd2f4eae56f4d93dc185726052285321bfd957958c606546b616eeaf7c3b7500"/270, @ANYRES16=0x0, @ANYBLOB="02002bbd7000fddbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000"], 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0xb}, 0xffffffe2) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00cba6fad8b438b14a", @ANYRES16=r6, @ANYBLOB="08002dbd7000fddbdf255c00000008006b006e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0xff, 0x4) sendto$inet6(r4, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) 8.371031707s ago: executing program 9 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="8000800005000100"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x400c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001400b5950000000a0088007a802dec6a686e68f3862810615f3f73d873471aec09a1dcf158aa72d4bc07767af9c611f495f0a5e3b4fb44f51bd157f47e8babb0cdbc0535241e923e0dd45a5ef53e6be154d003cc1523d3", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.370742763s ago: executing program 7 (id=1240): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="980500002c0007012bbd7000ffdbdf25087c0000180001801400dd8008004700ac1414bb0800da"], 0x598}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 8.369835526s ago: executing program 5 (id=1241): r0 = msgget$private(0x0, 0x10) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgsnd(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='H'], 0x4, 0x800) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000}, 0x0, 0x0, 0x80000001, 0x9, 0x8, 0x400, 0x80, 0x7, 0xc1c, 0x1, 0xffffffffffffffff}) msgrcv(r0, &(0x7f0000000780)={0x0, ""/4096}, 0x1008, 0x3, 0x3800) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a00000000000061117800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0xd, 0x0, @val=@netfilter={0x7, 0x1, 0x5}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.61781666s ago: executing program 6 (id=1242): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7.199791325s ago: executing program 5 (id=1243): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.388474777s ago: executing program 7 (id=1244): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) read$alg(r3, &(0x7f00000012c0)=""/4109, 0x100d) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4008660000008ec30d1dd1b9c3fa00863f3e7e785c0c41f5ab0e2ddc8a810e62bd5ac4b53e5a4fab1e90f8b783de159901b8a8e85d65281775ca131e757151ff0c26018a016905afee5a9120ab991e3678658ab3c1b41314bc5b5cbd8adeb6c9b5e11fb90acdb96c04ecf91e"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x1, 0x1, 0x6, 0xbe}, 0x20) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="09180000b319d250029e5ada614fb7ff08b310042e69ab3d25a0b5bbea62c37e69bd45f3200701da44e6014509211b84ae28243c774607527a4e6fe1851a542628ece63c49a6", @ANYRES16=r7, @ANYBLOB="bb242abd7000ffdbdf256800000008000300", @ANYRES32=r8, @ANYBLOB="0c009900000000000a000000"], 0x28}, 0x1, 0x0, 0x0, 0x404c045}, 0x8841) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x20, 0x8, 0x67, {0x67, 0x10, "8fa242ea1d011d589a87fbfa4c6343b7755eca2acaf1f8cae3c8221c75b56d607b87502a10c444d294d20892632f848fe507d9ef89845e2e41f941b425596029b31e172d33504c70e02afa07b5e44b90e2d9aa99ec18c8852b8a1c4e5b3e65fcd374f12056"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x0, 0x17, 0x46, "5ad8fb4dc8e978c82260128526b4d4ae83c466db2c23c907b032b942c90de60e33ba69d76a3d1dfa43cd863582f67afd83d09496db07e8f56ef00f94ed78f4d8ccc7b5c7d2a1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000800)=ANY=[@ANYBLOB="240008070001008f1bf69214984ad4fd0d2e98e22d2fce0c47353780336a1124f8ec9775a2a81395b4fcc64624f7cb3ecd98189289fc83cb3141cba2a500b99225036c4543c92577b9fbc45a372c9bcb854257c743f822fb512cde52e63ced25d26e3ca250beecf46bcf76c0e609a09f3982c1198df541c4d8d71dc75f621fd8f2d82bf2396582b11e72a195da8fe9d398d539fdd2877978ff8560029043dc7050d733ea735ee271fbb6bc57236e1fef1abec5ae2983a37a5327fd17c488f2db8524d083393eee83a68f4863c9540500"/221], &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x86}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xb}}) r9 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) readv(r9, &(0x7f0000002680)=[{&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000740)=""/101, 0x65}], 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$tun(r5, &(0x7f0000000480)={@void, @void, @ipv6=@generic={0x8, 0x6, "057c26", 0x288, 0x29, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x11, 0x6, 0x4, 0x3, 0x0, 0x0, 0x1, [@ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @local]}, @hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}, @fragment={0x3b, 0x0, 0xeb, 0x1, 0x0, 0x1f, 0x67}, @srh={0x8, 0x10, 0x4, 0x8, 0x3, 0x20, 0xfff, [@dev={0xfe, 0x80, '\x00', 0x18}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0xea, 0x6, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @empty}]}, @srh={0x3b, 0xe, 0x4, 0x7, 0xf, 0x40, 0xbb4b, [@local, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @local, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}]}, @routing={0x84, 0xa, 0x1, 0x5d, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x3a, 0x2, 0x4, 0x1, 0x9, 0x8, 0xd, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "d76d60679794cff0d2f562bd98c2da3bf574f35436642fa3e8d8bb9c21db33b75d1ee60b54e41730c7c0cc4f3311ee8d20bebdb462602f10987858ec0e862d4c1a1d4d4c20d79a7de9a93f067c8522ffa98753b839c1860b8446861e1f9c70df60258e1b788b15ac0fb65b3e2cb91456047fbc796fa09317b7750f70c1fdc16772b0478d9baf4f023bb381fb2be43cdd"}}}, 0x2b0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000002300)={0x44, &(0x7f00000020c0)=ANY=[@ANYBLOB="000e00756eb6"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20830100000065ea4f60dcd926d8b3a5ace2287d99229e05d947aabb096d6f763e068d13a889c4858d02d65d74e7d1ccd05143bcf39561e890a117435a0ac6462578875b"], 0x0, 0x0}) 6.284469163s ago: executing program 8 (id=1245): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 6.278666896s ago: executing program 9 (id=1246): r0 = syz_open_dev$vim2m(0x0, 0x92c0, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04fd0102"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r2, &(0x7f0000000000)='\x00', 0xa0080, &(0x7f0000000080)={@_ha_fsid={[0x1, 0x6]}, {0x3, 0x32b8, 0x4f7, 0x3}}, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x97}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 6.172716131s ago: executing program 6 (id=1247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) r7 = dup3(r6, r5, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r7, 0x7ac, &(0x7f0000002900)={0x0, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x20000001, 0x5, 0x4}, 0x1, r10}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x5c1, 0xfffffffe, 0xa, 0x10000, r11, 0x1ff, '\x00', r10, r7, 0x10, 0x1, 0x4, 0x0, @void, @value, @value=r11}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r12, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r12, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}, 0x2000000}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/100, 0x64}, {&(0x7f0000001bc0)=""/169, 0xa9}, {&(0x7f0000001c80)=""/176, 0xb0}], 0x9, &(0x7f0000001e00)=""/164, 0xa4}, 0x4}], 0x2, 0x4002, 0x0) 5.477355091s ago: executing program 8 (id=1248): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7", 0x12, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442da", 0x3a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.555710991s ago: executing program 9 (id=1249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r2, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) r3 = socket(0x1e, 0x4, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) symlink(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000104000000000000", @ANYRES32, @ANYBLOB="000700200000000000a0aaa7e12416f09eafa74a855e5add6177cdcf88dc9b36fbcdbedb4783729237e25743a490160257e591dfd2ab1af3ae524e6d1cedadc22c814fb850a44cf6215c404e2e33483a70f100556e79859434fc8975af42f194a966105ac225ef413a13e7097b18772e6d52852bf65ffed8d74722976f8a4c483cb315f05f5d3d12799ef786d50abb66f6898c9a2e4020ecca50c7473b0ea6d5482031669e5e1c2d17b132e485000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x10000, 0x59, &(0x7f0000000340)=""/89, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x1, 0xe, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6], &(0x7f0000000640)=[{0x5, 0x5, 0xf, 0x3}, {0x4, 0x4, 0x3, 0xc}, {0x2, 0x5, 0xb, 0xc}, {0x1, 0x1, 0x5, 0x7}, {0x3, 0x3, 0x0, 0xa}, {0x0, 0xb8, 0x3, 0x8}, {0x0, 0x4, 0x4, 0xc}], 0x10, 0x4}, 0x94) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r7, &(0x7f0000019480)=""/102384, 0x18ff0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 4.429166198s ago: executing program 6 (id=1250): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x2, "aaaf"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000d00020073797a32000000001c000480180001800e000100627974656f7264657200000004000280140000000000000000000000000aacd622"], 0x70}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.297822857s ago: executing program 5 (id=1251): r0 = socket$inet6(0xa, 0x3, 0x27) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x707fffc, @mcast1, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0d3740ab9b595588bfb6512e7dbeda397e843d671d785aff40155dc98db80d31dcc7dd703a83d58f49333ec19f911f5a15527a1209ecd321bef1e436b506c657a48037d2ff9e81ff9f86f87e665d9b9b441fc49be870332099ab4599c2f15176e47199dbfa5d0e1d75486cc407399fa823e7a49541c6b0428cef064b0250e2c0d9c88fbe0506dd2ffd932e46dd0eaf3df8ff8463fc033b262a22c3515a73df210c8bd44f121acbd4f5b1dd17ea40213210295d62240ad4dcf97be77d91d2e846bab6d45606fbebaca043e9b2dcd3538eb871e864985869f8bbe4c3e6972e92b86f26caba0c0e37a56e34875be86d6c2a695819a0cab0dff6", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYBLOB="bf3ec696d3903d3e5bd70b217c1a531b2cf08abfa9d7605b4c3ac5d2563173c5a9908a6c8b9ce62554b2dd05811d9100fc3d64d6be24d862c1209f1869078a0e5727b7245aa9fee3adbd0dc8bb5ae87145e4f19365703b6e7f6b3749d459c3004fa5fd391d648e", @ANYRES16, @ANYBLOB="bc16ea2478784d536b80bd963bbf1bd37c43f8007b1ebec8bbea208a3c4c8270d68d2c598ec403366d784195ab8a28267dc0cf5f319d9aee20fcc491e7e0258dff687164b39ed8aec810176f18babb90315ae5778684e34e6a1b"], 0x28}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="803df15ccdbb078303a2252ccac8f2382657a97c739f4e10e97b344d17271a6876514536781fc6510715f84341257fb5bf159ff4fdd1ffb3c1faca42ead1b8fd26e62968501ed8dcdc468e5749af43a843c7f78bd5d102d9d29d07d701c293367d4b23fa2da4a0cb8252219f7458c34bf8e1556a47a7a24d0173ea0f761c4152ece3c244db2dee995e6d7902b6df90cc503c2505f486c41a5bc82b6c511143c1ef9bc767e7f64978b44f3689bd4253298c286da39eb5cf810600649ca71c6500a619a0a1b380b199f0b5bcdcee24ccebf495b39261c5cefaa2a1abae5c1f8da35b5eb4d6f22d60dca4eec219e0", 0xed}, {&(0x7f0000000780)="4aafaa746c599ba3ebb7dbffffb225568e5d68a14c0eae7292e81e3e7b4a90d4934b01df1ae76be79eb87c003dbef4953896f69658661fe757f102143d134262faed934b66aa95b69b900fbfc3db3d73bd0fc91b7803098abeede00faaff46d372685fca44e496bb5731b0fafd4710c8fb8ec7d1305630118284ce089db75cdefb973342c44146df04a1bbe45d0877c081e5531712d3b178bd9a5fd819b6355fc0fb4b6ed6d317a0c2457bbac6f2ea0eee824ff6b8295b2903ce3a", 0xbb}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="6000000000000000160100000500000046e842d0b6954b71726449560427c48bffe6d8c73f6ac72f42a9be537a844f41fa3de5f98d2a04223ae36fc3a2d29082950e3f60e6440dc31cc016e6750cfde975fb23bedd8ad0d525af5bdafaceeca0"], 0x60}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000a40)="72138347833eb8a0c3ca344f9d998f", 0xf}, {&(0x7f0000000fc0)="059c", 0x2}], 0x2, &(0x7f0000003940)=ANY=[@ANYBLOB="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"], 0x13a8}}], 0x3, 0x4000000) 3.467708203s ago: executing program 9 (id=1252): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) close(0x3) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_VMA(0x49, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000000c0)={0x7, 0x0, '\x00', {0x0, @bt={0x600, 0xffff, 0x0, 0x1, 0x101, 0x5, 0x40, 0xafa4, 0x3, 0x8, 0x4, 0x6, 0x8, 0x1, 0x8, 0xc, {0x3, 0x57234d32}, 0x4, 0xf3}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090) r8 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)=',\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000000)={0x1, 0x8000, 0x4, 0x0, 0x1}) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) 3.359389063s ago: executing program 5 (id=1253): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000080), 0x1000002, 0x60103) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) fanotify_mark(r3, 0x105, 0x10000839, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) fanotify_init(0x8, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0xd8) r4 = fanotify_init(0x2, 0x800) fanotify_mark(r4, 0x105, 0x40001031, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.020257888s ago: executing program 8 (id=1254): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="980500002c0007012bbd7000ffdbdf25087c0000180001801400dd8008004700ac1414bb0800da"], 0x598}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.908265628s ago: executing program 7 (id=1255): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) (fail_nth: 1) 2.825266351s ago: executing program 5 (id=1256): timer_create(0x0, &(0x7f0000001040)={0x0, 0x21}, &(0x7f0000001080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002440)={0x0, 0x4, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002840)={0x0, 0x3, {0x5a3dee97, @usage=0xfff, 0x0, 0x6, 0x8, 0x100000000, 0xb6e, 0x8000000000000000, 0x2, @struct={0x4, 0x8}, 0x5, 0x1f5, [0x9, 0xa, 0x8, 0x0, 0x6]}, {0x1, @usage=0x7, 0x0, 0x100000000, 0x101, 0x8, 0x1959, 0xb, 0x80, @struct={0x4, 0x1}, 0x0, 0x4, [0x15b, 0x10000, 0x23, 0x55a, 0xbd4, 0x3]}, {0x50, @usage=0x8, 0x0, 0x3, 0xfd13, 0x1000000000000, 0x6, 0x7, 0x1, @usage=0x10, 0x1, 0x2, [0x5, 0xff, 0x6, 0x1, 0x6, 0x10001]}, {0x0, 0x8, 0x5}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002c40)={0x11, 0x2, {0x4ef74b99, @usage=0x9, 0x0, 0x5b34, 0x4, 0x9, 0x6, 0x1, 0x0, @struct={0x400, 0x101}, 0x6, 0x300000, [0x9, 0x2, 0x5, 0x5, 0x8, 0x7fffffff]}, {0x7, @struct={0x32, 0x4}, r0, 0xc3, 0xe, 0x7, 0x7, 0x2, 0x50, @usage=0x9, 0xf0b, 0x81, [0x7, 0x10001, 0x4, 0x80, 0x5, 0x9]}, {0x98, @struct={0x4, 0xd}, r1, 0x8000000000000000, 0x5, 0x8, 0x8000000000000000, 0x8, 0x10, @usage=0x10, 0x8, 0x80000001, [0xffffffff80000001, 0x2, 0x6, 0xcda, 0x0, 0xf]}, {0xe8b, 0x80000001, 0x3}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r2) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003040)=ANY=[@ANYBLOB="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"/270, @ANYRES16=0x0, @ANYBLOB="02002bbd7000fddbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000"], 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0xb}, 0xffffffe2) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00cba6fad8b438b14a", @ANYRES16=r6, @ANYBLOB="08002dbd7000fddbdf255c00000008006b006e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) write(r8, &(0x7f0000000000)='\"', 0x1) sendto$inet6(r4, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) 2.450921689s ago: executing program 7 (id=1257): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.52711374s ago: executing program 8 (id=1258): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r4, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0x3c0, 0x10, 0x2, 0x240004, 0x14000000, 0x3cffd, 0xfffffffc, 0x2f00, 0x3, 0xd, 0x3, 0x10000, 0x400, 0xfb, 0x13, 0x100, 0xffffffa3, 0x5, 0x34b, 0x1, 0x3ff, 0x9, 0x8f, 0x10000be, 0xaa14, 0xfffffffe, 0x8, 0x8000000, 0x7, 0x3, 0xb0f]}) pivot_root(0x0, &(0x7f0000000280)='./file0/file0\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.254541472s ago: executing program 5 (id=1259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xb, "0476bc4b4c9e3e260c"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) 1.181758251s ago: executing program 7 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) r7 = dup3(r6, r5, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r7, 0x7ac, &(0x7f0000002900)={0x0, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x20000001, 0x5, 0x4}, 0x1, r10}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x5c1, 0xfffffffe, 0xa, 0x10000, r11, 0x1ff, '\x00', r10, r7, 0x10, 0x1, 0x4, 0x0, @void, @value, @value=r11}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r12, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r12, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}, 0x2000000}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/100, 0x64}, {&(0x7f0000001bc0)=""/169, 0xa9}, {&(0x7f0000001c80)=""/176, 0xb0}], 0x9, &(0x7f0000001e00)=""/164, 0xa4}, 0x4}], 0x2, 0x4002, 0x0) 298.415252ms ago: executing program 8 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f000099c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r4, 0x5efaa000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800002, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0) 0s ago: executing program 9 (id=1262): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x38}}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x5c, 0x30, 0xb, 0x2, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) kernel console output (not intermixed with test programs): te type 1 has an invalid length. [ 409.561778][ T4924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.611442][ T4924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.614284][ T4924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.621784][ T4924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.644082][ T4924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.726005][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.726361][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.726849][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.727851][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.728683][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 410.380792][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.399692][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.869038][ T5609] Bluetooth: hci5: command tx timeout [ 413.468578][ T5724] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 413.613847][ T9188] bond1: option mode: unable to set because the bond device has slaves [ 413.621066][ T5724] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.621094][ T5724] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.621140][ T5724] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.621160][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.881883][ T5724] usb 5-1: usb_control_msg returned -32 [ 413.881928][ T5724] usbtmc 5-1:16.0: can't read capabilities [ 413.948593][ T5609] Bluetooth: hci5: command tx timeout [ 414.126423][ T9195] sctp: [Deprecated]: syz.0.918 (pid 9195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.126423][ T9195] Use struct sctp_sack_info instead [ 414.569132][ T5618] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 414.697120][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.697285][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.697449][ T9164] bridge_slave_0: entered allmulticast mode [ 414.700040][ T9164] bridge_slave_0: entered promiscuous mode [ 414.703145][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.703340][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.703496][ T9164] bridge_slave_1: entered allmulticast mode [ 414.705953][ T9164] bridge_slave_1: entered promiscuous mode [ 414.778609][ T5618] usb 3-1: Using ep0 maxpacket: 8 [ 414.782569][ T5618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 414.782594][ T5618] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 414.787667][ T5618] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 414.787692][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.787709][ T5618] usb 3-1: Product: syz [ 414.787722][ T5618] usb 3-1: Manufacturer: syz [ 414.787734][ T5618] usb 3-1: SerialNumber: syz [ 414.860345][ T5618] usb 3-1: config 0 descriptor?? [ 414.875640][ T9164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.900518][ T9164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.007616][ T9164] team0: Port device team_slave_0 added [ 415.031675][ T9164] team0: Port device team_slave_1 added [ 415.257856][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.257893][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.257917][ T9164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.309007][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.309022][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.309046][ T9164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.433015][ T9164] hsr_slave_0: entered promiscuous mode [ 415.434567][ T9164] hsr_slave_1: entered promiscuous mode [ 415.435510][ T9164] debugfs: 'hsr0' already exists in 'hsr' [ 415.435534][ T9164] Cannot create hsr debugfs directory [ 416.326095][ T5609] Bluetooth: hci5: command tx timeout [ 416.415838][ T5725] usb 5-1: USB disconnect, device number 22 [ 417.058163][ T9216] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 417.720336][ T5725] usb 3-1: USB disconnect, device number 31 [ 418.333911][ T9164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.348586][ T5609] Bluetooth: hci5: command tx timeout [ 418.424761][ T9164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.427214][ T9164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.522124][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 418.601662][ T9164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.602531][ T9164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.657842][ T9164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.666597][ T9164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 418.702855][ T9164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.308692][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.418853][ T9164] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.474269][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.476043][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.505538][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.505691][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.068596][ T5818] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 420.194275][ T9240] FAULT_INJECTION: forcing a failure. [ 420.194275][ T9240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.194310][ T9240] CPU: 1 UID: 0 PID: 9240 Comm: syz.0.926 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.194330][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.194340][ T9240] Call Trace: [ 420.194347][ T9240] [ 420.194353][ T9240] dump_stack_lvl+0xe8/0x150 [ 420.194378][ T9240] should_fail_ex+0x46b/0x600 [ 420.194406][ T9240] _copy_from_user+0x2d/0xb0 [ 420.194425][ T9240] __sys_bpf+0x229/0x950 [ 420.194550][ T9240] ? __pfx___sys_bpf+0x10/0x10 [ 420.194567][ T9240] ? rt_mutex_slowunlock+0x1cb/0x300 [ 420.194602][ T9240] ? ksys_write+0x248/0x270 [ 420.194624][ T9240] ? __pfx_ksys_write+0x10/0x10 [ 420.194648][ T9240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.194666][ T9240] __x64_sys_bpf+0x7c/0x90 [ 420.194686][ T9240] do_syscall_64+0x174/0x580 [ 420.194708][ T9240] ? trace_irq_disable+0x3b/0x140 [ 420.194726][ T9240] ? clear_bhb_loop+0x40/0x90 [ 420.194745][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.194763][ T9240] RIP: 0033:0x7f28373fce59 [ 420.194780][ T9240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.194794][ T9240] RSP: 002b:00007f283564e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.194813][ T9240] RAX: ffffffffffffffda RBX: 00007f2837675fa0 RCX: 00007f28373fce59 [ 420.194825][ T9240] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 420.194836][ T9240] RBP: 00007f283564e090 R08: 0000000000000000 R09: 0000000000000000 [ 420.194846][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.194857][ T9240] R13: 00007f2837676038 R14: 00007f2837675fa0 R15: 00007ffd436344a8 [ 420.194885][ T9240] [ 420.857200][ T4924] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 420.932509][ T4924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 420.935349][ T4924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 420.936333][ T4924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 420.937016][ T4924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.230474][ T9250] bond1: option mode: unable to set because the bond device has slaves [ 421.454380][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 421.454397][ T37] audit: type=1326 audit(1780856977.894:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.454655][ T37] audit: type=1326 audit(1780856977.894:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.454897][ T37] audit: type=1326 audit(1780856977.894:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.456950][ T37] audit: type=1326 audit(1780856977.894:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.456993][ T37] audit: type=1326 audit(1780856977.894:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.457031][ T37] audit: type=1326 audit(1780856977.894:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.488632][ T37] audit: type=1326 audit(1780856977.924:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.488680][ T37] audit: type=1326 audit(1780856977.924:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.488717][ T37] audit: type=1326 audit(1780856977.924:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 421.488755][ T37] audit: type=1326 audit(1780856977.924:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9254 comm="syz.2.930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 422.072706][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.184464][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.185058][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.252922][ T4924] Bluetooth: hci6: command tx timeout [ 423.837088][ T9282] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 424.958397][ T9287] FAULT_INJECTION: forcing a failure. [ 424.958397][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 424.958432][ T9287] CPU: 1 UID: 0 PID: 9287 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 424.958450][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.958460][ T9287] Call Trace: [ 424.958467][ T9287] [ 424.958475][ T9287] dump_stack_lvl+0xe8/0x150 [ 424.958501][ T9287] should_fail_ex+0x46b/0x600 [ 424.958531][ T9287] should_failslab+0xa8/0x100 [ 424.958555][ T9287] __kmalloc_noprof+0xdf/0x7b0 [ 424.958573][ T9287] ? kfree+0x4d/0x6c0 [ 424.958590][ T9287] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 424.958615][ T9287] tomoyo_realpath_from_path+0xe3/0x5d0 [ 424.958636][ T9287] ? tomoyo_domain+0xd7/0x130 [ 424.958661][ T9287] ? tomoyo_path_number_perm+0x219/0x630 [ 424.958685][ T9287] tomoyo_path_number_perm+0x246/0x630 [ 424.958718][ T9287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.958740][ T9287] ? __lock_acquire+0x6b5/0x2cf0 [ 424.958765][ T9287] ? do_raw_spin_lock+0x12b/0x2f0 [ 424.958812][ T9287] ? __fget_files+0x2a/0x420 [ 424.958832][ T9287] ? __fget_files+0x2a/0x420 [ 424.958847][ T9287] ? __fget_files+0x3a6/0x420 [ 424.958862][ T9287] ? __fget_files+0x2a/0x420 [ 424.958887][ T9287] security_file_ioctl+0xc3/0x2a0 [ 424.958915][ T9287] __se_sys_ioctl+0x47/0x170 [ 424.958934][ T9287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.958954][ T9287] do_syscall_64+0x174/0x580 [ 424.958976][ T9287] ? trace_irq_disable+0x3b/0x140 [ 424.958996][ T9287] ? clear_bhb_loop+0x40/0x90 [ 424.959015][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.959033][ T9287] RIP: 0033:0x7f82e546ce59 [ 424.959049][ T9287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.959063][ T9287] RSP: 002b:00007f82e36be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.959083][ T9287] RAX: ffffffffffffffda RBX: 00007f82e56e5fa0 RCX: 00007f82e546ce59 [ 424.959095][ T9287] RDX: 0000200000000ac0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 424.959105][ T9287] RBP: 00007f82e36be090 R08: 0000000000000000 R09: 0000000000000000 [ 424.959115][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.959125][ T9287] R13: 00007f82e56e6038 R14: 00007f82e56e5fa0 R15: 00007fff18ea9678 [ 424.959151][ T9287] [ 424.993027][ T9287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.309140][ T4924] Bluetooth: hci6: command tx timeout [ 425.334370][ T9164] veth0_vlan: entered promiscuous mode [ 425.451161][ T9164] veth1_vlan: entered promiscuous mode [ 425.520684][ T9164] veth0_macvtap: entered promiscuous mode [ 425.576203][ T9164] veth1_macvtap: entered promiscuous mode [ 425.698274][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.922406][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.227610][ T3574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.266224][ T183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.626103][ T183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.096675][ T183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.185341][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.185698][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.185924][ T9242] bridge_slave_0: entered allmulticast mode [ 427.190774][ T9242] bridge_slave_0: entered promiscuous mode [ 427.238786][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.238896][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.239108][ T9242] bridge_slave_1: entered allmulticast mode [ 427.246256][ T9242] bridge_slave_1: entered promiscuous mode [ 427.398582][ T4924] Bluetooth: hci6: command tx timeout [ 427.781564][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.904360][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.298557][ T9300] FAULT_INJECTION: forcing a failure. [ 428.298557][ T9300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.298588][ T9300] CPU: 0 UID: 0 PID: 9300 Comm: syz.2.938 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 428.298609][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.298620][ T9300] Call Trace: [ 428.298632][ T9300] [ 428.298644][ T9300] dump_stack_lvl+0xe8/0x150 [ 428.298663][ T9300] should_fail_ex+0x46b/0x600 [ 428.298681][ T9300] _copy_to_user+0x31/0xb0 [ 428.298692][ T9300] simple_read_from_buffer+0xe1/0x170 [ 428.298711][ T9300] proc_fail_nth_read+0x1be/0x230 [ 428.298724][ T9300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.298736][ T9300] ? rw_verify_area+0x2ac/0x4e0 [ 428.298747][ T9300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.298757][ T9300] vfs_read+0x212/0xa80 [ 428.298772][ T9300] ? __pfx_vfs_read+0x10/0x10 [ 428.298784][ T9300] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.298807][ T9300] ? lockdep_hardirqs_on+0x7a/0x110 [ 428.298831][ T9300] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 428.298854][ T9300] ? mutex_lock_nested+0x152/0x1d0 [ 428.298871][ T9300] ? fdget_pos+0x252/0x320 [ 428.298895][ T9300] ksys_read+0x156/0x270 [ 428.298918][ T9300] ? __pfx_ksys_read+0x10/0x10 [ 428.298935][ T9300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.298946][ T9300] do_syscall_64+0x174/0x580 [ 428.298959][ T9300] ? trace_irq_disable+0x3b/0x140 [ 428.298978][ T9300] ? clear_bhb_loop+0x40/0x90 [ 428.298989][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.298999][ T9300] RIP: 0033:0x7f232e5cd68e [ 428.299009][ T9300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.299018][ T9300] RSP: 002b:00007f232c83cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.299029][ T9300] RAX: ffffffffffffffda RBX: 00007f232c83d6c0 RCX: 00007f232e5cd68e [ 428.299036][ T9300] RDX: 000000000000000f RSI: 00007f232c83d0a0 RDI: 0000000000000005 [ 428.299042][ T9300] RBP: 00007f232c83d090 R08: 0000000000000000 R09: 0000000000000000 [ 428.299048][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.299054][ T9300] R13: 00007f232e886128 R14: 00007f232e886090 R15: 00007ffe32a1d348 [ 428.299069][ T9300] [ 428.728039][ T9242] team0: Port device team_slave_0 added [ 428.746554][ T9242] team0: Port device team_slave_1 added [ 429.291155][ T9324] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 430.585575][ T4924] Bluetooth: hci6: command tx timeout [ 430.681807][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.681824][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.681849][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.688324][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.688338][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.688361][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.688661][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.688675][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.007205][ T9330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.944'. [ 431.007225][ T9330] openvswitch: netlink: Flow key attr not present in new flow. [ 431.133284][ T9242] hsr_slave_0: entered promiscuous mode [ 431.134545][ T9242] hsr_slave_1: entered promiscuous mode [ 431.135403][ T9242] debugfs: 'hsr0' already exists in 'hsr' [ 431.135424][ T9242] Cannot create hsr debugfs directory [ 431.174757][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.174778][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.288783][ T9362] 9p: Bad value for 'rfdno' [ 433.416183][ T9366] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 434.454773][ T9242] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 434.546963][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.557171][ T9242] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.630007][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.634365][ T9242] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 434.908385][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.911377][ T9242] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 435.787832][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 435.809144][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.857073][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 435.912151][ T9384] FAULT_INJECTION: forcing a failure. [ 435.912151][ T9384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.912182][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.4.957 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 435.912201][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.912211][ T9384] Call Trace: [ 435.912221][ T9384] [ 435.912228][ T9384] dump_stack_lvl+0xe8/0x150 [ 435.912255][ T9384] should_fail_ex+0x46b/0x600 [ 435.912285][ T9384] _copy_to_user+0x31/0xb0 [ 435.912304][ T9384] simple_read_from_buffer+0xe1/0x170 [ 435.912334][ T9384] proc_fail_nth_read+0x1be/0x230 [ 435.912355][ T9384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.912374][ T9384] ? rw_verify_area+0x2ac/0x4e0 [ 435.912392][ T9384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.912410][ T9384] vfs_read+0x212/0xa80 [ 435.912435][ T9384] ? __pfx_vfs_read+0x10/0x10 [ 435.912456][ T9384] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 435.912481][ T9384] ? lockdep_hardirqs_on+0x7a/0x110 [ 435.912503][ T9384] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 435.912535][ T9384] ? mutex_lock_nested+0x152/0x1d0 [ 435.912553][ T9384] ? fdget_pos+0x252/0x320 [ 435.912577][ T9384] ksys_read+0x156/0x270 [ 435.912598][ T9384] ? __pfx_ksys_read+0x10/0x10 [ 435.912615][ T9384] ? rt_spin_unlock+0x160/0x200 [ 435.912639][ T9384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.912657][ T9384] do_syscall_64+0x174/0x580 [ 435.912679][ T9384] ? trace_irq_disable+0x3b/0x140 [ 435.912699][ T9384] ? clear_bhb_loop+0x40/0x90 [ 435.912720][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.912737][ T9384] RIP: 0033:0x7f82e542d68e [ 435.912762][ T9384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.912777][ T9384] RSP: 002b:00007f82e369cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.912798][ T9384] RAX: ffffffffffffffda RBX: 00007f82e369d6c0 RCX: 00007f82e542d68e [ 435.912811][ T9384] RDX: 000000000000000f RSI: 00007f82e369d0a0 RDI: 0000000000000005 [ 435.912823][ T9384] RBP: 00007f82e369d090 R08: 0000000000000000 R09: 0000000000000000 [ 435.912834][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.912845][ T9384] R13: 00007f82e56e6128 R14: 00007f82e56e6090 R15: 00007fff18ea9678 [ 435.912873][ T9384] [ 436.508003][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.519421][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.765506][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.766257][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.776166][ T9398] /dev/nullb0: Can't open blockdev [ 436.885534][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.934793][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.961691][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.963027][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.992912][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.993111][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.479181][ T9409] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 438.590861][ T9420] 9p: Bad value for 'rfdno' [ 439.098590][ T5739] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 439.166698][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 439.166704][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 439.260775][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 439.262860][ T5739] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 439.262881][ T5739] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.262899][ T5739] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.267397][ T5739] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.267422][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.267439][ T5739] usb 6-1: Product: syz [ 439.267452][ T5739] usb 6-1: Manufacturer: syz [ 439.267465][ T5739] usb 6-1: SerialNumber: syz [ 439.361063][ T9432] netlink: 444 bytes leftover after parsing attributes in process `syz.0.968'. [ 439.418097][ T5739] usb 6-1: 0:2 : does not exist [ 439.940336][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.992356][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.996783][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.033898][ T36] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 440.064923][ T9418] FAULT_INJECTION: forcing a failure. [ 440.064923][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 440.064953][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.2.966 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.064973][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.064984][ T9418] Call Trace: [ 440.064991][ T9418] [ 440.064998][ T9418] dump_stack_lvl+0xe8/0x150 [ 440.065027][ T9418] should_fail_ex+0x46b/0x600 [ 440.065057][ T9418] should_failslab+0xa8/0x100 [ 440.065088][ T9418] __kmalloc_noprof+0xdf/0x7b0 [ 440.065107][ T9418] ? kfree+0x4d/0x6c0 [ 440.065123][ T9418] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 440.065150][ T9418] tomoyo_realpath_from_path+0xe3/0x5d0 [ 440.065172][ T9418] ? tomoyo_domain+0xd7/0x130 [ 440.065197][ T9418] ? tomoyo_path_number_perm+0x219/0x630 [ 440.065223][ T9418] tomoyo_path_number_perm+0x246/0x630 [ 440.065250][ T9418] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 440.065274][ T9418] ? __lock_acquire+0x6b5/0x2cf0 [ 440.065300][ T9418] ? do_raw_spin_lock+0x12b/0x2f0 [ 440.065351][ T9418] ? __fget_files+0x2a/0x420 [ 440.065371][ T9418] ? __fget_files+0x2a/0x420 [ 440.065387][ T9418] ? __fget_files+0x3a6/0x420 [ 440.065403][ T9418] ? __fget_files+0x2a/0x420 [ 440.065424][ T9418] security_file_ioctl+0xc3/0x2a0 [ 440.065453][ T9418] __se_sys_ioctl+0x47/0x170 [ 440.065474][ T9418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.065493][ T9418] do_syscall_64+0x174/0x580 [ 440.065518][ T9418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.065536][ T9418] ? clear_bhb_loop+0x40/0x90 [ 440.065558][ T9418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.065575][ T9418] RIP: 0033:0x7f232e60ce59 [ 440.065591][ T9418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.065605][ T9418] RSP: 002b:00007f232c85e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.065624][ T9418] RAX: ffffffffffffffda RBX: 00007f232e885fa0 RCX: 00007f232e60ce59 [ 440.065637][ T9418] RDX: 0000200000000000 RSI: 0000000080044801 RDI: 000000000000000c [ 440.065649][ T9418] RBP: 00007f232c85e090 R08: 0000000000000000 R09: 0000000000000000 [ 440.065660][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.065670][ T9418] R13: 00007f232e886038 R14: 00007f232e885fa0 R15: 00007ffe32a1d348 [ 440.065700][ T9418] [ 440.068607][ T9418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 440.465868][ T9443] fido_id[9443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 440.576344][ T5739] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 440.608700][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.608752][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.744210][ T9446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.969'. [ 441.242448][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.630393][ T5739] usb 6-1: USB disconnect, device number 2 [ 442.297223][ T9242] veth0_vlan: entered promiscuous mode [ 442.342066][ T9242] veth1_vlan: entered promiscuous mode [ 442.435138][ T9458] FAULT_INJECTION: forcing a failure. [ 442.435138][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 442.435169][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.435190][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.435201][ T9458] Call Trace: [ 442.435208][ T9458] [ 442.435215][ T9458] dump_stack_lvl+0xe8/0x150 [ 442.435241][ T9458] should_fail_ex+0x46b/0x600 [ 442.435271][ T9458] should_failslab+0xa8/0x100 [ 442.435294][ T9458] __kmalloc_noprof+0xdf/0x7b0 [ 442.435313][ T9458] ? kfree+0x4d/0x6c0 [ 442.435329][ T9458] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.435358][ T9458] tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.435380][ T9458] ? tomoyo_domain+0xd7/0x130 [ 442.435404][ T9458] ? tomoyo_path_number_perm+0x219/0x630 [ 442.435428][ T9458] tomoyo_path_number_perm+0x246/0x630 [ 442.435453][ T9458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 442.435476][ T9458] ? __lock_acquire+0x6b5/0x2cf0 [ 442.435498][ T9458] ? do_raw_spin_lock+0x12b/0x2f0 [ 442.435547][ T9458] ? __fget_files+0x2a/0x420 [ 442.435567][ T9458] ? __fget_files+0x2a/0x420 [ 442.435582][ T9458] ? __fget_files+0x3a6/0x420 [ 442.435598][ T9458] ? __fget_files+0x2a/0x420 [ 442.435619][ T9458] security_file_ioctl+0xc3/0x2a0 [ 442.435647][ T9458] __se_sys_ioctl+0x47/0x170 [ 442.435668][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.435688][ T9458] do_syscall_64+0x174/0x580 [ 442.435712][ T9458] ? trace_irq_disable+0x3b/0x140 [ 442.435732][ T9458] ? clear_bhb_loop+0x40/0x90 [ 442.435753][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.435770][ T9458] RIP: 0033:0x7f82e546ce59 [ 442.435787][ T9458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.435801][ T9458] RSP: 002b:00007f82e36be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.435820][ T9458] RAX: ffffffffffffffda RBX: 00007f82e56e5fa0 RCX: 00007f82e546ce59 [ 442.435834][ T9458] RDX: 0000000000000000 RSI: 00000000c0109207 RDI: 0000000000000004 [ 442.435844][ T9458] RBP: 00007f82e36be090 R08: 0000000000000000 R09: 0000000000000000 [ 442.435855][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.435865][ T9458] R13: 00007f82e56e6038 R14: 00007f82e56e5fa0 R15: 00007fff18ea9678 [ 442.435902][ T9458] [ 442.451363][ T9458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 442.533248][ T9242] veth0_macvtap: entered promiscuous mode [ 442.578593][ T5739] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 442.673790][ T9242] veth1_macvtap: entered promiscuous mode [ 442.755550][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.758680][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 442.759615][ T5739] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 442.802602][ T5739] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 442.802629][ T5739] usb 6-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 442.802646][ T5739] usb 6-1: Product: syz [ 442.802658][ T5739] usb 6-1: Manufacturer: syz [ 442.815787][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.861457][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.861705][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.861740][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.861771][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.933825][ T5739] r8152-cfgselector 6-1: Unknown version 0x0000 [ 442.933856][ T5739] r8152-cfgselector 6-1: config 0 descriptor?? [ 443.083691][ T9464] program syz.4.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.320726][ T5740] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 445.926278][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.926298][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.275750][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 446.275765][ T37] audit: type=1326 audit(1780857002.714:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.275806][ T37] audit: type=1326 audit(1780857002.714:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.275844][ T37] audit: type=1326 audit(1780857002.714:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.286949][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.286967][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.310771][ T37] audit: type=1326 audit(1780857002.714:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.332231][ T37] audit: type=1326 audit(1780857002.764:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.332280][ T37] audit: type=1326 audit(1780857002.774:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.332317][ T37] audit: type=1326 audit(1780857002.774:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.434968][ T37] audit: type=1326 audit(1780857002.874:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.446032][ T37] audit: type=1326 audit(1780857002.884:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 446.446077][ T37] audit: type=1326 audit(1780857002.884:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9479 comm="syz.2.977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e60ce59 code=0x7ffc0000 [ 448.952795][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.970953][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.288576][ T5740] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 450.454699][ T5740] usb 3-1: unable to get BOS descriptor or descriptor too short [ 450.455935][ T5740] usb 3-1: config 11 has an invalid interface number: 29 but max is 0 [ 450.455956][ T5740] usb 3-1: config 11 has no interface number 0 [ 450.455998][ T5740] usb 3-1: config 11 interface 29 altsetting 106 endpoint 0xC is Bulk; changing to Interrupt [ 450.456019][ T5740] usb 3-1: config 11 interface 29 has no altsetting 0 [ 450.462238][ T5740] usb 3-1: string descriptor 0 read error: -22 [ 450.462377][ T5740] usb 3-1: New USB device found, idVendor=0482, idProduct=0101, bcdDevice= 1.00 [ 450.462400][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.541011][ T9517] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 450.559446][ T5740] usb-storage 3-1:11.29: USB Mass Storage device detected [ 450.587192][ T9530] autofs: Unknown parameter ''÷­Ò íÒÍ/¿`:JY؜ÕHÏò”{̉²XàtkŸCÚ¤DGÆe]É1Öìì'Åi•†trK&ˆMeQ‘0ñ:çÙn<ìžY¿±' [ 450.605168][ T5740] usb-storage 3-1:11.29: Quirks match for vid 0482 pid 0101: 8 [ 450.678957][ T5739] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 450.784949][ T5740] usb 3-1: USB disconnect, device number 33 [ 450.858530][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 450.862349][ T5739] usb 6-1: config 168 has an invalid interface number: 255 but max is 0 [ 450.862371][ T5739] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 450.862388][ T5739] usb 6-1: config 168 has no interface number 0 [ 450.862416][ T5739] usb 6-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 450.862449][ T5739] usb 6-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 450.862473][ T5739] usb 6-1: config 168 interface 255 has no altsetting 0 [ 450.863516][ T5739] usb 6-1: config 168 has an invalid interface number: 255 but max is 0 [ 450.863536][ T5739] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 450.863554][ T5739] usb 6-1: config 168 has no interface number 0 [ 450.863579][ T5739] usb 6-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 450.863618][ T5739] usb 6-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 450.863643][ T5739] usb 6-1: config 168 interface 255 has no altsetting 0 [ 450.864732][ T5739] usb 6-1: config 168 has an invalid interface number: 255 but max is 0 [ 450.864753][ T5739] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 450.864769][ T5739] usb 6-1: config 168 has no interface number 0 [ 450.864794][ T5739] usb 6-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 450.864828][ T5739] usb 6-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 450.864851][ T5739] usb 6-1: config 168 interface 255 has no altsetting 0 [ 450.870610][ T5739] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 450.870634][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.870651][ T5739] usb 6-1: Product: syz [ 450.870663][ T5739] usb 6-1: Manufacturer: syz [ 450.870675][ T5739] usb 6-1: SerialNumber: syz [ 451.291626][ T5739] adutux 6-1:168.255: interrupt endpoints not found [ 451.421116][ T5739] usb 6-1: USB disconnect, device number 4 [ 451.844747][ T9552] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.727946][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.727987][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728011][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728035][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728067][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728092][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728117][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728139][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728163][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 452.728185][ T9558] futex_wake_op: syz.5.1000 tries to shift op by -1; fix this program [ 454.853853][ T9569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.854467][ T9569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.923825][ T9569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.927149][ T9569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.098948][ T9574] autofs: Unknown parameter ''÷­Ò íÒÍ/¿`:JY؜ÕHÏò”{̉²XàtkŸCÚ¤DGÆe]É1Öìì'Åi•†trK&ˆMeQ‘0ñ:çÙn<ìžY¿±' [ 455.153998][ T37] kauditd_printk_skb: 93 callbacks suppressed [ 455.154015][ T37] audit: type=1326 audit(1780857011.594:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e546ce59 code=0x7ffc0000 [ 455.154566][ T37] audit: type=1326 audit(1780857011.594:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e546ce59 code=0x7ffc0000 [ 455.154999][ T37] audit: type=1326 audit(1780857011.594:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e546ce59 code=0x7ffc0000 [ 455.155039][ T37] audit: type=1326 audit(1780857011.594:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f82e546ce59 code=0x7ffc0000 [ 455.262888][ T37] audit: type=1326 audit(1780857011.704:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e546ce59 code=0x7ffc0000 [ 455.262936][ T37] audit: type=1326 audit(1780857011.704:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82e546cbc2 code=0x7ffc0000 [ 455.262975][ T37] audit: type=1326 audit(1780857011.704:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f82e546cc57 code=0x7ffc0000 [ 455.263541][ T37] audit: type=1326 audit(1780857011.704:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e546ce59 code=0x7ffc0000 [ 455.263585][ T37] audit: type=1326 audit(1780857011.704:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e546ce59 code=0x7ffc0000 [ 455.288836][ T37] audit: type=1326 audit(1780857011.724:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1005" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f82e5429b51 code=0x7ffc0000 [ 458.914682][ T5739] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 459.150983][ T5739] usb 7-1: Using ep0 maxpacket: 8 [ 459.162258][ T5739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 459.162285][ T5739] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 459.167482][ T5739] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 459.167508][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.167526][ T5739] usb 7-1: Product: syz [ 459.167538][ T5739] usb 7-1: Manufacturer: syz [ 459.167551][ T5739] usb 7-1: SerialNumber: syz [ 459.192951][ T5739] usb 7-1: config 0 descriptor?? [ 460.558341][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.563137][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.721427][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 460.721444][ T37] audit: type=1326 audit(1780857017.164:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9619 comm="syz.2.1022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f232e60ce59 code=0x0 [ 460.721965][ T9618] autofs: Unknown parameter ''÷­Ò íÒÍ/¿`:JY؜ÕHÏò”{̉²XàtkŸCÚ¤DGÆe]É1Öìì'Åi•†trK&ˆMeQ‘0ñ:çÙn<ìžY¿±' [ 461.309821][ T5724] usb 7-1: USB disconnect, device number 2 [ 463.400328][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'. [ 463.848112][ T9669] autofs: Unknown parameter ''÷­Ò íÒÍ/¿`:JY؜ÕHÏò”{̉²XàtkŸCÚ¤DGÆe]É1Öìì'Åi•†trK&ˆMeQ‘0ñ:çÙn<ìžY¿±' [ 463.911908][ T37] audit: type=1326 audit(1780857020.354:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.912290][ T37] audit: type=1326 audit(1780857020.354:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.912332][ T37] audit: type=1326 audit(1780857020.354:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.912878][ T37] audit: type=1326 audit(1780857020.354:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.913292][ T37] audit: type=1326 audit(1780857020.354:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.913332][ T37] audit: type=1326 audit(1780857020.354:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.914418][ T37] audit: type=1326 audit(1780857020.354:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.915199][ T37] audit: type=1326 audit(1780857020.354:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 463.915240][ T37] audit: type=1326 audit(1780857020.354:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.0.1037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28373fce59 code=0x7ffc0000 [ 464.328740][ T5739] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 464.518763][ T9680] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1042'. [ 464.528575][ T5739] usb 7-1: Using ep0 maxpacket: 8 [ 464.538182][ T5739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 464.538208][ T5739] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 464.550577][ T5739] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 464.550605][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.550623][ T5739] usb 7-1: Product: syz [ 464.550635][ T5739] usb 7-1: Manufacturer: syz [ 464.550648][ T5739] usb 7-1: SerialNumber: syz [ 464.565132][ T5739] usb 7-1: config 0 descriptor?? [ 464.725901][ T9683] program syz.4.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.066324][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 465.066366][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1045'. [ 465.160905][ T9689] geneve2: entered promiscuous mode [ 465.160932][ T9689] geneve2: entered allmulticast mode [ 465.453054][ T9698] FAULT_INJECTION: forcing a failure. [ 465.453054][ T9698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.453085][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.2.1048 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.453106][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.453117][ T9698] Call Trace: [ 465.453123][ T9698] [ 465.453131][ T9698] dump_stack_lvl+0xe8/0x150 [ 465.453158][ T9698] should_fail_ex+0x46b/0x600 [ 465.453189][ T9698] _copy_from_user+0x2d/0xb0 [ 465.453208][ T9698] tls_setsockopt+0x678/0x15c0 [ 465.453323][ T9698] ? __pfx_tls_setsockopt+0x10/0x10 [ 465.453350][ T9698] ? __fget_files+0x2a/0x420 [ 465.453370][ T9698] ? sock_common_setsockopt+0x36/0xc0 [ 465.453392][ T9698] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 465.453414][ T9698] do_sock_setsockopt+0x17c/0x1b0 [ 465.453440][ T9698] __x64_sys_setsockopt+0x143/0x1b0 [ 465.453464][ T9698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.453483][ T9698] do_syscall_64+0x174/0x580 [ 465.453508][ T9698] ? trace_irq_disable+0x3b/0x140 [ 465.453529][ T9698] ? clear_bhb_loop+0x40/0x90 [ 465.453551][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.453568][ T9698] RIP: 0033:0x7f232e60ce59 [ 465.453585][ T9698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.453599][ T9698] RSP: 002b:00007f232c85e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 465.453619][ T9698] RAX: ffffffffffffffda RBX: 00007f232e885fa0 RCX: 00007f232e60ce59 [ 465.453642][ T9698] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 465.453653][ T9698] RBP: 00007f232c85e090 R08: 0000000000000038 R09: 0000000000000000 [ 465.453664][ T9698] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 465.453676][ T9698] R13: 00007f232e886038 R14: 00007f232e885fa0 R15: 00007ffe32a1d348 [ 465.453705][ T9698] [ 466.172015][ T31] usb 7-1: USB disconnect, device number 3 [ 467.300807][ T9723] program syz.0.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.782183][ T9728] FAULT_INJECTION: forcing a failure. [ 467.782183][ T9728] name failslab, interval 1, probability 0, space 0, times 0 [ 467.782213][ T9728] CPU: 0 UID: 0 PID: 9728 Comm: syz.6.1058 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.782234][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.782244][ T9728] Call Trace: [ 467.782251][ T9728] [ 467.782259][ T9728] dump_stack_lvl+0xe8/0x150 [ 467.782283][ T9728] should_fail_ex+0x46b/0x600 [ 467.782310][ T9728] should_failslab+0xa8/0x100 [ 467.782334][ T9728] __kvmalloc_node_noprof+0x170/0x8e0 [ 467.782356][ T9728] ? seq_read_iter+0x203/0xe20 [ 467.782463][ T9728] ? mutex_lock_nested+0x152/0x1d0 [ 467.782484][ T9728] ? seq_read_iter+0xb8/0xe20 [ 467.782508][ T9728] seq_read_iter+0x203/0xe20 [ 467.782529][ T9728] ? _parse_integer_limit+0x1ae/0x1f0 [ 467.782557][ T9728] ? __asan_memset+0x22/0x50 [ 467.782579][ T9728] seq_read+0x36a/0x490 [ 467.782598][ T9728] ? get_pid_task+0x20/0x1f0 [ 467.782629][ T9728] ? __pfx_seq_read+0x10/0x10 [ 467.782652][ T9728] ? __lock_acquire+0x6b5/0x2cf0 [ 467.782688][ T9728] ? __pfx_seq_read+0x10/0x10 [ 467.782705][ T9728] proc_reg_read+0x1f6/0x2f0 [ 467.782755][ T9728] ? __pfx_proc_reg_read+0x10/0x10 [ 467.782776][ T9728] vfs_read+0x212/0xa80 [ 467.782805][ T9728] ? __pfx_vfs_read+0x10/0x10 [ 467.782827][ T9728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 467.782850][ T9728] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.782872][ T9728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 467.782896][ T9728] ? mutex_lock_nested+0x152/0x1d0 [ 467.782915][ T9728] ? fdget_pos+0x252/0x320 [ 467.782942][ T9728] ksys_read+0x156/0x270 [ 467.782964][ T9728] ? __pfx_ksys_read+0x10/0x10 [ 467.782991][ T9728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.783010][ T9728] do_syscall_64+0x174/0x580 [ 467.783034][ T9728] ? clear_bhb_loop+0x40/0x90 [ 467.783056][ T9728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.783072][ T9728] RIP: 0033:0x7ff56528ce59 [ 467.783089][ T9728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.783102][ T9728] RSP: 002b:00007ff5634e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.783121][ T9728] RAX: ffffffffffffffda RBX: 00007ff565505fa0 RCX: 00007ff56528ce59 [ 467.783132][ T9728] RDX: 000000000000203c RSI: 00002000000040c0 RDI: 0000000000000004 [ 467.783143][ T9728] RBP: 00007ff5634e6090 R08: 0000000000000000 R09: 0000000000000000 [ 467.783154][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.783165][ T9728] R13: 00007ff565506038 R14: 00007ff565505fa0 R15: 00007ffeb41f6248 [ 467.783193][ T9728] [ 468.627348][ T9735] FAULT_INJECTION: forcing a failure. [ 468.627348][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.627387][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.0.1061 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.627408][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.627418][ T9735] Call Trace: [ 468.627425][ T9735] [ 468.627433][ T9735] dump_stack_lvl+0xe8/0x150 [ 468.627460][ T9735] should_fail_ex+0x46b/0x600 [ 468.627489][ T9735] _copy_from_user+0x2d/0xb0 [ 468.627507][ T9735] ___sys_sendmsg+0x1c6/0x360 [ 468.627532][ T9735] ? __lock_acquire+0x6b5/0x2cf0 [ 468.627558][ T9735] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.627616][ T9735] ? __fget_files+0x2a/0x420 [ 468.627632][ T9735] ? __fget_files+0x3a6/0x420 [ 468.627662][ T9735] __x64_sys_sendmsg+0x1c3/0x2a0 [ 468.627689][ T9735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.627722][ T9735] ? __pfx_ksys_write+0x10/0x10 [ 468.627751][ T9735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.627771][ T9735] do_syscall_64+0x174/0x580 [ 468.627794][ T9735] ? trace_irq_disable+0x3b/0x140 [ 468.627815][ T9735] ? clear_bhb_loop+0x40/0x90 [ 468.627836][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.627853][ T9735] RIP: 0033:0x7f28373fce59 [ 468.627869][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.627884][ T9735] RSP: 002b:00007f283564e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.627903][ T9735] RAX: ffffffffffffffda RBX: 00007f2837675fa0 RCX: 00007f28373fce59 [ 468.627916][ T9735] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 468.627927][ T9735] RBP: 00007f283564e090 R08: 0000000000000000 R09: 0000000000000000 [ 468.627938][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.627947][ T9735] R13: 00007f2837676038 R14: 00007f2837675fa0 R15: 00007ffd436344a8 [ 468.627973][ T9735] [ 470.562093][ T9758] FAULT_INJECTION: forcing a failure. [ 470.562093][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 470.562125][ T9758] CPU: 0 UID: 0 PID: 9758 Comm: syz.0.1069 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.562146][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.562156][ T9758] Call Trace: [ 470.562163][ T9758] [ 470.562171][ T9758] dump_stack_lvl+0xe8/0x150 [ 470.562198][ T9758] should_fail_ex+0x46b/0x600 [ 470.562226][ T9758] should_failslab+0xa8/0x100 [ 470.562247][ T9758] __kmalloc_noprof+0xdf/0x7b0 [ 470.562276][ T9758] ? kfree+0x4d/0x6c0 [ 470.562302][ T9758] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 470.562334][ T9758] tomoyo_realpath_from_path+0xe3/0x5d0 [ 470.562362][ T9758] ? tomoyo_domain+0xd7/0x130 [ 470.562388][ T9758] ? tomoyo_path_number_perm+0x219/0x630 [ 470.562413][ T9758] tomoyo_path_number_perm+0x246/0x630 [ 470.562441][ T9758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 470.562464][ T9758] ? __lock_acquire+0x6b5/0x2cf0 [ 470.562489][ T9758] ? do_raw_spin_lock+0x12b/0x2f0 [ 470.562533][ T9758] ? __fget_files+0x2a/0x420 [ 470.562552][ T9758] ? __fget_files+0x2a/0x420 [ 470.562564][ T9758] ? __fget_files+0x3a6/0x420 [ 470.562578][ T9758] ? __fget_files+0x2a/0x420 [ 470.562599][ T9758] security_file_ioctl+0xc3/0x2a0 [ 470.562625][ T9758] __se_sys_ioctl+0x47/0x170 [ 470.562645][ T9758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.562663][ T9758] do_syscall_64+0x174/0x580 [ 470.562686][ T9758] ? trace_irq_disable+0x3b/0x140 [ 470.562706][ T9758] ? clear_bhb_loop+0x40/0x90 [ 470.562725][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.562749][ T9758] RIP: 0033:0x7f28373fce59 [ 470.562765][ T9758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.562778][ T9758] RSP: 002b:00007f283564e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.562797][ T9758] RAX: ffffffffffffffda RBX: 00007f2837675fa0 RCX: 00007f28373fce59 [ 470.562810][ T9758] RDX: 0000200000000200 RSI: 0000000000005412 RDI: 0000000000000004 [ 470.562821][ T9758] RBP: 00007f283564e090 R08: 0000000000000000 R09: 0000000000000000 [ 470.562831][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.562842][ T9758] R13: 00007f2837676038 R14: 00007f2837675fa0 R15: 00007ffd436344a8 [ 470.562871][ T9758] [ 470.564120][ T9758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 470.582128][ T9759] netlink: 'syz.6.1067': attribute type 1 has an invalid length. [ 470.582148][ T9759] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1067'. [ 470.582162][ T9759] netlink: 'syz.6.1067': attribute type 1 has an invalid length. [ 470.661980][ T36] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 470.817419][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.817449][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.817483][ T36] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 470.817503][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.834952][ T36] usb 6-1: config 0 descriptor?? [ 471.361601][ T5739] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 471.361909][ T36] usbhid 6-1:0.0: can't add hid device: -71 [ 471.362011][ T36] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 471.370734][ T36] usb 6-1: USB disconnect, device number 5 [ 471.528676][ T5739] usb 3-1: Using ep0 maxpacket: 8 [ 471.532181][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 471.532197][ T5739] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 471.534399][ T5739] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 471.534424][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.534442][ T5739] usb 3-1: Product: syz [ 471.534451][ T5739] usb 3-1: Manufacturer: syz [ 471.534459][ T5739] usb 3-1: SerialNumber: syz [ 471.612096][ T5739] usb 3-1: config 0 descriptor?? [ 471.738616][ T5818] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 471.888664][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 471.891640][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.891663][ T5818] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.900228][ T5818] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 471.900253][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.900271][ T5818] usb 5-1: Product: syz [ 471.986179][ T5818] usb 5-1: Manufacturer: syz [ 471.986198][ T5818] usb 5-1: SerialNumber: syz [ 472.064359][ T5818] usb 5-1: config 0 descriptor?? [ 472.181103][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1072'. [ 472.181176][ T9774] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1072'. [ 472.181234][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1072'. [ 473.282688][ T9777] autofs: Unknown parameter ''÷­Ò íÒÍ/¿`:JY؜ÕHÏò”{̉²XàtkŸCÚ¤DGÆe]É1Öìì'Åi•†trK&ˆMeQ‘0ñ:çÙn<ìžY¿±' [ 473.380718][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 473.380735][ T37] audit: type=1326 audit(1780857029.814:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.380781][ T37] audit: type=1326 audit(1780857029.814:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.380818][ T37] audit: type=1326 audit(1780857029.814:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.380857][ T37] audit: type=1326 audit(1780857029.814:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.386314][ T37] audit: type=1326 audit(1780857029.824:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.386360][ T37] audit: type=1326 audit(1780857029.824:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.386397][ T37] audit: type=1326 audit(1780857029.824:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.402355][ T37] audit: type=1326 audit(1780857029.824:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.402401][ T37] audit: type=1326 audit(1780857029.844:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.402437][ T37] audit: type=1326 audit(1780857029.844:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9775 comm="syz.5.1073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f326f38ce59 code=0x7ffc0000 [ 473.577565][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1074'. [ 473.754917][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1074'. [ 474.145263][ T5818] usb 3-1: USB disconnect, device number 34 [ 475.224152][ T31] usb 5-1: USB disconnect, device number 23 [ 475.737693][ T9803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.835042][ T9808] bond1: (slave geneve2): Enslaving as a backup interface with an up link [ 475.865621][ T56] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 476.010240][ T56] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 476.501485][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'. [ 476.556027][ T4924] Bluetooth: Unexpected start frame (len 0) [ 476.566669][ T4924] Bluetooth: Fragment is too long (len 14, expected 2) [ 476.635184][ T9818] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 476.635209][ T9818] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 476.735947][ T9818] vhci_hcd vhci_hcd.0: Device attached [ 476.741514][ T9822] vhci_hcd: connection closed [ 476.803076][ T3550] vhci_hcd vhci_hcd.0: stop threads [ 476.805586][ T3550] vhci_hcd vhci_hcd.0: release socket [ 476.805729][ T3550] vhci_hcd vhci_hcd.0: disconnect device [ 478.188892][ T5818] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 478.358928][ T5818] usb 7-1: Using ep0 maxpacket: 8 [ 478.361062][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 478.361088][ T5818] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 478.393778][ T5818] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 478.393804][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.393821][ T5818] usb 7-1: Product: syz [ 478.393833][ T5818] usb 7-1: Manufacturer: syz [ 478.393845][ T5818] usb 7-1: SerialNumber: syz [ 478.447271][ T5818] usb 7-1: config 0 descriptor?? [ 478.558013][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.560954][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.375533][ T31] usb 7-1: USB disconnect, device number 4 [ 479.918729][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 480.146239][ T9873] 9p: Bad value for 'rfdno' [ 480.856144][ T9888] netlink: 'syz.6.1107': attribute type 2 has an invalid length. [ 480.856163][ T9888] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1107'. [ 481.058135][ T9892] FAULT_INJECTION: forcing a failure. [ 481.058135][ T9892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.058168][ T9892] CPU: 1 UID: 0 PID: 9892 Comm: syz.4.1109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.058195][ T9892] Tainted: [L]=SOFTLOCKUP [ 481.058201][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.058212][ T9892] Call Trace: [ 481.058219][ T9892] [ 481.058226][ T9892] dump_stack_lvl+0xe8/0x150 [ 481.058252][ T9892] should_fail_ex+0x46b/0x600 [ 481.058282][ T9892] _copy_from_user+0x2d/0xb0 [ 481.058301][ T9892] ___sys_sendmsg+0x1c6/0x360 [ 481.058325][ T9892] ? __lock_acquire+0x6b5/0x2cf0 [ 481.058359][ T9892] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.058388][ T9892] ? kstrtouint+0x6e/0xe0 [ 481.058440][ T9892] ? __fget_files+0x2a/0x420 [ 481.058456][ T9892] ? __fget_files+0x3a6/0x420 [ 481.058479][ T9892] __sys_sendmmsg+0x282/0x4e0 [ 481.058507][ T9892] ? __pfx___sys_sendmmsg+0x10/0x10 [ 481.058540][ T9892] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 481.058574][ T9892] ? ksys_write+0x248/0x270 [ 481.058596][ T9892] ? __pfx_ksys_write+0x10/0x10 [ 481.058622][ T9892] __x64_sys_sendmmsg+0xa0/0xc0 [ 481.058645][ T9892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.058663][ T9892] do_syscall_64+0x174/0x580 [ 481.058686][ T9892] ? trace_irq_disable+0x3b/0x140 [ 481.058705][ T9892] ? clear_bhb_loop+0x40/0x90 [ 481.058726][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.058743][ T9892] RIP: 0033:0x7f82e546ce59 [ 481.058760][ T9892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.058775][ T9892] RSP: 002b:00007f82e36be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 481.058794][ T9892] RAX: ffffffffffffffda RBX: 00007f82e56e5fa0 RCX: 00007f82e546ce59 [ 481.058807][ T9892] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 481.058818][ T9892] RBP: 00007f82e36be090 R08: 0000000000000000 R09: 0000000000000000 [ 481.058829][ T9892] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 481.058839][ T9892] R13: 00007f82e56e6038 R14: 00007f82e56e5fa0 R15: 00007fff18ea9678 [ 481.058865][ T9892] [ 482.644747][ T31] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 482.891032][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.891057][ T31] usb 6-1: config 0 has no interface number 0 [ 482.892408][ T31] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.892435][ T31] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.892456][ T31] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.892479][ T31] usb 6-1: config 0 interface 1 has no altsetting 0 [ 482.892510][ T31] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 482.892530][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.978365][ T31] usb 6-1: config 0 descriptor?? [ 483.207599][ T9894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.212014][ T9894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.421726][ T31] usbhid 6-1:0.1: can't add hid device: -32 [ 483.421889][ T31] usbhid 6-1:0.1: probe with driver usbhid failed with error -32 [ 483.700155][ T31] usb 6-1: USB disconnect, device number 6 [ 484.000092][ T9923] FAULT_INJECTION: forcing a failure. [ 484.000092][ T9923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.000126][ T9923] CPU: 0 UID: 0 PID: 9923 Comm: syz.5.1120 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 484.000151][ T9923] Tainted: [L]=SOFTLOCKUP [ 484.000157][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.000167][ T9923] Call Trace: [ 484.000174][ T9923] [ 484.000182][ T9923] dump_stack_lvl+0xe8/0x150 [ 484.000207][ T9923] should_fail_ex+0x46b/0x600 [ 484.000235][ T9923] _copy_from_user+0x2d/0xb0 [ 484.000257][ T9923] ___sys_sendmsg+0x1c6/0x360 [ 484.000281][ T9923] ? __lock_acquire+0x6b5/0x2cf0 [ 484.000307][ T9923] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.000364][ T9923] ? __fget_files+0x2a/0x420 [ 484.000398][ T9923] ? __fget_files+0x3a6/0x420 [ 484.000425][ T9923] __x64_sys_sendmsg+0x1c3/0x2a0 [ 484.000452][ T9923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.000484][ T9923] ? rcu_is_watching+0x15/0xb0 [ 484.000517][ T9923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.000537][ T9923] do_syscall_64+0x174/0x580 [ 484.000561][ T9923] ? trace_irq_disable+0x3b/0x140 [ 484.000580][ T9923] ? clear_bhb_loop+0x40/0x90 [ 484.000601][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.000619][ T9923] RIP: 0033:0x7f326f38ce59 [ 484.000636][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.000650][ T9923] RSP: 002b:00007f326d5de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.000670][ T9923] RAX: ffffffffffffffda RBX: 00007f326f605fa0 RCX: 00007f326f38ce59 [ 484.000691][ T9923] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 484.000703][ T9923] RBP: 00007f326d5de090 R08: 0000000000000000 R09: 0000000000000000 [ 484.000714][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.000725][ T9923] R13: 00007f326f606038 R14: 00007f326f605fa0 R15: 00007ffd5a3697b8 [ 484.000754][ T9923] [ 488.121781][ T9951] bond1: option mode: unable to set because the bond device has slaves [ 488.697828][ T9959] tmpfs: Bad value for 'mpol' [ 489.991878][ T9974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.503014][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1138'. [ 491.899152][ T9988] bond1: option mode: unable to set because the bond device has slaves [ 491.938643][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'. [ 495.355822][T10020] FAULT_INJECTION: forcing a failure. [ 495.355822][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.355856][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.5.1152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.355880][T10020] Tainted: [L]=SOFTLOCKUP [ 495.355886][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.355896][T10020] Call Trace: [ 495.355903][T10020] [ 495.355911][T10020] dump_stack_lvl+0xe8/0x150 [ 495.355936][T10020] should_fail_ex+0x46b/0x600 [ 495.355962][T10020] _copy_from_user+0x2d/0xb0 [ 495.355980][T10020] sg_write+0x3ee/0xf00 [ 495.356102][T10020] ? rcu_is_watching+0x15/0xb0 [ 495.356127][T10020] ? trace_sched_exit_tp+0x3a/0x130 [ 495.356199][T10020] ? __pfx_sg_write+0x10/0x10 [ 495.356213][T10020] ? __schedule+0x1702/0x5620 [ 495.356237][T10020] ? ktime_get+0x45/0x220 [ 495.356280][T10020] ? __pfx___schedule+0x10/0x10 [ 495.356316][T10020] ? rw_verify_area+0x25b/0x4e0 [ 495.356337][T10020] ? __pfx_sg_write+0x10/0x10 [ 495.356355][T10020] vfs_write+0x2a3/0xba0 [ 495.356383][T10020] ? __pfx_vfs_write+0x10/0x10 [ 495.356403][T10020] ? __fget_files+0x2a/0x420 [ 495.356422][T10020] ? __fget_files+0x2a/0x420 [ 495.356437][T10020] ? __fget_files+0x3a6/0x420 [ 495.356452][T10020] ? __fget_files+0x2a/0x420 [ 495.356477][T10020] ksys_write+0x156/0x270 [ 495.356499][T10020] ? __pfx_ksys_write+0x10/0x10 [ 495.356526][T10020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.356546][T10020] do_syscall_64+0x174/0x580 [ 495.356569][T10020] ? trace_irq_disable+0x3b/0x140 [ 495.356589][T10020] ? clear_bhb_loop+0x40/0x90 [ 495.356610][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.356628][T10020] RIP: 0033:0x7f326f38ce59 [ 495.356644][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.356660][T10020] RSP: 002b:00007f326d5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 495.356679][T10020] RAX: ffffffffffffffda RBX: 00007f326f605fa0 RCX: 00007f326f38ce59 [ 495.356692][T10020] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000003 [ 495.356703][T10020] RBP: 00007f326d5de090 R08: 0000000000000000 R09: 0000000000000000 [ 495.356715][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.356725][T10020] R13: 00007f326f606038 R14: 00007f326f605fa0 R15: 00007ffd5a3697b8 [ 495.356755][T10020] [ 496.550051][T10025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.016838][T10007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.443642][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 497.478116][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 497.494175][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 497.499140][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 497.499844][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 497.503117][T10035] FAULT_INJECTION: forcing a failure. [ 497.503117][T10035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.503154][T10035] CPU: 1 UID: 0 PID: 10035 Comm: syz.6.1156 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 497.503184][T10035] Tainted: [L]=SOFTLOCKUP [ 497.503190][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.503201][T10035] Call Trace: [ 497.503208][T10035] [ 497.503215][T10035] dump_stack_lvl+0xe8/0x150 [ 497.503247][T10035] should_fail_ex+0x46b/0x600 [ 497.503274][T10035] _copy_from_user+0x2d/0xb0 [ 497.503293][T10035] do_sock_getsockopt+0x200/0x7e0 [ 497.503322][T10035] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 497.503360][T10035] ? __fget_files+0x3a6/0x420 [ 497.503375][T10035] ? __fget_files+0x2a/0x420 [ 497.503398][T10035] __x64_sys_getsockopt+0x1aa/0x250 [ 497.503427][T10035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.503445][T10035] do_syscall_64+0x174/0x580 [ 497.503469][T10035] ? trace_irq_disable+0x3b/0x140 [ 497.503488][T10035] ? clear_bhb_loop+0x40/0x90 [ 497.503509][T10035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.503525][T10035] RIP: 0033:0x7ff56528ce59 [ 497.503541][T10035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.503556][T10035] RSP: 002b:00007ff5634e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 497.503574][T10035] RAX: ffffffffffffffda RBX: 00007ff565505fa0 RCX: 00007ff56528ce59 [ 497.503624][T10035] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 497.503635][T10035] RBP: 00007ff5634e6090 R08: 0000000000000000 R09: 0000000000000000 [ 497.503646][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.503657][T10035] R13: 00007ff565506038 R14: 00007ff565505fa0 R15: 00007ffeb41f6248 [ 497.503685][T10035] [ 499.192004][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 499.262585][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 499.275765][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 499.283952][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 499.294436][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 499.526268][ T5609] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 499.594330][ T5609] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 499.596617][ T5609] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 499.604872][ T5609] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 499.605986][ T5609] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 499.868606][ T5609] Bluetooth: hci7: command tx timeout [ 500.090943][T10071] bond2: Unable to set up delay as MII monitoring is disabled [ 500.120456][T10071] bond2 (unregistering): Released all slaves [ 501.411395][ T5609] Bluetooth: hci8: command tx timeout [ 501.526002][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.526207][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.526392][T10032] bridge_slave_0: entered allmulticast mode [ 501.557933][T10032] bridge_slave_0: entered promiscuous mode [ 501.756655][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.756832][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.757019][T10032] bridge_slave_1: entered allmulticast mode [ 501.787658][T10032] bridge_slave_1: entered promiscuous mode [ 501.789663][ T5609] Bluetooth: hci9: command tx timeout [ 501.911558][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.948575][ T5609] Bluetooth: hci7: command tx timeout [ 502.019519][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.056340][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.056405][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.169483][T10032] team0: Port device team_slave_0 added [ 502.177761][T10032] team0: Port device team_slave_1 added [ 502.218623][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 502.353086][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.353102][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.353127][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.368604][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 502.395760][ T31] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 502.395792][ T31] usb 7-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 502.395825][ T31] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 502.395844][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.397261][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.397282][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.397306][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.020835][ T36] usb 7-1: USB disconnect, device number 5 [ 503.179652][T10032] hsr_slave_0: entered promiscuous mode [ 503.186244][T10032] hsr_slave_1: entered promiscuous mode [ 503.192206][T10032] debugfs: 'hsr0' already exists in 'hsr' [ 503.192231][T10032] Cannot create hsr debugfs directory [ 503.468834][ T5609] Bluetooth: hci8: command tx timeout [ 503.868669][ T5609] Bluetooth: hci9: command tx timeout [ 504.045205][ T5609] Bluetooth: hci7: command tx timeout [ 504.482316][T10119] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1171'. [ 504.693988][T10116] uprobe: syz.6.1171:10116 failed to unregister, leaking uprobe [ 504.804278][T10116] uprobe: syz.6.1171:10116 failed to unregister, leaking uprobe [ 505.286605][T10057] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.286946][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.287132][T10057] bridge_slave_0: entered allmulticast mode [ 505.313248][T10057] bridge_slave_0: entered promiscuous mode [ 505.353303][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.353495][T10057] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.353690][T10057] bridge_slave_1: entered allmulticast mode [ 505.356680][T10057] bridge_slave_1: entered promiscuous mode [ 505.558693][ T5609] Bluetooth: hci8: command tx timeout [ 505.611154][T10057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.651209][T10057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.651662][T10063] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.651850][T10063] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.652033][T10063] bridge_slave_0: entered allmulticast mode [ 505.654610][T10063] bridge_slave_0: entered promiscuous mode [ 505.747150][T10063] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.747269][T10063] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.747462][T10063] bridge_slave_1: entered allmulticast mode [ 505.770531][T10063] bridge_slave_1: entered promiscuous mode [ 505.820254][T10057] team0: Port device team_slave_0 added [ 505.955224][ T5609] Bluetooth: hci9: command tx timeout [ 505.964568][T10057] team0: Port device team_slave_1 added [ 505.978962][T10063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.108712][ T5609] Bluetooth: hci7: command tx timeout [ 506.318730][T10063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.395978][T10057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.395992][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.396014][T10057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.462029][T10057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.462043][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.462067][T10057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.486133][T10063] team0: Port device team_slave_0 added [ 506.580671][T10063] team0: Port device team_slave_1 added [ 507.304761][T10196] FAULT_INJECTION: forcing a failure. [ 507.304761][T10196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.304818][T10196] CPU: 0 UID: 0 PID: 10196 Comm: syz.5.1176 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.304844][T10196] Tainted: [L]=SOFTLOCKUP [ 507.304850][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.304861][T10196] Call Trace: [ 507.304868][T10196] [ 507.304876][T10196] dump_stack_lvl+0xe8/0x150 [ 507.304910][T10196] should_fail_ex+0x46b/0x600 [ 507.304940][T10196] _copy_from_user+0x2d/0xb0 [ 507.304958][T10196] __sys_bind+0x1cc/0x410 [ 507.304983][T10196] ? __pfx___sys_bind+0x10/0x10 [ 507.305023][T10196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.305042][T10196] __x64_sys_bind+0x7a/0x90 [ 507.305065][T10196] do_syscall_64+0x174/0x580 [ 507.305091][T10196] ? clear_bhb_loop+0x40/0x90 [ 507.305113][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.305130][T10196] RIP: 0033:0x7f326f38ce59 [ 507.305147][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.305162][T10196] RSP: 002b:00007f326d59c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 507.305181][T10196] RAX: ffffffffffffffda RBX: 00007f326f606180 RCX: 00007f326f38ce59 [ 507.305194][T10196] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000a [ 507.305206][T10196] RBP: 00007f326d59c090 R08: 0000000000000000 R09: 0000000000000000 [ 507.305217][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.305227][T10196] R13: 00007f326f606218 R14: 00007f326f606180 R15: 00007ffd5a3697b8 [ 507.305257][T10196] [ 507.628530][ T5609] Bluetooth: hci8: command tx timeout [ 508.000733][T10201] FAULT_INJECTION: forcing a failure. [ 508.000733][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 508.000766][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.5.1178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 508.000790][T10201] Tainted: [L]=SOFTLOCKUP [ 508.000796][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.000806][T10201] Call Trace: [ 508.000813][T10201] [ 508.000821][T10201] dump_stack_lvl+0xe8/0x150 [ 508.000845][T10201] should_fail_ex+0x46b/0x600 [ 508.000872][T10201] should_failslab+0xa8/0x100 [ 508.000894][T10201] __kmalloc_noprof+0xdf/0x7b0 [ 508.000913][T10201] ? kfree+0x4d/0x6c0 [ 508.000929][T10201] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 508.000955][T10201] tomoyo_realpath_from_path+0xe3/0x5d0 [ 508.000977][T10201] ? tomoyo_domain+0xd7/0x130 [ 508.001001][T10201] ? tomoyo_path_number_perm+0x219/0x630 [ 508.001025][T10201] tomoyo_path_number_perm+0x246/0x630 [ 508.001052][T10201] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 508.001075][T10201] ? __lock_acquire+0x6b5/0x2cf0 [ 508.001099][T10201] ? do_raw_spin_lock+0x12b/0x2f0 [ 508.001148][T10201] ? __fget_files+0x2a/0x420 [ 508.001168][T10201] ? __fget_files+0x2a/0x420 [ 508.001183][T10201] ? __fget_files+0x3a6/0x420 [ 508.001197][T10201] ? __fget_files+0x2a/0x420 [ 508.001217][T10201] security_file_ioctl+0xc3/0x2a0 [ 508.001243][T10201] __se_sys_ioctl+0x47/0x170 [ 508.001263][T10201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.001280][T10201] do_syscall_64+0x174/0x580 [ 508.001302][T10201] ? trace_irq_disable+0x3b/0x140 [ 508.001319][T10201] ? clear_bhb_loop+0x40/0x90 [ 508.001348][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.001364][T10201] RIP: 0033:0x7f326f38ce59 [ 508.001379][T10201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.001391][T10201] RSP: 002b:00007f326d5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.001408][T10201] RAX: ffffffffffffffda RBX: 00007f326f605fa0 RCX: 00007f326f38ce59 [ 508.001419][T10201] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000003 [ 508.001429][T10201] RBP: 00007f326d5de090 R08: 0000000000000000 R09: 0000000000000000 [ 508.001440][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.001449][T10201] R13: 00007f326f606038 R14: 00007f326f605fa0 R15: 00007ffd5a3697b8 [ 508.001473][T10201] [ 508.001479][T10201] ERROR: Out of memory at tomoyo_realpath_from_path. [ 508.028585][ T5609] Bluetooth: hci9: command tx timeout [ 508.450741][T10063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.450752][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.450766][T10063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.522514][T10063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.522530][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.522553][T10063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.577939][T10057] hsr_slave_0: entered promiscuous mode [ 508.586754][T10057] hsr_slave_1: entered promiscuous mode [ 508.597082][T10057] debugfs: 'hsr0' already exists in 'hsr' [ 508.597106][T10057] Cannot create hsr debugfs directory [ 509.115294][T10063] hsr_slave_0: entered promiscuous mode [ 509.116241][T10063] hsr_slave_1: entered promiscuous mode [ 509.116832][T10063] debugfs: 'hsr0' already exists in 'hsr' [ 509.116847][T10063] Cannot create hsr debugfs directory [ 509.134108][T10032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 509.236893][T10032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.305877][T10032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 509.363667][T10032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.447203][T10032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 509.473451][T10032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.669605][T10032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 509.767640][T10032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.578342][T10228] FAULT_INJECTION: forcing a failure. [ 510.578342][T10228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.578375][T10228] CPU: 1 UID: 0 PID: 10228 Comm: syz.6.1185 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.578400][T10228] Tainted: [L]=SOFTLOCKUP [ 510.578406][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.578416][T10228] Call Trace: [ 510.578423][T10228] [ 510.578435][T10228] dump_stack_lvl+0xe8/0x150 [ 510.578462][T10228] should_fail_ex+0x46b/0x600 [ 510.578491][T10228] _copy_from_user+0x2d/0xb0 [ 510.578509][T10228] ___sys_sendmsg+0x1c6/0x360 [ 510.578534][T10228] ? __lock_acquire+0x6b5/0x2cf0 [ 510.578560][T10228] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.578612][T10228] ? __fget_files+0x2a/0x420 [ 510.578630][T10228] ? __fget_files+0x3a6/0x420 [ 510.578656][T10228] __x64_sys_sendmsg+0x1c3/0x2a0 [ 510.578681][T10228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.578712][T10228] ? __pfx_ksys_write+0x10/0x10 [ 510.578740][T10228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.578758][T10228] do_syscall_64+0x174/0x580 [ 510.578781][T10228] ? trace_irq_disable+0x3b/0x140 [ 510.578801][T10228] ? clear_bhb_loop+0x40/0x90 [ 510.578821][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.578839][T10228] RIP: 0033:0x7ff56528ce59 [ 510.578855][T10228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.578869][T10228] RSP: 002b:00007ff5634e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.578887][T10228] RAX: ffffffffffffffda RBX: 00007ff565505fa0 RCX: 00007ff56528ce59 [ 510.578899][T10228] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 510.578910][T10228] RBP: 00007ff5634e6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.578920][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.578929][T10228] R13: 00007ff565506038 R14: 00007ff565505fa0 R15: 00007ffeb41f6248 [ 510.578955][T10228] [ 511.551708][T10235] afs: Unknown parameter 'autoc' [ 512.290101][T10057] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 512.480728][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.497861][T10057] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 512.651212][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.693645][T10057] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 512.738354][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.954977][T10057] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 514.028696][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.296172][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.434320][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.455645][T10063] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 514.485636][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.498196][T10063] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 514.560220][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.616391][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.616585][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.626262][T10063] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 514.680607][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.699059][T10063] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 514.829395][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.928199][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.928332][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.521605][T10057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.720401][T10057] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.742927][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.743122][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.833315][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.833444][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.913048][T10063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.165175][T10063] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.200714][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.200821][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.246507][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.246609][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.214950][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.135223][T10057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.157326][T10314] bond1: option mode: unable to set because the bond device has slaves [ 519.166296][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1198'. [ 519.454703][T10063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.883915][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 519.888005][ T5609] Bluetooth: Unexpected start frame (len 0) [ 519.890643][T10032] veth0_vlan: entered promiscuous mode [ 519.916945][T10032] veth1_vlan: entered promiscuous mode [ 520.089191][T10032] veth0_macvtap: entered promiscuous mode [ 520.159732][T10032] veth1_macvtap: entered promiscuous mode [ 520.246541][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.369976][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.429395][ T36] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 520.484669][ T8786] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.493398][ T8786] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.497358][T10057] veth0_vlan: entered promiscuous mode [ 520.506207][ T8786] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.535562][ T8786] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.581361][T10057] veth1_vlan: entered promiscuous mode [ 520.609892][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 520.615230][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.615279][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.615303][ T36] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 520.616567][ T36] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 520.616590][ T36] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 520.616607][ T36] usb 7-1: Manufacturer: syz [ 520.689883][ T36] usb 7-1: config 0 descriptor?? [ 520.975651][ T36] usb 7-1: USB disconnect, device number 6 [ 521.857595][T10063] veth0_vlan: entered promiscuous mode [ 521.910957][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.910977][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.943681][T10057] veth0_macvtap: entered promiscuous mode [ 522.004759][T10057] veth1_macvtap: entered promiscuous mode [ 522.016433][T10063] veth1_vlan: entered promiscuous mode [ 522.113142][T10156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.113162][T10156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.253426][T10057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.318108][T10057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.462066][ T3419] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.487915][ T3419] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.492038][ T5818] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 522.513260][ T3419] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.577192][ T3419] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.580179][T10063] veth0_macvtap: entered promiscuous mode [ 522.749073][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 522.760227][ T5818] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 522.760253][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.760271][ T5818] usb 6-1: Product: syz [ 522.760282][ T5818] usb 6-1: Manufacturer: syz [ 522.760294][ T5818] usb 6-1: SerialNumber: syz [ 522.766112][ T5818] usb 6-1: config 0 descriptor?? [ 523.706453][T10063] veth1_macvtap: entered promiscuous mode [ 524.042193][ T5818] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 524.042218][ T5818] airspy 6-1:0.0: Could not detect board [ 524.042325][ T5818] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 524.087736][ T5818] usb 6-1: USB disconnect, device number 7 [ 524.494596][T10063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.599881][T10063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.685116][T10153] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.775151][T10153] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.780338][T10153] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.823132][T10153] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.058895][ T5724] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 525.254585][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.254604][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.290816][ T5724] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 525.290841][ T5724] usb 7-1: config 0 has no interface number 0 [ 525.290882][ T5724] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 525.290905][ T5724] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 525.290927][ T5724] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 525.293525][ T5724] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 525.293550][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 525.293568][ T5724] usb 7-1: Product: syz [ 525.293581][ T5724] usb 7-1: SerialNumber: syz [ 525.450508][ T5724] usb 7-1: config 0 descriptor?? [ 525.562629][ T5724] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 525.592187][ T5724] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input22 [ 525.807404][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 526.517205][ T1551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.517226][ T1551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.093303][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.093322][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.184216][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 530.184525][ T5797] usb 7-1: USB disconnect, device number 7 [ 530.186734][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 530.186757][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 530.359705][ T5797] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 530.537508][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.537527][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.104050][T10382] FAULT_INJECTION: forcing a failure. [ 531.104050][T10382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.104084][T10382] CPU: 1 UID: 0 PID: 10382 Comm: syz.5.1212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.104109][T10382] Tainted: [L]=SOFTLOCKUP [ 531.104116][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.104127][T10382] Call Trace: [ 531.104135][T10382] [ 531.104144][T10382] dump_stack_lvl+0xe8/0x150 [ 531.104170][T10382] should_fail_ex+0x46b/0x600 [ 531.104200][T10382] _copy_from_user+0x2d/0xb0 [ 531.104220][T10382] ___sys_sendmsg+0x1c6/0x360 [ 531.104246][T10382] ? __lock_acquire+0x6b5/0x2cf0 [ 531.104274][T10382] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.104332][T10382] ? __fget_files+0x2a/0x420 [ 531.104349][T10382] ? __fget_files+0x3a6/0x420 [ 531.104377][T10382] __x64_sys_sendmsg+0x1c3/0x2a0 [ 531.104405][T10382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.104439][T10382] ? __pfx_ksys_write+0x10/0x10 [ 531.104468][T10382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.104487][T10382] do_syscall_64+0x174/0x580 [ 531.104512][T10382] ? trace_irq_disable+0x3b/0x140 [ 531.104540][T10382] ? clear_bhb_loop+0x40/0x90 [ 531.104562][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.104580][T10382] RIP: 0033:0x7f326f38ce59 [ 531.104597][T10382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.104612][T10382] RSP: 002b:00007f326d59c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.104633][T10382] RAX: ffffffffffffffda RBX: 00007f326f606180 RCX: 00007f326f38ce59 [ 531.104646][T10382] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 531.104658][T10382] RBP: 00007f326d59c090 R08: 0000000000000000 R09: 0000000000000000 [ 531.104670][T10382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.104682][T10382] R13: 00007f326f606218 R14: 00007f326f606180 R15: 00007ffd5a3697b8 [ 531.104711][T10382] [ 532.084072][T10390] FAULT_INJECTION: forcing a failure. [ 532.084072][T10390] name failslab, interval 1, probability 0, space 0, times 0 [ 532.084105][T10390] CPU: 1 UID: 0 PID: 10390 Comm: syz.9.1162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.084129][T10390] Tainted: [L]=SOFTLOCKUP [ 532.084136][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.084147][T10390] Call Trace: [ 532.084154][T10390] [ 532.084162][T10390] dump_stack_lvl+0xe8/0x150 [ 532.084188][T10390] should_fail_ex+0x46b/0x600 [ 532.084216][T10390] should_failslab+0xa8/0x100 [ 532.084241][T10390] __kmalloc_noprof+0xdf/0x7b0 [ 532.084261][T10390] ? kfree+0x4d/0x6c0 [ 532.084278][T10390] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.084307][T10390] tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.084330][T10390] ? tomoyo_domain+0xd7/0x130 [ 532.084356][T10390] ? tomoyo_path_number_perm+0x219/0x630 [ 532.084382][T10390] tomoyo_path_number_perm+0x246/0x630 [ 532.084410][T10390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.084434][T10390] ? __lock_acquire+0x6b5/0x2cf0 [ 532.084460][T10390] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.084510][T10390] ? __fget_files+0x2a/0x420 [ 532.084531][T10390] ? __fget_files+0x2a/0x420 [ 532.084548][T10390] ? __fget_files+0x3a6/0x420 [ 532.084564][T10390] ? __fget_files+0x2a/0x420 [ 532.084586][T10390] security_file_ioctl+0xc3/0x2a0 [ 532.084616][T10390] __se_sys_ioctl+0x47/0x170 [ 532.084638][T10390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.084658][T10390] do_syscall_64+0x174/0x580 [ 532.084682][T10390] ? trace_irq_disable+0x3b/0x140 [ 532.084703][T10390] ? clear_bhb_loop+0x40/0x90 [ 532.084725][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.084743][T10390] RIP: 0033:0x7f0ca563ce59 [ 532.084761][T10390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.084776][T10390] RSP: 002b:00007f0ca384c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.084796][T10390] RAX: ffffffffffffffda RBX: 00007f0ca58b6180 RCX: 00007f0ca563ce59 [ 532.084810][T10390] RDX: 0000200000000000 RSI: 0000000040806685 RDI: 0000000000000004 [ 532.084823][T10390] RBP: 00007f0ca384c090 R08: 0000000000000000 R09: 0000000000000000 [ 532.084835][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.084846][T10390] R13: 00007f0ca58b6218 R14: 00007f0ca58b6180 R15: 00007ffce1e628a8 [ 532.084876][T10390] [ 532.084883][T10390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.965101][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 532.965118][ T37] audit: type=1326 audit(1780857089.404:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.965162][ T37] audit: type=1326 audit(1780857089.404:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.965729][ T37] audit: type=1326 audit(1780857089.404:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.965972][ T37] audit: type=1326 audit(1780857089.404:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.966260][ T37] audit: type=1326 audit(1780857089.404:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.966522][ T37] audit: type=1326 audit(1780857089.404:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.967049][ T37] audit: type=1326 audit(1780857089.404:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.967380][ T37] audit: type=1326 audit(1780857089.404:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.967430][ T37] audit: type=1326 audit(1780857089.404:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 532.967791][ T37] audit: type=1326 audit(1780857089.404:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.8.1214" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f6ce59 code=0x7ffc0000 [ 533.158779][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1214'. [ 534.728632][ T6140] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 534.875915][T10407] netlink: 'syz.7.1210': attribute type 1 has an invalid length. [ 534.875958][T10407] netlink: 1388 bytes leftover after parsing attributes in process `syz.7.1210'. [ 534.899386][ T6140] usb 9-1: Using ep0 maxpacket: 32 [ 535.432731][ T6140] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 535.432757][ T6140] usb 9-1: config 0 has no interface number 0 [ 535.432800][ T6140] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 535.432823][ T6140] usb 9-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 535.432843][ T6140] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 535.432866][ T6140] usb 9-1: config 0 interface 196 has no altsetting 0 [ 535.437651][ T6140] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 535.437678][ T6140] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.437696][ T6140] usb 9-1: Product: syz [ 535.437709][ T6140] usb 9-1: Manufacturer: syz [ 535.437722][ T6140] usb 9-1: SerialNumber: syz [ 535.451657][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 535.727360][ T6140] usb 9-1: config 0 descriptor?? [ 535.728598][T10397] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 535.945395][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1217'. [ 536.449617][T10420] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 537.067905][ T6140] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 537.086442][ T6140] ipheth 9-1:0.196: probe with driver ipheth failed with error -71 [ 537.116014][ T6140] usb 9-1: USB disconnect, device number 2 [ 537.453311][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 537.636249][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 538.377222][T10439] netlink: 'syz.5.1225': attribute type 2 has an invalid length. [ 538.377243][T10439] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1225'. [ 538.676875][T10441] /dev/nullb0: Can't open blockdev [ 538.690475][T10441] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1226'. [ 538.700888][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1226'. [ 538.700908][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1226'. [ 539.262679][T10451] netlink: 'syz.8.1228': attribute type 1 has an invalid length. [ 539.262730][T10451] netlink: 1388 bytes leftover after parsing attributes in process `syz.8.1228'. [ 539.857393][ T5797] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 540.008713][ T5797] usb 6-1: Using ep0 maxpacket: 8 [ 540.015512][ T5797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 540.015547][ T5797] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 540.015569][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.047449][ T5797] usb 6-1: config 0 descriptor?? [ 540.418186][ T5797] usbhid 6-1:0.0: can't add hid device: -71 [ 540.418298][ T5797] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 540.510956][ T5797] usb 6-1: USB disconnect, device number 8 [ 542.079381][T10465] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1232'. [ 542.079405][T10465] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1232'. [ 542.079428][T10465] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1232'. [ 542.683737][T10479] FAULT_INJECTION: forcing a failure. [ 542.683737][T10479] name failslab, interval 1, probability 0, space 0, times 0 [ 542.683801][T10479] CPU: 0 UID: 0 PID: 10479 Comm: syz.7.1234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 542.683826][T10479] Tainted: [L]=SOFTLOCKUP [ 542.683833][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 542.683844][T10479] Call Trace: [ 542.683852][T10479] [ 542.683860][T10479] dump_stack_lvl+0xe8/0x150 [ 542.683887][T10479] should_fail_ex+0x46b/0x600 [ 542.683915][T10479] ? __pfx_sock_alloc_inode+0x10/0x10 [ 542.683936][T10479] should_failslab+0xa8/0x100 [ 542.683959][T10479] ? __pfx_sock_alloc_inode+0x10/0x10 [ 542.683977][T10479] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 542.683998][T10479] ? sock_alloc_inode+0x2c/0x190 [ 542.684021][T10479] ? __pfx_sock_alloc_inode+0x10/0x10 [ 542.684040][T10479] sock_alloc_inode+0x2c/0x190 [ 542.684060][T10479] ? __pfx_sock_alloc_inode+0x10/0x10 [ 542.684078][T10479] alloc_inode+0x6a/0x1b0 [ 542.684103][T10479] do_accept+0x144/0x760 [ 542.684126][T10479] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 542.684159][T10479] ? __pfx_do_accept+0x10/0x10 [ 542.684201][T10479] __sys_accept4+0x139/0x230 [ 542.684225][T10479] ? __pfx___sys_accept4+0x10/0x10 [ 542.684248][T10479] ? __pfx_ksys_write+0x10/0x10 [ 542.684276][T10479] __x64_sys_accept4+0x9a/0xb0 [ 542.684298][T10479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.684318][T10479] do_syscall_64+0x174/0x580 [ 542.684344][T10479] ? clear_bhb_loop+0x40/0x90 [ 542.684366][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.684385][T10479] RIP: 0033:0x7f9668cbce59 [ 542.684402][T10479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.684417][T10479] RSP: 002b:00007f9666ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 542.684438][T10479] RAX: ffffffffffffffda RBX: 00007f9668f36180 RCX: 00007f9668cbce59 [ 542.684452][T10479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 542.684462][T10479] RBP: 00007f9666ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 542.684475][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.684486][T10479] R13: 00007f9668f36218 R14: 00007f9668f36180 R15: 00007ffc52a38848 [ 542.684516][T10479] [ 543.676831][T10483] CIFS mount error: No usable UNC path provided in device string! [ 543.676831][T10483] [ 543.676981][T10483] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 544.450701][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1238'. [ 544.911040][T10495] netlink: 'syz.7.1240': attribute type 1 has an invalid length. [ 544.911107][T10495] netlink: 1388 bytes leftover after parsing attributes in process `syz.7.1240'. [ 545.488584][ T4924] Bluetooth: hci6: command 0x0406 tx timeout [ 545.875950][T10498] FAULT_INJECTION: forcing a failure. [ 545.875950][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 545.875983][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.5.1243 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 545.876008][T10498] Tainted: [L]=SOFTLOCKUP [ 545.876014][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.876025][T10498] Call Trace: [ 545.876033][T10498] [ 545.876042][T10498] dump_stack_lvl+0xe8/0x150 [ 545.876068][T10498] should_fail_ex+0x46b/0x600 [ 545.876098][T10498] should_failslab+0xa8/0x100 [ 545.876122][T10498] __kmalloc_noprof+0xdf/0x7b0 [ 545.876139][T10498] ? kfree+0x4d/0x6c0 [ 545.876155][T10498] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 545.876181][T10498] tomoyo_realpath_from_path+0xe3/0x5d0 [ 545.876203][T10498] ? tomoyo_domain+0xd7/0x130 [ 545.876226][T10498] ? tomoyo_path_number_perm+0x219/0x630 [ 545.876252][T10498] tomoyo_path_number_perm+0x246/0x630 [ 545.876279][T10498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 545.876303][T10498] ? __lock_acquire+0x6b5/0x2cf0 [ 545.876326][T10498] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.876377][T10498] ? __fget_files+0x2a/0x420 [ 545.876397][T10498] ? __fget_files+0x2a/0x420 [ 545.876412][T10498] ? __fget_files+0x3a6/0x420 [ 545.876428][T10498] ? __fget_files+0x2a/0x420 [ 545.876448][T10498] security_file_ioctl+0xc3/0x2a0 [ 545.876476][T10498] __se_sys_ioctl+0x47/0x170 [ 545.876507][T10498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.876526][T10498] do_syscall_64+0x174/0x580 [ 545.876550][T10498] ? trace_irq_disable+0x3b/0x140 [ 545.876568][T10498] ? clear_bhb_loop+0x40/0x90 [ 545.876590][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.876607][T10498] RIP: 0033:0x7f326f38ce59 [ 545.876624][T10498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.876639][T10498] RSP: 002b:00007f326d5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.876660][T10498] RAX: ffffffffffffffda RBX: 00007f326f605fa0 RCX: 00007f326f38ce59 [ 545.876673][T10498] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 545.876684][T10498] RBP: 00007f326d5de090 R08: 0000000000000000 R09: 0000000000000000 [ 545.876695][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.876705][T10498] R13: 00007f326f606038 R14: 00007f326f605fa0 R15: 00007ffd5a3697b8 [ 545.876733][T10498] [ 545.894067][T10498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.623027][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1247'. [ 546.624145][T10511] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1247'. [ 546.624208][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1247'. [ 546.687968][ T5609] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 546.730704][ T5609] Bluetooth: hci8: Injecting HCI hardware error event [ 546.764906][ T4924] Bluetooth: hci8: hardware error 0x00 [ 548.498609][ T5710] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 548.648854][ T5710] usb 7-1: Using ep0 maxpacket: 16 [ 548.652558][ T5710] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 548.652582][ T5710] usb 7-1: config 0 has no interface number 0 [ 548.652624][ T5710] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 548.652647][ T5710] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 548.699474][ T5710] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 548.699499][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.699518][ T5710] usb 7-1: Product: syz [ 548.699531][ T5710] usb 7-1: Manufacturer: syz [ 548.699545][ T5710] usb 7-1: SerialNumber: syz [ 548.790978][ T5710] usb 7-1: config 0 descriptor?? [ 548.793626][T10516] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 548.793821][T10516] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 548.968866][ T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 549.007535][T10516] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 549.007711][T10516] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 549.143545][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.143575][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.143616][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 549.143638][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.214487][ T5710] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 549.367996][T10531] FAULT_INJECTION: forcing a failure. [ 549.367996][T10531] name failslab, interval 1, probability 0, space 0, times 0 [ 549.368030][T10531] CPU: 0 UID: 0 PID: 10531 Comm: syz.7.1255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.368055][T10531] Tainted: [L]=SOFTLOCKUP [ 549.368065][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.368077][T10531] Call Trace: [ 549.368084][T10531] [ 549.368093][T10531] dump_stack_lvl+0xe8/0x150 [ 549.368129][T10531] should_fail_ex+0x46b/0x600 [ 549.368159][T10531] should_failslab+0xa8/0x100 [ 549.368183][T10531] __kmalloc_cache_noprof+0x84/0x690 [ 549.368205][T10531] ? alloc_pipe_info+0xe8/0x4d0 [ 549.368232][T10531] alloc_pipe_info+0xe8/0x4d0 [ 549.368256][T10531] splice_direct_to_actor+0xa19/0xc80 [ 549.368354][T10531] ? __lock_acquire+0x6b5/0x2cf0 [ 549.368380][T10531] ? kstrtouint+0x6e/0xe0 [ 549.368404][T10531] ? __pfx_direct_splice_actor+0x10/0x10 [ 549.368428][T10531] ? __lock_acquire+0x6b5/0x2cf0 [ 549.368448][T10531] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 549.368474][T10531] do_splice_direct+0x19b/0x2a0 [ 549.368496][T10531] ? __pfx_do_splice_direct+0x10/0x10 [ 549.368516][T10531] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 549.368542][T10531] ? rw_verify_area+0x25b/0x4e0 [ 549.368566][T10531] do_sendfile+0x547/0x7e0 [ 549.368622][T10531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.368654][T10531] ? __pfx_do_sendfile+0x10/0x10 [ 549.368690][T10531] __se_sys_sendfile64+0x144/0x1a0 [ 549.368717][T10531] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 549.368748][T10531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.368768][T10531] do_syscall_64+0x174/0x580 [ 549.368792][T10531] ? trace_irq_disable+0x3b/0x140 [ 549.368813][T10531] ? clear_bhb_loop+0x40/0x90 [ 549.368835][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.368854][T10531] RIP: 0033:0x7f9668cbce59 [ 549.368872][T10531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.368887][T10531] RSP: 002b:00007f9666f0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 549.368908][T10531] RAX: ffffffffffffffda RBX: 00007f9668f35fa0 RCX: 00007f9668cbce59 [ 549.368922][T10531] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 549.368933][T10531] RBP: 00007f9666f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 549.368945][T10531] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 549.368957][T10531] R13: 00007f9668f36038 R14: 00007f9668f35fa0 R15: 00007ffc52a38848 [ 549.368987][T10531] [ 549.392744][ T10] usb 10-1: usb_control_msg returned -32 [ 549.392789][ T10] usbtmc 10-1:16.0: can't read capabilities [ 549.609122][T10533] netlink: 'syz.8.1254': attribute type 1 has an invalid length. [ 549.609185][T10533] netlink: 1388 bytes leftover after parsing attributes in process `syz.8.1254'. [ 549.727477][ T4924] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 551.848564][ T10] usb 10-1: USB disconnect, device number 2 [ 551.950752][ T38] INFO: task syz.1.902:9130 blocked for more than 143 seconds. [ 551.950777][ T38] Tainted: G L syzkaller #0 [ 551.950777][ T38] Tainted: G L syzkaller #0 [ 551.950840][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.950866][ T38] task:syz.1.902 state:D stack:25752 pid:9130 tgid:9130 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 551.950920][ T38] Call Trace: [ 551.950927][ T38] [ 551.950939][ T38] __schedule+0x16ec/0x5620 [ 551.951075][ T38] ? __pfx___schedule+0x10/0x10 [ 551.951102][ T38] ? irqentry_exit+0x218/0x8b0 [ 551.951175][ T38] ? trace_irq_disable+0x3b/0x140 [ 551.951200][ T38] ? __pfx___schedule+0x10/0x10 [ 551.951225][ T38] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 551.951257][ T38] rt_mutex_schedule+0x76/0xf0 [ 551.951273][ T38] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 551.951340][ T38] __rt_mutex_slowlock_locked+0x1f28/0x2550 [ 551.951372][ T38] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 551.951399][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 551.951428][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 551.951507][ T38] ? rcu_is_watching+0x15/0xb0 [ 551.951538][ T38] __rwbase_read_lock+0xc3/0x180 [ 551.951558][ T38] ? __pfx___rwbase_read_lock+0x10/0x10 [ 551.951587][ T38] down_read+0x132/0x200 [ 551.951605][ T38] ? __pfx_down_read+0x10/0x10 [ 551.951694][ T38] page_cache_ra_order+0x2a5/0x490 [ 551.952318][ T38] do_sync_mmap_readahead+0x570/0x6a0 [ 551.952386][ T38] ? __pfx_filemap_get_entry+0x10/0x10 [ 551.952408][ T38] ? count_memcg_event_mm+0x1d/0x250 [ 551.953959][ T38] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 551.953993][ T38] ? count_memcg_event_mm+0x1d/0x250 [ 551.954065][ T38] ? count_memcg_event_mm+0x1d/0x250 [ 551.954091][ T38] filemap_fault+0x70c/0x1310 [ 551.954121][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 551.954141][ T38] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 551.954253][ T38] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 551.954280][ T38] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 551.954307][ T38] ? pte_alloc_one+0x1f9/0x380 [ 551.962655][ T5710] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 551.962930][ T5710] asix 7-1:0.34: probe with driver asix failed with error -71 [ 551.973161][ T38] __do_fault+0x138/0x2a0 [ 551.973270][ T38] do_pte_missing+0x65b/0x2950 [ 551.973307][ T38] handle_mm_fault+0xd30/0x1400 [ 551.973336][ T38] ? handle_mm_fault+0xec/0x1400 [ 551.973354][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 551.973372][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 551.973425][ T38] ? __pfx_do_futex+0x10/0x10 [ 551.973499][ T38] do_user_addr_fault+0xa73/0x1340 [ 551.973526][ T38] ? rcu_is_watching+0x15/0xb0 [ 551.973548][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 551.973571][ T38] exc_page_fault+0x6a/0xc0 [ 551.973598][ T38] asm_exc_page_fault+0x26/0x30 [ 551.973617][ T38] RIP: 0033:0x7fe40d0fbd18 [ 551.973633][ T38] RSP: 002b:00007ffd8f796398 EFLAGS: 00010202 [ 551.973651][ T38] RAX: 0000200000000040 RBX: 0000000000000004 RCX: 0030626c6c756e2f [ 551.973665][ T38] RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 0000200000000040 [ 551.973679][ T38] RBP: fffffffffffffffe R08: 0000001b32320000 R09: 0000000000000001 [ 551.973692][ T38] R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 00007ffd8f7964c0 [ 551.973705][ T38] R13: 00007fe40d3a5fac R14: 0000000000062b05 R15: 00007fe40d3a5fa0 [ 551.973735][ T38] [ 551.973793][ T38] [ 551.973793][ T38] Showing all locks held in the system: [ 551.973836][ T38] 5 locks held by kworker/0:1/10: [ 551.973875][ T38] #0: ffff88801d6f2538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 551.974012][ T38] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 551.974054][ T38] #2: ffff88802a142210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 551.974149][ T38] #3: ffff88802a4fc210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x970 [ 551.974192][ T38] #4: ffff888067e601d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 551.974285][ T38] 4 locks held by pr/legacy/17: [ 551.974298][ T38] 9 locks held by ksoftirqd/1/30: [ 551.974308][ T38] #0: ffffffff8de5f1c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 551.974350][ T38] #1: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 551.974389][ T38] #2: ffff8880b893af98 (&pool->cb_lock){+...}-{3:3}, at: bh_worker+0x7b/0x880 [ 551.974431][ T38] #3: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 551.974480][ T38] #4: ffff88801a035938 ((wq_completion)events_bh_highpri){+...}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 551.974522][ T38] #5: ffffc90000a4fb80 ((work_completion)(&bh->bh)){+...}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 551.974575][ T38] #6: ffff88802a0234a8 (&hub->irq_urb_lock){+.+.}-{3:3}, at: hub_resubmit_irq_urb+0x29/0x160 [ 551.974644][ T38] #7: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 551.974700][ T38] #8: ffffffff8ec0c0b8 (hcd_root_hub_lock){+.+.}-{3:3}, at: usb_hcd_submit_urb+0x261/0x1b50 [ 551.974789][ T38] 2 locks held by kdevtmpfs/33: [ 551.974799][ T38] #0: ffff88801c6d4480 (sb_writers){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 551.974842][ T38] #1: ffff88801b6b4e38 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __start_removing_path+0x1bc/0x310 [ 551.974895][ T38] 1 lock held by khungtaskd/38: [ 551.974905][ T38] #0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 551.974969][ T38] 2 locks held by kworker/u8:3/56: [ 551.974980][ T38] 5 locks held by kworker/u8:4/67: [ 551.975015][ T38] 2 locks held by getty/5364: [ 551.975025][ T38] #0: ffff888036d300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 551.975095][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 551.975152][ T38] 7 locks held by kworker/1:3/5710: [ 551.975165][ T38] 1 lock held by udevd/5867: [ 551.975175][ T38] 4 locks held by udevd/6044: [ 551.975187][ T38] 2 locks held by syz.3.881/9054: [ 551.975198][ T38] 1 lock held by syz.1.902/9130: [ 551.975208][ T38] #0: ffff888026362598 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x2a5/0x490 [ 551.975253][ T38] 4 locks held by kworker/u8:5/9340: [ 551.975264][ T38] 1 lock held by syz.2.1115/9910: [ 551.975274][ T38] #0: ffff8880263623c8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 551.975374][ T38] 1 lock held by syz.4.1117/9917: [ 551.975385][ T38] #0: ffff8880263623c8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 551.975435][ T38] 1 lock held by syz.0.1118/9921: [ 551.975445][ T38] #0: ffff8880263623c8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 551.975499][ T38] 4 locks held by syz-executor/10032: [ 551.975511][ T38] 1 lock held by syz-executor/10057: [ 551.975521][ T38] #0: ffff88806c34c480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 551.975568][ T38] 2 locks held by syz-executor/10063: [ 551.975582][ T38] 7 locks held by syz.6.1250/10516: [ 551.975592][ T38] 4 locks held by syz.5.1259/10545: [ 551.975603][ T38] #0: ffffffff8f3c05e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 551.975708][ T38] #1: ffffffff8f3c03f8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 551.975748][ T38] #2: ffff888036bfd178 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 551.975862][ T38] #3: ffff888029b70400 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 551.975929][ T38] 3 locks held by syz-executor/10549: [ 551.975942][ T38] [ 551.975946][ T38] ============================================= [ 551.975946][ T38] [ 551.975960][ T38] NMI backtrace for cpu 1 [ 551.975976][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.976000][ T38] Tainted: [L]=SOFTLOCKUP [ 551.976006][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.976016][ T38] Call Trace: [ 551.976024][ T38] [ 551.976032][ T38] dump_stack_lvl+0xe8/0x150 [ 551.976053][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 551.976100][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.976121][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 551.976145][ T38] sys_info+0x135/0x170 [ 551.976163][ T38] watchdog+0xfd3/0x1030 [ 551.976214][ T38] ? watchdog+0x1c9/0x1030 [ 551.976238][ T38] kthread+0x388/0x470 [ 551.976260][ T38] ? __pfx_watchdog+0x10/0x10 [ 551.976277][ T38] ? __pfx_kthread+0x10/0x10 [ 551.976299][ T38] ret_from_fork+0x514/0xb70 [ 551.976328][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 551.976347][ T38] ? __switch_to+0xc79/0x1410 [ 551.976374][ T38] ? __pfx_kthread+0x10/0x10 [ 551.976396][ T38] ret_from_fork_asm+0x1a/0x30 [ 551.976431][ T38] [ 551.976439][ T38] Sending NMI from CPU 1 to CPUs 0: [ 551.976469][ C0] NMI backtrace for cpu 0 [ 551.976485][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.976507][ C0] Tainted: [L]=SOFTLOCKUP [ 551.976514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.976523][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 551.976607][ C0] Code: e8 2e 1b 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4f 48 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 0a eb 05 cc 44 89 f9 80 e1 07 [ 551.976622][ C0] RSP: 0000:ffffc900001679d0 EFLAGS: 00000202 [ 551.976637][ C0] RAX: 1ffffffff3360d00 RBX: 00000000000003fd RCX: 0000000000000000 [ 551.976649][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 551.976659][ C0] RBP: ffffffff99b06bb0 R08: 0000000000000000 R09: 0000000000000000 [ 551.976670][ C0] R10: dffffc0000000000 R11: ffffffff853451d0 R12: dffffc0000000000 [ 551.976682][ C0] R13: 0000000000000000 R14: ffffffff99b06920 R15: 0000000000000000 [ 551.976693][ C0] FS: 0000000000000000(0000) GS:ffff888126187000(0000) knlGS:0000000000000000 [ 551.976706][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.976718][ C0] CR2: 00007f326d5bdd58 CR3: 000000006f8f6000 CR4: 00000000003526f0 [ 551.976733][ C0] Call Trace: [ 551.976739][ C0] [ 551.976746][ C0] wait_for_lsr+0x1aa/0x2f0 [ 551.976768][ C0] serial8250_console_write+0x120d/0x1b90 [ 551.976793][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 551.976812][ C0] ? console_flush_one_record+0xfa/0xb90 [ 551.976858][ C0] ? console_flush_one_record+0x48f/0xb90 [ 551.976879][ C0] console_flush_one_record+0x68b/0xb90 [ 551.976901][ C0] ? console_flush_one_record+0xfa/0xb90 [ 551.976922][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 551.976942][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 551.976972][ C0] legacy_kthread_func+0x1b6/0x250 [ 551.976992][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 551.977010][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 551.977053][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 551.977075][ C0] kthread+0x388/0x470 [ 551.977094][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 551.977111][ C0] ? __pfx_kthread+0x10/0x10 [ 551.977130][ C0] ret_from_fork+0x514/0xb70 [ 551.977148][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 551.977164][ C0] ? __switch_to+0xc79/0x1410 [ 551.977186][ C0] ? __pfx_kthread+0x10/0x10 [ 551.977206][ C0] ret_from_fork_asm+0x1a/0x30 [ 551.977231][ C0] [ 551.977475][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 551.977491][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.977515][ T38] Tainted: [L]=SOFTLOCKUP [ 551.977522][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.977532][ T38] Call Trace: [ 551.977540][ T38] [ 551.977546][ T38] vpanic+0x56c/0xa60 [ 551.977571][ T38] ? __pfx_vpanic+0x10/0x10 [ 551.977600][ T38] panic+0xc5/0xd0 [ 551.977620][ T38] ? __pfx_panic+0x10/0x10 [ 551.977648][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 551.977672][ T38] watchdog+0x102c/0x1030 [ 551.977698][ T38] ? watchdog+0x1c9/0x1030 [ 551.977722][ T38] kthread+0x388/0x470 [ 551.977742][ T38] ? __pfx_watchdog+0x10/0x10 [ 551.977760][ T38] ? __pfx_kthread+0x10/0x10 [ 551.977783][ T38] ret_from_fork+0x514/0xb70 [ 551.977804][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 551.977823][ T38] ? __switch_to+0xc79/0x1410 [ 551.977849][ T38] ? __pfx_kthread+0x10/0x10 [ 551.977872][ T38] ret_from_fork_asm+0x1a/0x30 [ 551.977906][ T38] [ 551.978306][ T38] Kernel Offset: disabled