last executing test programs: 1m49.999551528s ago: executing program 4 (id=818): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@afid={'afid', 0x3d, 0x6}}]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffe1d, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x5) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250500000004000180f33cb220f87f79c22182f3130417500460e620fdf43d64a50763818d7e0c3bc00445e9fdbbd75bc4a284977e686453bad2088f0087037b4c615f3397865bf3a7a5afe17104ec2c312b069c77a8d3c0d67383f8ada11a47d300690d90e55ec8e34f5881a4729a0f017e03046ff40ef950f33d8a12abc534abb0eadfefc988b088f533b809dd58e73eb1e4e4743f1f491a356fae70"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1m49.739326409s ago: executing program 4 (id=819): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000f077f07130bc808112b96bd9f9e46acc0d43e37be1f29a8386cc54524e8fea289ebca4b53ce8ca547a51d60685a5da2e575f441279467e597b5ff8c99c5eef78ff788f2a42baa7006f8dda643ccda6183ae5a75944a2d10c292df721b588603b6e16038fc05194ca2b13a9228a22", @ANYBLOB="c5a88f167ce8ad11a7d7edbec6942a549b436b4c3534a61a86edaedc77c74f03c6d6f44d6177a267049b5c6dec205e44f69b801ed16cfe1118326ee24d4ffbc7586ec3e10ac82fcb66851b7c4d32661a614edb50b079df8029cf66acd959554f27abaec8ec99475a18766ec718ef1a079541e3bb8ce7e4026c6f523a42df38b92cfe99ab3144abebd905530297f0062495961f3d31f84a584e6b44797dfe6d0d99f573cc02563b0a0faed44380748dfb57c6bbb539094812dd813984", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xcc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendto$inet(r7, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) getpid() 1m48.823563607s ago: executing program 4 (id=822): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/193, &(0x7f0000000340)=""/94, 0xdddd0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m48.790504942s ago: executing program 4 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x14927e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x250d28}], 0x1) (fail_nth: 6) 1m47.787072352s ago: executing program 4 (id=826): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1, 0xaf69, 0x24000000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) (async, rerun: 32) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002bbd7000fddbdf250f00000008003c00020000000500370001000000050035009bc0cf8547a303000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000840) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x5}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2000002, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235de1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x40000009}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x12aa, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3ff, 0x8000ab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32, 0xfffffffc}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x8, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x9, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x8, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x3}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x8, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8977}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x54}}, 0x400008c) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 1m47.565163181s ago: executing program 4 (id=829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r3, 0xffffd000) 1m31.901085436s ago: executing program 32 (id=829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r3, 0xffffd000) 13.301756699s ago: executing program 1 (id=1238): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x200000}, 0x1f00) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a548ba5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x10) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x10) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) syz_open_dev$tty20(0xc, 0x4, 0x1) 12.695910546s ago: executing program 1 (id=1240): ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000240)}) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect$printer(0x7, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x9c, 0x7f, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x85, 0xf6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x29, 0x4, 0xe}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x6, 0x9, 0x7, 0xef, 0x2}, 0x2c, &(0x7f00000002c0)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0xd, 0x7ff}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xb7, 0xff00, 0x10, [0xc00f, 0xff0030, 0xffff30, 0x0, 0xffc0cf]}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}, {0x91, &(0x7f0000000340)=@string={0x91, 0x3, "5ac5ff8072b9886abd167a7df3755926e86251deb4af9d01d4435c1071195ddc82543baffad2586948720639bb569b293282567902e1750f8782a03e22a3c71194ce3f695802a57dd61c1265194db36cff18431f166962e690a8f2b45600502ed008056c68724514e61282ee851ca21ffd784c830107f97ed68980a231916cca69dbaeb213863335fe4c6e1d56b9eb"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000440)=@string={0x4, 0x3, "faba"}}, {0xe1, &(0x7f0000000480)=@string={0xe1, 0x3, "6bcc85226bb508d3e1ca3deb97ea978a57c9933b5436f1801e6c91eb581a42a73c7d3a577de2f6bc79e891cc7793865cb679aff3a8e25c2e2887292dc09ab963537f95c43e0c47c92ea741c427cbe60f84291259bc21328bc4b79ba4cbdbffdf91e94fd7d466544a2e08d448d86ae335cdd279335871904f95e5c0dcbc512855f78671ccda8427c906657cc4f61b5a978314d099c1170717f90918733bc58cfd13ee3a863f7f59851014d26d9344591316020befb03d958dfcd2072c62c05875221c219bcb0726ea4f99810aa426e79f2225b6a330f6bfd3fc6708b41cd0b1"}}, {0x7a, &(0x7f0000000580)=@string={0x7a, 0x3, "d1bb8c514bef96e7d25f716e5ac6cb2314821a51348542194c70a59a2e9a23402a1df3d8b6eaef142f52b92408780f18b275f1fcbced7f8d28f95194ab8ea77941a5d6a4d79ba7874b558e3be13b4990778539abcef59fcd579c9f72f9cf6438be28aced94d97c9f85775a298ff8d98ed4c47fdc3193592d"}}, {0x5d, &(0x7f0000000600)=@string={0x5d, 0x3, "9de23db3cff6c99e1a46a65545833fd5d068d75bff4f7df8ea7fd294e5ef953328a4d177e088431b6db72bbaa325b53d7a476273a1cb91faec3fcd47c0afd65b32462348b23723fdb9862ed1aee78442ed8f6721af1c5dcc23bd5e"}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000700cddb00000000000000000000010500000000000800000000000100000500000008000000000200"/82], 0x0, 0x52, 0x0, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000003c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x9f, 0x56a, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xef, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0xc000, 0x8, 0x1, {0x22, 0x2e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x9, 0x81}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9e, 0x5, 0x4, 0xff, 0x33}, 0x38, &(0x7f0000000100)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "9b104f62cb2a137885e8ce4ab456766a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0x1, 0x4, 0xf001, 0x1c}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "902c933d4418fe5a72928fbfe3100095"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0a}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 10.271210192s ago: executing program 2 (id=1251): socket$key(0xf, 0x3, 0x2) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='xprtrdma_post_recvs\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000837000/0x2000)=nil, 0x2000, 0xb635773f04ebbeed, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x24200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xffff}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x5}]}, 0x5c}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x4b, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x5}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) landlock_create_ruleset(&(0x7f0000000040)={0x2802, 0x2, 0x1}, 0x18, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000104050020000000000000000300000005000100010000fd"], 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20004030) listen(0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2d, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffffffffffffff6f, 0x0, 0x28, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="d42e6188b39db0e12d5c5ace3481868591befa3bf25cccae902ce7a5344602d296f5455e3f8361574d87afef1ef13dd6b0"], 0x10b8}, 0xff4c) 10.04568558s ago: executing program 2 (id=1252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xa}, {0x6, 0x2, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7f, '\x00', 0x5c}, {0x0, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x9, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xfb}, {0x5, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x7, '\x00', 0x7f}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x0, 0x6, 0x7}}}}, 0xd) sched_setscheduler(0x0, 0x1, 0x0) getpid() ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6c, 0xf9, 0x6b, 0x10, 0x9e8, 0x62, 0x80f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x3e, 0xfc}}]}}]}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x4) 8.968386282s ago: executing program 1 (id=1259): syz_open_procfs(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x67) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="00faff0f0001eeff7f6faf9a1e4d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000050000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001340)={0x2020}, 0x2020) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) 6.645304346s ago: executing program 3 (id=1262): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x3e, 0x200, &(0x7f0000000180)="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"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, 0x0, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) dup3(0xffffffffffffffff, r8, 0x0) 6.531968013s ago: executing program 0 (id=1263): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff7f0000000000000d00080095"], &(0x7f00000000c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x4, 0x3b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r4, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x701820, 0x20) getdents64(r8, &(0x7f0000000380)=""/73, 0x49) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x58e2, 0xfde4, 0x20, &(0x7f0000000340)={[0x6]}, 0x8) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000002c0)={0x4, 0x1c9, &(0x7f0000000100)="726cf55fe5b30e1e31f9b83f6cf442862fcca613ea58742d049fe990fbdc422b89c4a0a03595d36d9cb80c0de6b8a454bb2df20f5a7b716a4357cff6cb3ee5b648aee9caaeee9cf1a4699c8c32b44735fc51de8372bffcf66df84d34bdb6a7e5935248b3f5b2378a206244178fa445f1ce8902951122f6a0", &(0x7f0000000500), 0x78}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) 6.426891645s ago: executing program 5 (id=1264): io_setup(0x1, &(0x7f00000004c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f00000002c0)={0x60, 0x0, 0x0, {{0x3ec6b1ed, 0x4, 0x8, 0x4, 0x6, 0xfffffffd, 0xfffffff8, 0x3}}}, 0x60) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.378383882s ago: executing program 1 (id=1265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010001000000fddbdf250e000000180001801400020076657468315f746f5f6873720000000060000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464457673696d3000000000000008000300020000001400020070696d36726567300000000000000000140002006772653000000000000000000000000020e3196a1a08ad5ba1b55d3f5219968f0b040f7eac819ada93dae3565eaa627cf1d58b44af8a6e2b2faef1a972e1d2ce4134b7e626740eb88dced7fd86d97687badecc4cb450062cc06f2c98d5361989787094757fe59fd7efb62ae014774f6de716e12ef2"], 0x8c}}, 0x20040001) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000980)={0x8001, 0xc84, 0x9, 0x7, 0x6e64}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYBLOB="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"], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d56"]) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x200, @remote}}}, 0x104) sendmmsg$inet6(r7, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000340)="4674aa57b4e5b4c6f9f60f2468a093037e966437e88def2344fb09acb26918e9c5b7beac3ecddcab4ae6718ebaa91a9b49f7ec6bf0e95f3f16d72bf7d0920e24bfb91d9cfe1352a06867a02ad3711bc38b2bdf206b957cd6ddeec8b6d0b2d446be3ba69eeaba9a6063d2da51f204649aa3d25c5a0e743d6cc32f00324a86f2d6cf6fe42787d4ce51c5a5fe6769b5937888f5eb6c50da334e817650b979a9d05d479c4fcb55dfb78b23a3f1dca7492e7bde3c2c2fc27cf6d322c8270939a7a81eed89086179ec63a0068fc1d8b22c1f37e24320ab1595e61169374658d323dd990c996c7a41d980a5084060218157474f779f8bc0960d231d", 0xf8}, {&(0x7f0000000440)="3d49a14a3578eb7bf18523112d29936cf9c7d52814b81af4cbe09f9c8250d7093fb7a7e0c1cd0b1d63a67d1a7d81ecfcccd2cac036f02cdfab4de6b636eb871b94326ad8ade3a234646c6072162aa4b4c5ceadd9f180ddfe43c2a2188ece503010ea8ab3409c23a35c5fe062a0d54429c97d10978f97ed6dc3dfa91e3cfbeb1685bf59218248ae066011478e18f85961ad1a788fbc3dce9e5d849a0f2501398f184ce5a95f36daa000f46b08ea3d9ab254c87a94df46aeaa368922b72b94d4af808b71c33ea78d9fc97f43bb880c129541c5", 0xd2}, {&(0x7f00000005c0)="730034020914a69147974c732359a8e9239d08a9fe28a6d487a06b32b8f0c1cdfb94b70efae5e73fc175ecf2fddb3bc4d263d66149e27b81f088471f56e90e234d7393a51f662b35b22976681284de7599b07e8d32d7015b8ce94f04a69cdff1dc3396f95d475599ac90bb5569236c79d0", 0x71}, {&(0x7f0000000640)="87a5f024513240299d4e755a6a9d70d73b788ca264638967a8358b16fb0c967042e6d8055082079cc1521aed4c94f023821bfd6f26a285f00b661104e7ad3ebcaf7eb80d44e0c8b8f818b82b1420bfe05d98e767e2d174e92eb3ea5b46c51e96547ed3c7dd40934026d94a83d7f0", 0x6e}], 0x4, &(0x7f0000001bc0)=ANY=[], 0x11f4}}], 0x1, 0x0) r9 = socket$inet6(0xa, 0x4, 0x202) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, 0x0, 0x0) 5.149361972s ago: executing program 3 (id=1266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x400000000000551d, 0x521000) mmap$xdp(&(0x7f0000336000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r1, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x402c031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x27, 0x2d, 0x0, &(0x7f0000000380)="f8ad48cc02cb29dcc8007f5b86dd0d00673776ce11fbb9236d3dfd3a8cfc9085741dd9c7ec8ba7d4bb81143798", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x11, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 5.143339379s ago: executing program 2 (id=1267): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0xb, 0x80805, 0x4) (async) socket(0xb, 0x80805, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x573c, &(0x7f00000000c0)={0x0, 0x2c5b, 0x40, 0x3, 0x270}, &(0x7f00000021c0), &(0x7f0000002240)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c00000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9b94e26b4b67521f451000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be57bf5fee09e4708f26915b4c971"], 0x258) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x800) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x143b) 4.788780132s ago: executing program 2 (id=1268): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6946c9832508c"}) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x10a}], 0x1) 4.787755382s ago: executing program 5 (id=1269): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b505a8e6c62273c803000000000000000100d982a280132af792b99caccff2b4d2dc2e1751cb"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x10, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x7, 0x7f, 0x5, 0x1, 0x6, 0x5f, 0x9, 0x15, 0xffff2d33, 0xff7fff01, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x80000, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129c32f6, 0x4, 0x5, 0xe, 0x2bf, 0x6c7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xfffffffe, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x80007fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x1, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x204, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93790, 0x3f, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x40008, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x9, 0x1, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x81, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x2c4ad71a, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x0, 0x938, 0xa, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x151, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x3, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket(0x10, 0x2, 0x0) write(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f00000002c0)={0x32, 0xfffffffc, 0x6}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ee85c8d0e3cb5869", 0x8, 0x10, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) 4.699553124s ago: executing program 2 (id=1270): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40000000000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x45, 0x1, 0x2, "6040a7170200ff0120000000fcff00ff1057e31e940000000000000000aeff00", 0x50313134}) utimes(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='bridge0\x00') request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r4, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xe737}}, 0x10) writev(r3, 0x0, 0x0) timerfd_create(0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000700)={{r1}, "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"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e6400000000140002800500010006000000080002"], 0x44}}, 0x40) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'adq12b\x00', [0x2f00, 0x5, 0xd09a, 0xfff7ffff, 0x3, 0x8, 0x20000044, 0x4000006, 0xffe, 0x9, 0x8, 0x11001, 0x9, 0x4, 0x0, 0x3, 0x1100005, 0x40000009, 0x830, 0x30000, 0x7fffffff, 0x2, 0x800, 0xe2dc, 0x2, 0x4, 0x7, 0x8, 0x4, 0xf358, 0x70f]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) 4.633346455s ago: executing program 0 (id=1271): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 4.175453381s ago: executing program 3 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000000)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.17318087s ago: executing program 0 (id=1273): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x8, 0x8001, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.165559175s ago: executing program 3 (id=1274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) socket$inet6(0xa, 0x2, 0x5) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x8800) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000f5ffffff0000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900010073797a30000000000900020073797a3000000000300003802c00038014000100726f7365300000000000000000fdffff13000100726f7365300000000000000000000000140000001000010000000000000000000000000a"], 0xe4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 3.139292156s ago: executing program 1 (id=1275): openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaabfaaaaaa1780c206050086ef88fc7b9ecb78fe5cdd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b936080000009af00659ab39e65121"], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf1995688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfce9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238501000000aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b8456931d2ea726ba9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7ded2dc47ec13c0f6af88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1acffa8054e9559dfae4697aa00b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e9798d4ec856993d53b9038ab44fdb0223d5a11c9", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r7 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x5) dup2(0xffffffffffffffff, r9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) 2.910425742s ago: executing program 3 (id=1276): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x4010, 0xffffffffffffffff, 0x441f0000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x24000050}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf253100000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x6, r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x28ca00, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r8, &(0x7f0000002000)='`', 0x88020) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, &(0x7f0000000340)) r9 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r9, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) 2.904681101s ago: executing program 0 (id=1277): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x3, 0xdc3}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, r7) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000340)=0x3) 2.766852984s ago: executing program 5 (id=1278): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 2.675266815s ago: executing program 0 (id=1279): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xb2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f00000001c0)='./file2\x00', 0x800c1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f0000000240)="2acd4aecf91c42629a13fe53", 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r7, 0x1}}, 0x18) r8 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e24, 0x6c9, @remote, 0x200}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @empty, 0x7}, 0x1c) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) 1.35740591s ago: executing program 0 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60880d0000060102000000000000000000000000140007800800124000060000080013400000000213000300686173683a6e65742c69666163650000050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000240)="8748efbd854360cd18a65e526c4df850f98bfd206983e5a94bd08e0ba1", 0x1d}, {&(0x7f0000000280)="d3b95c97dcd3a2f353dd9106c7920222ad7a4d1b354a9cd8ee59a68c9084556ce3b56029ec24dbe2df3e3ed3c59e96c6143bfa0ac4f9414f43f2da49c2a0ea018aab0fd314ec5f05e29f51530c8fce42427a53a539788ab98a9fa45b659d13b8658afd1c073026b05f30ee8916a8e633ed119217bae4cf3ce0efaa4798f29e4e3a77cdb1333f3e4e2e479af8e86cce7f4d4a408d2a7282a0b741e8525d61056fb3bc9bb9b71d4080917e82942d980c5b65eec6696121d7dd34a0f8881382abeb130273174d606ec9e1ce050519443bd5afa71f7525ff75ceea3365d76fce6d790aae912db8b996140589d23b65e159", 0xef}, {&(0x7f0000000380)="8fca270b7d39f081f5f44b9b4d36083b4b04df074e5d0e7f42fe935e5e22e4ce78f659f398162d3f8083777924ba233fe5b510f7e0965c994a8f4b49b05d230026aa489bcf43183c8412e174287833e0757660cf3f00fc90b5211aa13608fca5d5b89d337704e321f2050bbce8cd81bd441b0b7b2681984f6a131a7542cb3ce21e29e14a1630a2e4d77202f5c6", 0x8d}, {&(0x7f0000000440)="502b88f81c073386dc509ad370752a6fb2d4e9c1c88853a0c83af9549277a4908435aae0e554a6baac899151aa1896f1fdd77e1a23943089a5e5c6ab02aab7d49f99db1b6d1631df20aff0cf0934ec43f3a01865d78bbdc8b7ff2147d4eb4d1fd9fb6a803c4cbea192f8f6ad3f4f064ef45a3bfff5aa4dfacdf7568170d31bfc5dcb2e89504661696b75e74861e4519a6cc0d452032f047abe4da357a9c9b06c4c838aebd6f24582f8cf5f08874bfc7960007a7020b511bc2a", 0xb9}, {&(0x7f0000000cc0)="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", 0x1000}], 0x5}, 0x8004) (async) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000240)="8748efbd854360cd18a65e526c4df850f98bfd206983e5a94bd08e0ba1", 0x1d}, {&(0x7f0000000280)="d3b95c97dcd3a2f353dd9106c7920222ad7a4d1b354a9cd8ee59a68c9084556ce3b56029ec24dbe2df3e3ed3c59e96c6143bfa0ac4f9414f43f2da49c2a0ea018aab0fd314ec5f05e29f51530c8fce42427a53a539788ab98a9fa45b659d13b8658afd1c073026b05f30ee8916a8e633ed119217bae4cf3ce0efaa4798f29e4e3a77cdb1333f3e4e2e479af8e86cce7f4d4a408d2a7282a0b741e8525d61056fb3bc9bb9b71d4080917e82942d980c5b65eec6696121d7dd34a0f8881382abeb130273174d606ec9e1ce050519443bd5afa71f7525ff75ceea3365d76fce6d790aae912db8b996140589d23b65e159", 0xef}, {&(0x7f0000000380)="8fca270b7d39f081f5f44b9b4d36083b4b04df074e5d0e7f42fe935e5e22e4ce78f659f398162d3f8083777924ba233fe5b510f7e0965c994a8f4b49b05d230026aa489bcf43183c8412e174287833e0757660cf3f00fc90b5211aa13608fca5d5b89d337704e321f2050bbce8cd81bd441b0b7b2681984f6a131a7542cb3ce21e29e14a1630a2e4d77202f5c6", 0x8d}, {&(0x7f0000000440)="502b88f81c073386dc509ad370752a6fb2d4e9c1c88853a0c83af9549277a4908435aae0e554a6baac899151aa1896f1fdd77e1a23943089a5e5c6ab02aab7d49f99db1b6d1631df20aff0cf0934ec43f3a01865d78bbdc8b7ff2147d4eb4d1fd9fb6a803c4cbea192f8f6ad3f4f064ef45a3bfff5aa4dfacdf7568170d31bfc5dcb2e89504661696b75e74861e4519a6cc0d452032f047abe4da357a9c9b06c4c838aebd6f24582f8cf5f08874bfc7960007a7020b511bc2a", 0xb9}, {&(0x7f0000000cc0)="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", 0x1000}], 0x5}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = epoll_create(0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000001c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000480)={0x0, 0x2, 0x0, 0xffffffff}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000480)={0x0, 0x2, 0x0, 0xffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000600)={0x10000, 0x0, {[0x8001, 0xf2b0, 0xff, 0x2, 0x3, 0x9, 0x9, 0xdc72]}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xe, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x7ffc, 0x0, 0x10, 0x2, 0x4000000, 0x2, 0x0, 0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x1, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x705, 0x2, 0x0, 0x0, 0x403, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200001, 0x0, 0x320146f1, 0x4, 0x0, 0x0, 0x1]}, 0x45c) (async) write$uinput_user_dev(r4, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xe, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x7ffc, 0x0, 0x10, 0x2, 0x4000000, 0x2, 0x0, 0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x1, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x705, 0x2, 0x0, 0x0, 0x403, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200001, 0x0, 0x320146f1, 0x4, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x1, 0xffff5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120f0000000000406d0495c2000000000001280224d272ba4b3e54abf3e6e9fa1c2d907fb668bb86880130f0000100000000090400000103000000092100000001220507090581032000000000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220500008949057181a0"], 0x0}, 0x0) 1.329220099s ago: executing program 3 (id=1281): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/fs/cgroup', 0x0, 0x100) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="181f736a5900000018008d00"/22], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r1}, 0xffffffffffffffd6) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x17, &(0x7f0000000000)=r2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x40400) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x18080, 0x1, 0xfffdfffc}, &(0x7f0000000000), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x100081, 0x27, 0x2, 0x138, 0x0, r3}, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802400076e3cc2186cc67f636b65740001140002800800024000000003080001400000000230000180080001006e61740024000280084eba424e4a4ffa8700024000000002080001400000000108000740000000580900010073797a30cc396dbc4b64efd9000000000900020073797a3200000000140000001100010000000000000000000000000acc36a6601dd484fe33115b445015e6e6508e9d43746918e6e809000000000000006743e6"], 0xac}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x800448d2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r11) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c00ff01d5e5c388203e7af2a9a4fc8b501d71ff50a8783d1a1f365f60f22862155b89cadac20710f2513ca18a551ac06f53c0f07cfeb568263630844788513453cb42e6e8e2ca099f08d427affbeb84e94c7b127ffd883ba945175b2b4987c640d1e3c9927f4d93644a445d9083db258b4f1ff545a5650ca794f4fb29f8ff8db0b334df886bf4d1fd2e84a2973d4ebb838bfeb7a628c83eecffa59c5d8470175573d93272792da5f8e9db767d087afffaa79d9ccaedc64467b1c66e0a8bbf720d6976904b8da7ad672ce505560f", @ANYRES16=r12, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e000000000000000000200003801c0003801800018008000100320000000a000200407b2f2e2d000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x400048c1) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080001000000000030f159d9638bcb7076fce7797a90962cb742875678875392d7ef61741182b9384389c354bc3818095ae670d60498d18571d799cd8bf42a0f86c38e3f6e0e29e6328cad03a75b4d73a203ab1baf8abdce4668027ac731c7c00eb5c4912d8220eba3fa3984697df71c3d77ae81c300754b7f1544b384a6be3638e95c9f2223a1ffea5a2c3dbc2912dce3149efa4c04bcaaa40d2d74b96ce7bc349d2caeac337bccb0eef2aa06cb78e2241d6f872afcc2c11a201a10cb0a9f0f7115737a061306880223006e"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.09268885s ago: executing program 2 (id=1282): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 'id1\x00'}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="75bcde43163c"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '%)\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9964590}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xff}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x56000}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '{\x1c,:\x00'}, @IPSET_ATTR_COMMENT={0x7, 0x1a, ']1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xd50}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CIDR2={0x5}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x10}, 0x20000814) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x294, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x644}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa496}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x54}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b8b}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6ae5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7b02}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2f6}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8c3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcef4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d85}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xba}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3661}]}]}]}, 0x294}}, 0x8050) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000700)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0xa, 0x1, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000900)={r3, 0x0, r4, 0x800, 0x8, 0x6, 0x0, 0x0, 0x5, 0xcd, 0x7, 0x2}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x188, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x339c}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) syz_open_dev$MSR(&(0x7f0000000c00), 0xf4, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000c40)={0x0, 0x10000}, &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000cc0)={0xdab, 0x8200, 0x7, 0x1, r6}, &(0x7f0000000d00)=0x10) pipe2$watch_queue(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000d80)=0x5b73f723) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101002, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000e00)=0x4, 0x4) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000e40), 0x400080) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f0000000e80)=0xfffffffffffffff7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2242, 0x0) renameat2(r9, &(0x7f0000000f00)='./file0\x00', r7, &(0x7f0000000f40)='./file0\x00', 0x0) r11 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000f80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x400, 0xff, 0x3}, {0x9, 0x5, 0xd, 0x2, 0x10, 0x0, 0x9, 0xd3}, {0x9, 0x5, 0x5, 0x3, 0x3ff, 0x4, 0x26, 0xb}}}}}}]}}, 0x0) syz_usb_control_io(r11, &(0x7f0000001180)={0x2c, &(0x7f0000000fc0)={0x20, 0xa, 0xab, {0xab, 0xc, "31bfffa472cd250935a7654675d9b3213a6524db74bfc0f7ae49a965548f46ac643c8c6db78427a458baf1c6afff678a810960a3078fd87e923283031483360ab03ba1f0845060a8d5a952d23498bd90db354a7b76ffd63e0a539830fcacce3ac5d05ad1841488a386602d4f9ff3916b326a28073eac2ef02449549f5cd7019420ca1845a0fcae1b0e6390c5ceea080f770c4024c12cacffd42b29309cbf418564e9e5836decd9c0cf"}}, &(0x7f0000001080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}, &(0x7f00000010c0)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x4d58, 0x0, 0x7, [0x0, 0x3f3f, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x8, 0x4f, "12c279fb", "814895ae"}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x3, 0x5, 0x33, 0x1, 0x6, 0x8}}}, &(0x7f0000001640)={0x84, &(0x7f00000011c0)={0x40, 0xc, 0x90, "dada66eae73841f815c1e91e66e2bfb5c6b0d361414add677ea4ded80949edf163bc5c56ddb8b7527aa1d13b55ea94b577d65597dce0aba62b47ae8a4dcb2bc550c06d2d990109ca02962617cba86a22f88900a68e17c00f11249fc834db3d4ebfe683ea6ed42a9fbb74ce15f5471c72ac72b989046e03eca24f154cfebcbbc140f4ccc919c2244e64d8f606114adad6"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000001380)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000001400)={0x40, 0xb, 0x2, "9c18"}, &(0x7f0000001440)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000014c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001500)={0x40, 0x19, 0x2, "ac8d"}, &(0x7f0000001540)={0x40, 0x1a, 0x2, 0xbcf7}, &(0x7f0000001580)={0x40, 0x1c, 0x1, 0x91}, &(0x7f00000015c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001600)={0x40, 0x21, 0x1, 0xd8}}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10008000}, 0x890) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r10, 0x10, &(0x7f0000001800)={0x2}) r12 = socket(0x21, 0xa850b5d60fd838ee, 0xffffffff) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001840)={0x74, 0x0, 0x22}) sendmsg$IPSET_CMD_TEST(r12, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x840) setresgid(0x0, 0x0, 0x0) 769.008614ms ago: executing program 1 (id=1283): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318321bd7000b4ff0000190000000c0001800800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42, 0x120) lseek(r5, 0x5, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) inotify_init() inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = dup(r6) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x268}}, 0x40000000) 631.294655ms ago: executing program 5 (id=1284): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 210.841868ms ago: executing program 5 (id=1285): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x6, 0x8}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffff7, 0xb30, 0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"65ba53bc62517f8222efff92b9d5ac9f", 0x0, 0x0, {0x7fff}, {0x55e, 0x1935b26d}, 0x10000, [0x1, 0x3ff, 0x1, 0x5, 0x2, 0x1, 0x6, 0x4, 0x401, 0x8000, 0x6, 0x80000001, 0x2, 0xf, 0xc3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r0}, r1, 0x4, @unused=[0x3, 0x7, 0x4], @subvolid=0xf}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0xd, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x10, 0x3f2, 0x800, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001400)=0x4, &(0x7f0000001440)=0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xe, 0x6}, {0xb, 0xf, 0x6}, {0x4, 0x80c, 0xe}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x2e, 0x61, 0x61, 0x61]}}, &(0x7f00000015c0)=""/69, 0x52, 0x45, 0x0, 0x4, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x20, &(0x7f0000001780)={&(0x7f0000001700)=""/6, 0x6, 0x0, &(0x7f0000001740)=""/35, 0x23}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0x6, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb}, [@generic={0x6, 0x7, 0x9, 0x7, 0xfffff801}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x71}]}, &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x18, &(0x7f0000001500)=""/24, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, r5, 0x8, &(0x7f0000001680)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0xc, 0x3, 0x4}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f0000001900)=[r7, r8, r9], &(0x7f0000001940)=[{0x4, 0x5, 0xa, 0x5}], 0x10, 0xd}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x60, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf35}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x80) syz_open_dev$vim2m(&(0x7f0000001bc0), 0x3, 0x2) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000001c40)={0x2, 0x16, "6af5f4183e6426d6f6e70ca14dcdd6fa58565e9a287b"}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r13, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001dc0)='/sys/power/pm_freeze_timeout', 0x0, 0x80) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000001e00)={'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x28, r15, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14000010}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000020c0)={0xffffffffffffffff, &(0x7f0000001fc0)="a213c5752fd38886333e51db136e39ed201be8a07f4affa36b3f1f9218dd32e4059f4cfb8a7da98c4d4f5f75fca25c3574b90e7e21513b54888577a1a4b17ba0ab38bfc01ce985eed5591534988328f54a4d7b9244997fa83bd317bcd6", &(0x7f0000002040)=""/113, 0x4}, 0x20) 0s ago: executing program 5 (id=1286): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x5f1600, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r0) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x82}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x82}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB="6900000010000104a41ebab9ec28521884d6699e031c00"/32, @ANYRES32=0x0, @ANYBLOB="000000000080000014000300697036746e6c30000000000000000000280012800b000100697036746e6c0000180002801400020000000000000000000000ffff64010101"], 0x5c}}, 0x20000084) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB="6900000010000104a41ebab9ec28521884d6699e031c00"/32, @ANYRES32=0x0, @ANYBLOB="000000000080000014000300697036746e6c30000000000000000000280012800b000100697036746e6c0000180002801400020000000000000000000000ffff64010101"], 0x5c}}, 0x20000084) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_mr_vif\x00') read$FUSE(r11, &(0x7f0000002640)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r12, 0x0, 0xd76}, 0x18) lsm_get_self_attr(0x65, &(0x7f0000000ac0)={0x0, 0x0, 0xa5, 0x85, ""/133}, &(0x7f00000004c0)=0xa5, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="780000001000190026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02250000400100001400030076657468315f766972745f776966690008002800a54600003c002b8008000100", @ANYRES32, @ANYBLOB="080002"], 0x78}}, 0x10402) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="780000001000190026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02250000400100001400030076657468315f766972745f776966690008002800a54600003c002b8008000100", @ANYRES32, @ANYBLOB="080002"], 0x78}}, 0x10402) kernel console output (not intermixed with test programs): any interfaces: 66, using maximum allowed: 32 [ 279.393302][ T5845] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 279.427347][ T5970] ljca 3-1:0.66: probe with driver ljca failed with error -71 [ 279.480141][ T5845] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.516148][ T5970] usb 3-1: USB disconnect, device number 31 [ 279.522832][ T5845] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.562625][ T5845] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.581693][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.589903][ T5845] usb 5-1: Product: syz [ 279.594540][ T5845] usb 5-1: Manufacturer: syz [ 279.603285][ T5845] cdc_wdm 5-1:1.0: skipping garbage [ 279.608564][ T5845] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 280.128742][ T30] audit: type=1400 audit(1758913510.397:843): avc: denied { ioctl } for pid=9332 comm="syz.3.805" path="socket:[24139]" dev="sockfs" ino=24139 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.155878][ T5845] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 280.401752][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 280.412070][ T5845] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 280.427734][ T5845] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 280.440385][ T5845] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 280.452139][ T5845] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 280.461183][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.469438][ T5845] usb 2-1: Product: syz [ 280.473669][ T5845] usb 2-1: Manufacturer: syz [ 280.478457][ T5845] usb 2-1: SerialNumber: syz [ 280.487319][ T5845] hso 2-1:6.0: Can't find BULK IN endpoint [ 280.715644][ T9344] FAULT_INJECTION: forcing a failure. [ 280.715644][ T9344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.728804][ T9344] CPU: 0 UID: 0 PID: 9344 Comm: syz.2.807 Not tainted syzkaller #0 PREEMPT(full) [ 280.728828][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.728838][ T9344] Call Trace: [ 280.728845][ T9344] [ 280.728852][ T9344] dump_stack_lvl+0x16c/0x1f0 [ 280.728879][ T9344] should_fail_ex+0x512/0x640 [ 280.728905][ T9344] _copy_to_user+0x32/0xd0 [ 280.728933][ T9344] kvm_vcpu_ioctl+0x771/0x1690 [ 280.728960][ T9344] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 280.728983][ T9344] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.729006][ T9344] ? do_vfs_ioctl+0x128/0x14f0 [ 280.729034][ T9344] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 280.729061][ T9344] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 280.729097][ T9344] ? hook_file_ioctl_common+0x145/0x410 [ 280.729123][ T9344] ? selinux_file_ioctl+0x180/0x270 [ 280.729146][ T9344] ? selinux_file_ioctl+0xb4/0x270 [ 280.729172][ T9344] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 280.729196][ T9344] __x64_sys_ioctl+0x18b/0x210 [ 280.729224][ T9344] do_syscall_64+0xcd/0x4e0 [ 280.729250][ T9344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.729267][ T9344] RIP: 0033:0x7f3c8e18eacb [ 280.729282][ T9344] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 280.729299][ T9344] RSP: 002b:00007f3c8efaa490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.729316][ T9344] RAX: ffffffffffffffda RBX: 00007f3c8efaabe0 RCX: 00007f3c8e18eacb [ 280.729328][ T9344] RDX: 00007f3c8efaaaa0 RSI: 000000008138ae83 RDI: 0000000000000007 [ 280.729338][ T9344] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000063 [ 280.729349][ T9344] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000018 [ 280.729360][ T9344] R13: 0000200000ffd000 R14: 0000200000fe5000 R15: 00000000fec00000 [ 280.729385][ T9344] [ 280.914320][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.986720][ T5845] usb 2-1: USB disconnect, device number 34 [ 281.360159][ T7864] usb 5-1: USB disconnect, device number 38 [ 281.565111][ T9362] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 281.571053][ T9362] [U] J"—e:ÀÆ" [ 281.877605][ T9371] overlayfs: failed to resolve './file1': -2 [ 282.390508][ T9373] vxcan1 speed is unknown, defaulting to 1000 [ 282.632621][ T9375] pim6reg1: entered promiscuous mode [ 282.640298][ T9375] pim6reg1: entered allmulticast mode [ 282.717886][ T9377] 9pnet_fd: Insufficient options for proto=fd [ 283.391779][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 283.653373][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.671225][ T9] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 283.679595][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.688828][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.704578][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.714128][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.722332][ T9] usb 2-1: Product: syz [ 283.726811][ T9] usb 2-1: Manufacturer: syz [ 283.739413][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 283.744759][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 284.152315][ T9401] FAULT_INJECTION: forcing a failure. [ 284.152315][ T9401] name failslab, interval 1, probability 0, space 0, times 0 [ 284.165065][ T9401] CPU: 0 UID: 0 PID: 9401 Comm: syz.4.823 Not tainted syzkaller #0 PREEMPT(full) [ 284.165090][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.165100][ T9401] Call Trace: [ 284.165107][ T9401] [ 284.165115][ T9401] dump_stack_lvl+0x16c/0x1f0 [ 284.165143][ T9401] should_fail_ex+0x512/0x640 [ 284.165165][ T9401] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 284.165188][ T9401] should_failslab+0xc2/0x120 [ 284.165208][ T9401] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 284.165226][ T9401] ? trace_sched_exit_tp+0xd1/0x120 [ 284.165246][ T9401] ? getname_flags.part.0+0x4c/0x550 [ 284.165276][ T9401] getname_flags.part.0+0x4c/0x550 [ 284.165305][ T9401] getname_flags+0x93/0xf0 [ 284.165324][ T9401] do_sys_openat2+0xb8/0x1d0 [ 284.165349][ T9401] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.165374][ T9401] ? __pfx___schedule+0x10/0x10 [ 284.165393][ T9401] ? hook_file_ioctl_common+0x145/0x410 [ 284.165419][ T9401] __x64_sys_openat+0x174/0x210 [ 284.165444][ T9401] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.165467][ T9401] ? selinux_file_ioctl+0xb4/0x270 [ 284.165502][ T9401] do_syscall_64+0xcd/0x4e0 [ 284.165528][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.165547][ T9401] RIP: 0033:0x7ff0d9b8d710 [ 284.165562][ T9401] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 284.165578][ T9401] RSP: 002b:00007ff0d7dd3470 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 284.165595][ T9401] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff0d9b8d710 [ 284.165607][ T9401] RDX: 0000000000000002 RSI: 00007ff0d9c11c88 RDI: 00000000ffffff9c [ 284.165617][ T9401] RBP: 00007ff0d9c11c88 R08: 0000000000000000 R09: 0000000000000080 [ 284.165627][ T9401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.165637][ T9401] R13: 0000000000000063 R14: 0000200000fe5000 R15: 0000200000fe6800 [ 284.165661][ T9401] [ 284.362389][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.096376][ T30] audit: type=1400 audit(1758913515.607:844): avc: denied { setattr } for pid=5842 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.119465][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.150753][ T9430] overlayfs: failed to resolve './file1': -2 [ 286.201466][ T978] usb 2-1: USB disconnect, device number 35 [ 286.351331][ T30] audit: type=1400 audit(1758913516.857:845): avc: denied { ioctl } for pid=9451 comm="syz.1.833" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 286.532510][ T30] audit: type=1400 audit(1758913516.857:846): avc: denied { set_context_mgr } for pid=9451 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 286.548679][ T9457] binder: 9451:9457 ioctl c04064a0 200000000300 returned -22 [ 286.552217][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.598299][ T5845] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 286.603781][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.834'. [ 287.200242][ T9463] FAULT_INJECTION: forcing a failure. [ 287.200242][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 287.238249][ T9463] CPU: 1 UID: 0 PID: 9463 Comm: syz.2.835 Not tainted syzkaller #0 PREEMPT(full) [ 287.238276][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.238287][ T9463] Call Trace: [ 287.238293][ T9463] [ 287.238299][ T9463] dump_stack_lvl+0x16c/0x1f0 [ 287.238329][ T9463] should_fail_ex+0x512/0x640 [ 287.238355][ T9463] should_failslab+0xc2/0x120 [ 287.238377][ T9463] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 287.238397][ T9463] ? skb_clone+0x190/0x3f0 [ 287.238422][ T9463] skb_clone+0x190/0x3f0 [ 287.238444][ T9463] netlink_deliver_tap+0xabd/0xd30 [ 287.238473][ T9463] netlink_unicast+0x64c/0x870 [ 287.238500][ T9463] ? __pfx_netlink_unicast+0x10/0x10 [ 287.238523][ T9463] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 287.238554][ T9463] netlink_sendmsg+0x8d1/0xdd0 [ 287.238582][ T9463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.238623][ T9463] ____sys_sendmsg+0xa98/0xc70 [ 287.238650][ T9463] ? copy_msghdr_from_user+0x10a/0x160 [ 287.238672][ T9463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.238711][ T9463] ___sys_sendmsg+0x134/0x1d0 [ 287.238734][ T9463] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.238789][ T9463] __sys_sendmsg+0x16d/0x220 [ 287.238812][ T9463] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.238851][ T9463] do_syscall_64+0xcd/0x4e0 [ 287.238876][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.238894][ T9463] RIP: 0033:0x7f3c8e18eec9 [ 287.238909][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.238925][ T9463] RSP: 002b:00007f3c8efee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.238941][ T9463] RAX: ffffffffffffffda RBX: 00007f3c8e3e5fa0 RCX: 00007f3c8e18eec9 [ 287.238953][ T9463] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 287.238964][ T9463] RBP: 00007f3c8efee090 R08: 0000000000000000 R09: 0000000000000000 [ 287.238974][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.238985][ T9463] R13: 00007f3c8e3e6038 R14: 00007f3c8e3e5fa0 R15: 00007ffc84e68d38 [ 287.239010][ T9463] [ 287.798611][ T30] audit: type=1400 audit(1758913518.307:847): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 287.818431][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.951828][ T978] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 288.101974][ T9499] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 288.107924][ T9499] [U] J"—e:ÀÆ" [ 288.251483][ T9503] overlayfs: failed to resolve './file1': -2 [ 289.412678][ T30] audit: type=1400 audit(1758913519.917:848): avc: denied { map } for pid=9507 comm="syz.2.847" path="socket:[23376]" dev="sockfs" ino=23376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.436786][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.495306][ T30] audit: type=1400 audit(1758913519.917:849): avc: denied { read } for pid=9507 comm="syz.2.847" path="socket:[23376]" dev="sockfs" ino=23376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.519467][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.686616][ T9526] FAULT_INJECTION: forcing a failure. [ 289.686616][ T9526] name failslab, interval 1, probability 0, space 0, times 0 [ 289.701084][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.1.850 Not tainted syzkaller #0 PREEMPT(full) [ 289.701109][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.701120][ T9526] Call Trace: [ 289.701125][ T9526] [ 289.701132][ T9526] dump_stack_lvl+0x16c/0x1f0 [ 289.701160][ T9526] should_fail_ex+0x512/0x640 [ 289.701182][ T9526] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 289.701204][ T9526] should_failslab+0xc2/0x120 [ 289.701225][ T9526] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 289.701244][ T9526] ? __alloc_skb+0x2b2/0x380 [ 289.701269][ T9526] __alloc_skb+0x2b2/0x380 [ 289.701288][ T9526] ? __pfx___alloc_skb+0x10/0x10 [ 289.701318][ T9526] netlink_ack+0x15d/0xb80 [ 289.701342][ T9526] ? rcu_is_watching+0x12/0xc0 [ 289.701370][ T9526] netlink_rcv_skb+0x332/0x420 [ 289.701393][ T9526] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 289.701417][ T9526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.701438][ T9526] ? __pfx___mutex_lock+0x10/0x10 [ 289.701480][ T9526] xfrm_netlink_rcv+0x71/0x90 [ 289.701499][ T9526] netlink_unicast+0x5aa/0x870 [ 289.701526][ T9526] ? __pfx_netlink_unicast+0x10/0x10 [ 289.701549][ T9526] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 289.701586][ T9526] netlink_sendmsg+0x8d1/0xdd0 [ 289.701617][ T9526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.701649][ T9526] ____sys_sendmsg+0xa98/0xc70 [ 289.701676][ T9526] ? copy_msghdr_from_user+0x10a/0x160 [ 289.701697][ T9526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.701736][ T9526] ___sys_sendmsg+0x134/0x1d0 [ 289.701759][ T9526] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.701815][ T9526] __sys_sendmsg+0x16d/0x220 [ 289.701837][ T9526] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.701877][ T9526] do_syscall_64+0xcd/0x4e0 [ 289.701901][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.701919][ T9526] RIP: 0033:0x7fdb0118eec9 [ 289.701934][ T9526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.701951][ T9526] RSP: 002b:00007fdb02003038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.701969][ T9526] RAX: ffffffffffffffda RBX: 00007fdb013e5fa0 RCX: 00007fdb0118eec9 [ 289.701981][ T9526] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 289.701992][ T9526] RBP: 00007fdb02003090 R08: 0000000000000000 R09: 0000000000000000 [ 289.702003][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.702013][ T9526] R13: 00007fdb013e6038 R14: 00007fdb013e5fa0 R15: 00007ffe2b455088 [ 289.702039][ T9526] [ 289.947093][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.114233][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 290.124774][ T9531] netlink: 'syz.0.851': attribute type 11 has an invalid length. [ 290.134251][ T30] audit: type=1400 audit(1758913520.617:850): avc: denied { connect } for pid=9527 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.401204][ T30] audit: type=1400 audit(1758913520.617:851): avc: denied { bind } for pid=9527 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.434434][ T30] audit: type=1400 audit(1758913520.627:852): avc: denied { write } for pid=9527 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.487742][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.585338][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.713787][ T978] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 291.851884][ T978] usb 3-1: device descriptor read/64, error -71 [ 292.082981][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 292.105133][ T30] audit: type=1400 audit(1758913522.567:853): avc: denied { mount } for pid=9551 comm="syz.0.857" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 292.449604][ T9556] : renamed from bridge_slave_0 [ 292.462325][ T30] audit: type=1400 audit(1758913522.977:854): avc: denied { setopt } for pid=9546 comm="syz.1.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 292.552022][ T978] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 292.764716][ T978] usb 3-1: device descriptor read/64, error -71 [ 292.903418][ T30] audit: type=1400 audit(1758913523.417:855): avc: denied { ioctl } for pid=9566 comm="syz.0.860" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 292.982202][ T978] usb usb3-port1: attempt power cycle [ 292.985299][ T30] audit: type=1400 audit(1758913523.447:856): avc: denied { map } for pid=9566 comm="syz.0.860" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 293.322087][ T978] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 293.342307][ T978] usb 3-1: device descriptor read/8, error -71 [ 293.591883][ T978] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 293.643289][ T978] usb 3-1: device descriptor read/8, error -71 [ 293.762058][ T978] usb usb3-port1: unable to enumerate USB device [ 294.320136][ T9584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=9584 comm=syz.1.865 [ 294.861855][ T5909] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 295.023476][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.061508][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.142453][ T30] audit: type=1400 audit(1758913525.627:857): avc: denied { write } for pid=9595 comm="syz.3.869" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.153840][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.178625][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.196074][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 295.208735][ T5909] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 295.221309][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.241604][ T9593] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.251573][ T5909] hub 2-1:1.0: bad descriptor, ignoring hub [ 295.264940][ T5909] hub 2-1:1.0: probe with driver hub failed with error -5 [ 295.272538][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 295.277800][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 295.287814][ T5909] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 295.295211][ T5909] cdc_wdm 2-1:1.0: Unknown control protocol [ 295.692062][ T5970] usb 2-1: USB disconnect, device number 37 [ 296.562931][ T30] audit: type=1400 audit(1758913527.077:858): avc: denied { create } for pid=9603 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 296.657620][ T9618] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.123455][ T5845] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 297.231855][ T5859] Bluetooth: hci5: command 0x1003 tx timeout [ 297.231862][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 297.355617][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.394843][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.422234][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 297.437328][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.477450][ T5845] usb 3-1: config 0 descriptor?? [ 297.484579][ T5845] hub 3-1:0.0: USB hub found [ 297.688060][ T5845] hub 3-1:0.0: 2 ports detected [ 297.774710][ T9636] FAULT_INJECTION: forcing a failure. [ 297.774710][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 297.802773][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.3.880 Not tainted syzkaller #0 PREEMPT(full) [ 297.802798][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.802809][ T9636] Call Trace: [ 297.802814][ T9636] [ 297.802821][ T9636] dump_stack_lvl+0x16c/0x1f0 [ 297.802849][ T9636] should_fail_ex+0x512/0x640 [ 297.802870][ T9636] ? fs_reclaim_acquire+0xae/0x150 [ 297.802895][ T9636] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.802920][ T9636] should_failslab+0xc2/0x120 [ 297.802941][ T9636] __kmalloc_noprof+0xd2/0x510 [ 297.802965][ T9636] tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.802993][ T9636] ? tomoyo_profile+0x47/0x60 [ 297.803013][ T9636] tomoyo_path_number_perm+0x245/0x580 [ 297.803035][ T9636] ? tomoyo_path_number_perm+0x237/0x580 [ 297.803059][ T9636] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.803082][ T9636] ? find_held_lock+0x2b/0x80 [ 297.803128][ T9636] ? find_held_lock+0x2b/0x80 [ 297.803148][ T9636] ? hook_file_ioctl_common+0x145/0x410 [ 297.803171][ T9636] ? __fget_files+0x20e/0x3c0 [ 297.803197][ T9636] security_file_ioctl+0x9b/0x240 [ 297.803227][ T9636] __x64_sys_ioctl+0xb7/0x210 [ 297.803254][ T9636] do_syscall_64+0xcd/0x4e0 [ 297.803279][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.803296][ T9636] RIP: 0033:0x7fca2b58eec9 [ 297.803310][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.803326][ T9636] RSP: 002b:00007fca2c43c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.803343][ T9636] RAX: ffffffffffffffda RBX: 00007fca2b7e6090 RCX: 00007fca2b58eec9 [ 297.803354][ T9636] RDX: 00002000000000c0 RSI: 0000000000008b30 RDI: 0000000000000004 [ 297.803363][ T9636] RBP: 00007fca2c43c090 R08: 0000000000000000 R09: 0000000000000000 [ 297.803373][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.803383][ T9636] R13: 00007fca2b7e6128 R14: 00007fca2b7e6090 R15: 00007ffc55256058 [ 297.803406][ T9636] [ 297.803412][ T9636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.023986][ T9639] FAULT_INJECTION: forcing a failure. [ 298.023986][ T9639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.072663][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.1.881 Not tainted syzkaller #0 PREEMPT(full) [ 298.072689][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.072699][ T9639] Call Trace: [ 298.072705][ T9639] [ 298.072711][ T9639] dump_stack_lvl+0x16c/0x1f0 [ 298.072738][ T9639] should_fail_ex+0x512/0x640 [ 298.072764][ T9639] _copy_from_user+0x2e/0xd0 [ 298.072795][ T9639] wext_handle_ioctl+0xc2/0x2a0 [ 298.072818][ T9639] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 298.072841][ T9639] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 298.072867][ T9639] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 298.072897][ T9639] sock_ioctl+0x3a1/0x6b0 [ 298.072915][ T9639] ? __pfx_sock_ioctl+0x10/0x10 [ 298.072929][ T9639] ? hook_file_ioctl_common+0x145/0x410 [ 298.072955][ T9639] ? selinux_file_ioctl+0x180/0x270 [ 298.072978][ T9639] ? selinux_file_ioctl+0xb4/0x270 [ 298.073003][ T9639] ? __pfx_sock_ioctl+0x10/0x10 [ 298.073021][ T9639] __x64_sys_ioctl+0x18b/0x210 [ 298.073049][ T9639] do_syscall_64+0xcd/0x4e0 [ 298.073073][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.073090][ T9639] RIP: 0033:0x7fdb0118eec9 [ 298.073104][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.073119][ T9639] RSP: 002b:00007fdb02003038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.073136][ T9639] RAX: ffffffffffffffda RBX: 00007fdb013e5fa0 RCX: 00007fdb0118eec9 [ 298.073147][ T9639] RDX: 0000200000000040 RSI: 0000000000008b30 RDI: 0000000000000004 [ 298.073157][ T9639] RBP: 00007fdb02003090 R08: 0000000000000000 R09: 0000000000000000 [ 298.073168][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.073178][ T9639] R13: 00007fdb013e6038 R14: 00007fdb013e5fa0 R15: 00007ffe2b455088 [ 298.073203][ T9639] [ 298.262819][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.458653][ T9642] nvme_fabrics: missing parameter 'transport=%s' [ 298.474314][ T9642] nvme_fabrics: missing parameter 'nqn=%s' [ 298.489407][ T5845] usb 3-1: USB disconnect, device number 36 [ 298.554638][ T9649] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 298.701288][ T9657] : Can't lookup blockdev [ 298.707881][ T978] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 298.745125][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 298.751346][ T9657] bridge0: entered promiscuous mode [ 298.761284][ T9657] macsec1: entered promiscuous mode [ 298.774167][ T9657] bridge0: port 3(macsec1) entered blocking state [ 298.782254][ T9657] bridge0: port 3(macsec1) entered disabled state [ 298.790941][ T9657] macsec1: entered allmulticast mode [ 298.798720][ T30] audit: type=1400 audit(1758913529.317:859): avc: denied { mount } for pid=9647 comm="syz.3.883" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 298.799828][ T9657] bridge0: entered allmulticast mode [ 298.820092][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.859260][ T9657] macsec1: left allmulticast mode [ 298.864682][ T9657] bridge0: left allmulticast mode [ 298.873652][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.884084][ T978] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 298.902851][ T9657] bridge0: left promiscuous mode [ 298.910061][ T978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.919407][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.979861][ T978] usb 2-1: Product: syz [ 298.984416][ T978] usb 2-1: Manufacturer: syz [ 298.989143][ T978] usb 2-1: SerialNumber: syz [ 299.071849][ T5909] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 299.576306][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.587349][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.647514][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 299.663735][ T5909] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 299.673427][ T978] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 299.682037][ T5909] usb 4-1: config 0 has no interface number 0 [ 299.688389][ T5909] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 299.713259][ T978] usb 2-1: USB disconnect, device number 38 [ 299.720742][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.765198][ T5909] usb 4-1: config 0 descriptor?? [ 299.955511][ T5909] viperboard 4-1:0.143: version 0.00 found at bus 004 address 042 [ 299.975391][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.987488][ T5909] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 299.999371][ T5909] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 300.009925][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.018574][ T5909] usb 4-1: USB disconnect, device number 42 [ 300.517045][ T9663] bridge1: entered promiscuous mode [ 301.283699][ T9682] netlink: 156 bytes leftover after parsing attributes in process `syz.2.890'. [ 301.475726][ T9688] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 302.527777][ T30] audit: type=1400 audit(1758913532.927:860): avc: denied { read write } for pid=9701 comm="syz.3.895" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 302.551595][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.614575][ T30] audit: type=1400 audit(1758913532.927:861): avc: denied { read } for pid=9695 comm="syz.1.892" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 302.637578][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.870565][ T30] audit: type=1400 audit(1758913532.937:862): avc: denied { open } for pid=9701 comm="syz.3.895" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.052789][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.106007][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.117629][ T30] audit: type=1400 audit(1758913532.937:863): avc: denied { open } for pid=9695 comm="syz.1.892" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 303.142970][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.152158][ T30] audit: type=1400 audit(1758913532.987:864): avc: denied { ioctl } for pid=9695 comm="syz.1.892" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 303.176963][ T30] audit: type=1400 audit(1758913533.197:865): avc: denied { map } for pid=9701 comm="syz.3.895" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.201619][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.220319][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.239588][ T30] audit: type=1400 audit(1758913533.747:866): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 303.272597][ T5970] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 303.303283][ T9714] IPv6: NLM_F_REPLACE set, but no existing node found! [ 303.380199][ T1154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.421896][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 303.423255][ T9707] vxcan1 speed is unknown, defaulting to 1000 [ 303.464794][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.521756][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.554284][ T5970] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.563512][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.659273][ T30] audit: type=1400 audit(1758913534.167:867): avc: denied { ioctl } for pid=9701 comm="syz.3.895" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.684055][ T5970] usb 3-1: config 0 descriptor?? [ 304.626391][ T5970] hub 3-1:0.0: USB hub found [ 304.632772][ T5970] hub 3-1:0.0: 1 port detected [ 304.735691][ T1154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.829491][ T30] audit: type=1400 audit(1758913535.337:868): avc: denied { watch } for pid=9729 comm="syz.0.899" path="pipe:[25924]" dev="pipefs" ino=25924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 304.868555][ T5970] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 304.889195][ T30] audit: type=1400 audit(1758913535.337:869): avc: denied { setattr } for pid=9729 comm="syz.0.899" name="" dev="pipefs" ino=25924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 304.894169][ T1154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.114270][ T1154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.312014][ T5859] Bluetooth: hci0: command tx timeout [ 305.412924][ T1154] bridge_slave_1: left allmulticast mode [ 305.418888][ T1154] bridge_slave_1: left promiscuous mode [ 305.428885][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.442801][ T1154] bridge_slave_0: left allmulticast mode [ 305.448452][ T1154] bridge_slave_0: left promiscuous mode [ 305.456106][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.846119][ T1154] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 305.864716][ T1154] bridge0 (unregistering): left promiscuous mode [ 305.882896][ T1154] bridge0 (unregistering): left allmulticast mode [ 306.068088][ T1154] bond0 (unregistering): left promiscuous mode [ 306.076079][ T1154] bond_slave_0: left promiscuous mode [ 306.083891][ T1154] bond_slave_1: left promiscuous mode [ 306.097082][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.201085][ T1154] bond_slave_0: left allmulticast mode [ 306.223929][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.244936][ T1154] bond_slave_1: left allmulticast mode [ 306.251563][ T1154] bond0 (unregistering): Released all slaves [ 306.268906][ T1154] bond1 (unregistering): Released all slaves [ 306.397733][ T5909] usb 3-1: USB disconnect, device number 37 [ 306.411295][ T9707] chnl_net:caif_netlink_parms(): no params data found [ 306.570499][ T9773] overlayfs: failed to resolve './file1': -2 [ 307.045298][ T1154] tipc: Left network mode [ 307.472560][ T5859] Bluetooth: hci0: command tx timeout [ 307.560748][ T9786] FAULT_INJECTION: forcing a failure. [ 307.560748][ T9786] name failslab, interval 1, probability 0, space 0, times 0 [ 307.573513][ T9786] CPU: 1 UID: 0 PID: 9786 Comm: syz.3.909 Not tainted syzkaller #0 PREEMPT(full) [ 307.573536][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.573547][ T9786] Call Trace: [ 307.573553][ T9786] [ 307.573560][ T9786] dump_stack_lvl+0x16c/0x1f0 [ 307.573587][ T9786] should_fail_ex+0x512/0x640 [ 307.573609][ T9786] ? fs_reclaim_acquire+0xae/0x150 [ 307.573634][ T9786] ? tomoyo_encode2+0x100/0x3e0 [ 307.573659][ T9786] should_failslab+0xc2/0x120 [ 307.573680][ T9786] __kmalloc_noprof+0xd2/0x510 [ 307.573698][ T9786] ? d_absolute_path+0x136/0x1a0 [ 307.573734][ T9786] tomoyo_encode2+0x100/0x3e0 [ 307.573763][ T9786] tomoyo_encode+0x29/0x50 [ 307.573787][ T9786] tomoyo_realpath_from_path+0x18f/0x6e0 [ 307.573821][ T9786] tomoyo_check_open_permission+0x2ab/0x3c0 [ 307.573845][ T9786] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 307.573895][ T9786] ? do_raw_spin_lock+0x12c/0x2b0 [ 307.573923][ T9786] tomoyo_file_open+0x6b/0x90 [ 307.573942][ T9786] security_file_open+0x84/0x1e0 [ 307.573970][ T9786] do_dentry_open+0x596/0x1530 [ 307.573997][ T9786] vfs_open+0x82/0x3f0 [ 307.574024][ T9786] path_openat+0x1de4/0x2cb0 [ 307.574054][ T9786] ? __pfx_path_openat+0x10/0x10 [ 307.574081][ T9786] do_filp_open+0x20b/0x470 [ 307.574102][ T9786] ? __pfx_do_filp_open+0x10/0x10 [ 307.574141][ T9786] ? alloc_fd+0x471/0x7d0 [ 307.574168][ T9786] do_sys_openat2+0x11b/0x1d0 [ 307.574191][ T9786] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.574218][ T9786] ? hook_file_ioctl_common+0x145/0x410 [ 307.574242][ T9786] __x64_sys_openat+0x174/0x210 [ 307.574267][ T9786] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.574290][ T9786] ? selinux_file_ioctl+0xb4/0x270 [ 307.574317][ T9786] ? fput+0x9b/0xd0 [ 307.574344][ T9786] do_syscall_64+0xcd/0x4e0 [ 307.574369][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.574387][ T9786] RIP: 0033:0x7fca2b58d710 [ 307.574402][ T9786] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 307.574420][ T9786] RSP: 002b:00007fca2c419470 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 307.574437][ T9786] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fca2b58d710 [ 307.574448][ T9786] RDX: 0000000000000002 RSI: 00007fca2b611c88 RDI: 00000000ffffff9c [ 307.574458][ T9786] RBP: 00007fca2b611c88 R08: 0000000000000000 R09: 0000000000000080 [ 307.574468][ T9786] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 307.574478][ T9786] R13: 0000000000000063 R14: 0000200000fe5000 R15: 0000200000fe6800 [ 307.574502][ T9786] [ 307.831034][ T9786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.441893][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.449204][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.459361][ T9707] bridge_slave_0: entered allmulticast mode [ 308.468006][ T9707] bridge_slave_0: entered promiscuous mode [ 308.481365][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.495898][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.503768][ T9707] bridge_slave_1: entered allmulticast mode [ 308.511164][ T9707] bridge_slave_1: entered promiscuous mode [ 309.098054][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.138328][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.161154][ T9814] input: syz1 as /devices/virtual/input/input11 [ 309.393476][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 309.393491][ T30] audit: type=1400 audit(1758913539.907:890): avc: denied { read } for pid=9811 comm="syz.0.919" name="mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 309.452607][ T9707] team0: Port device team_slave_0 added [ 309.460479][ T9707] team0: Port device team_slave_1 added [ 309.576277][ T5859] Bluetooth: hci0: command tx timeout [ 309.619938][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.619953][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.619974][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.626543][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.681734][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.681763][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.711872][ T5909] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 309.737918][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.759898][ T9826] FAULT_INJECTION: forcing a failure. [ 309.759898][ T9826] name failslab, interval 1, probability 0, space 0, times 0 [ 309.759965][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.3.923 Not tainted syzkaller #0 PREEMPT(full) [ 309.759986][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.759997][ T9826] Call Trace: [ 309.760002][ T9826] [ 309.760009][ T9826] dump_stack_lvl+0x16c/0x1f0 [ 309.760037][ T9826] should_fail_ex+0x512/0x640 [ 309.760059][ T9826] ? fs_reclaim_acquire+0xae/0x150 [ 309.760085][ T9826] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 309.760111][ T9826] should_failslab+0xc2/0x120 [ 309.760132][ T9826] __kmalloc_noprof+0xd2/0x510 [ 309.760157][ T9826] tomoyo_realpath_from_path+0xc2/0x6e0 [ 309.760185][ T9826] ? tomoyo_profile+0x47/0x60 [ 309.760206][ T9826] tomoyo_path_number_perm+0x245/0x580 [ 309.760227][ T9826] ? tomoyo_path_number_perm+0x237/0x580 [ 309.760252][ T9826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 309.760275][ T9826] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.760323][ T9826] ? find_held_lock+0x2b/0x80 [ 309.760344][ T9826] ? hook_file_ioctl_common+0x145/0x410 [ 309.760368][ T9826] ? __fget_files+0x20e/0x3c0 [ 309.760393][ T9826] security_file_ioctl+0x9b/0x240 [ 309.760421][ T9826] __x64_sys_ioctl+0xb7/0x210 [ 309.760450][ T9826] do_syscall_64+0xcd/0x4e0 [ 309.760475][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.760498][ T9826] RIP: 0033:0x7fca2b58eacb [ 309.760513][ T9826] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 309.760530][ T9826] RSP: 002b:00007fca2c419490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.760546][ T9826] RAX: ffffffffffffffda RBX: 00007fca2c419be0 RCX: 00007fca2b58eacb [ 309.760558][ T9826] RDX: 00007fca2c419be0 RSI: 00000000c008ae05 RDI: 0000000000000009 [ 309.760568][ T9826] RBP: 0000200000fe6000 R08: 0000000000000000 R09: 0000000000000009 [ 309.760578][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.760588][ T9826] R13: 0000000000000063 R14: 0000200000fe5000 R15: 0000200000fe6800 [ 309.760613][ T9826] [ 309.760635][ T9826] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.941031][ T5909] usb 2-1: not running at top speed; connect to a high speed hub [ 309.944385][ T5909] usb 2-1: config 95 has an invalid interface number: 126 but max is 1 [ 309.944441][ T5909] usb 2-1: config 95 has an invalid interface number: 107 but max is 1 [ 309.944580][ T5909] usb 2-1: config 95 has no interface number 0 [ 309.944628][ T5909] usb 2-1: config 95 has no interface number 1 [ 309.944785][ T5909] usb 2-1: config 95 interface 126 has no altsetting 0 [ 309.944832][ T5909] usb 2-1: config 95 interface 107 has no altsetting 0 [ 309.951717][ T5909] usb 2-1: New USB device found, idVendor=03f8, idProduct=201d, bcdDevice=af.93 [ 309.951775][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.951825][ T5909] usb 2-1: Product: syz [ 309.951870][ T5909] usb 2-1: Manufacturer: syz [ 309.951984][ T5909] usb 2-1: SerialNumber: syz [ 309.967333][ T1154] dummy0: left promiscuous mode [ 309.991005][ T1154] hsr_slave_0: left promiscuous mode [ 309.991613][ T1154] hsr_slave_1: left promiscuous mode [ 310.187291][ T9821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.187572][ T9821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.194311][ T5909] usb 2-1: USB disconnect, device number 39 [ 310.211351][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.219217][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.258325][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.258345][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.295329][ T1154] veth1_macvtap: left promiscuous mode [ 310.295540][ T1154] veth1_vlan: left promiscuous mode [ 310.295649][ T1154] veth0_vlan: left promiscuous mode [ 310.856449][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 311.011964][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 311.042084][ T30] audit: type=1400 audit(1758913541.537:891): avc: denied { setopt } for pid=9844 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 311.207483][ T43] usb 3-1: config index 0 descriptor too short (expected 61476, got 36) [ 311.250999][ T43] usb 3-1: config 224 has an invalid interface number: 61 but max is -1 [ 311.277522][ T43] usb 3-1: config 224 has 1 interface, different from the descriptor's value: 0 [ 311.304050][ T43] usb 3-1: config 224 has no interface number 0 [ 311.360482][ T43] usb 3-1: config 224 interface 61 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.441894][ T43] usb 3-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice=1e.fa [ 311.451311][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.465303][ T43] usb 3-1: Product: syz [ 311.504736][ T43] usb 3-1: Manufacturer: syz [ 311.525886][ T43] usb 3-1: SerialNumber: syz [ 311.547933][ T43] em28xx 3-1:224.61: New device syz syz @ 480 Mbps (093b:a005, interface 61, class 61) [ 311.572723][ T43] em28xx 3-1:224.61: DVB interface 61 found: bulk [ 311.633856][ T5859] Bluetooth: hci0: command tx timeout [ 311.802635][ T43] em28xx 3-1:224.61: unknown em28xx chip ID (0) [ 311.809673][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 311.862875][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 311.976834][ T43] em28xx 3-1:224.61: reading from i2c device at 0xa0 failed (error=-5) [ 312.016306][ T43] em28xx 3-1:224.61: board has no eeprom [ 312.102135][ T43] em28xx 3-1:224.61: Identified as Plextor ConvertX PX-TV100U (card=40) [ 312.140531][ T43] em28xx 3-1:224.61: dvb set to bulk mode. [ 312.165552][ T5970] em28xx 3-1:224.61: Remote control support is not available for this card. [ 312.222276][ T43] usb 3-1: USB disconnect, device number 38 [ 312.247860][ T43] em28xx 3-1:224.61: Disconnecting em28xx [ 312.260440][ T43] em28xx 3-1:224.61: Closing input extension [ 312.356626][ T43] em28xx 3-1:224.61: Freeing device [ 312.682064][ T978] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 312.757948][ T30] audit: type=1400 audit(1758913543.237:892): avc: denied { bind } for pid=9867 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.872964][ T9707] hsr_slave_0: entered promiscuous mode [ 312.902482][ T9707] hsr_slave_1: entered promiscuous mode [ 312.924589][ T978] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.943348][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.961556][ T978] usb 4-1: Product: syz [ 312.971992][ T978] usb 4-1: Manufacturer: syz [ 312.988009][ T9707] debugfs: 'hsr0' already exists in 'hsr' [ 312.990083][ T978] usb 4-1: SerialNumber: syz [ 313.004010][ T9707] Cannot create hsr debugfs directory [ 313.022742][ T978] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.126560][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 313.368609][ T30] audit: type=1400 audit(1758913543.877:893): avc: denied { connect } for pid=9880 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.605458][ T43] usb 4-1: USB disconnect, device number 43 [ 313.750806][ T9885] overlayfs: overlapping lowerdir path [ 313.789440][ T9707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.824322][ T9707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.862916][ T9707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.894103][ T9707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.114202][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.220988][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 314.231332][ T9] ath9k_htc: Failed to initialize the device [ 314.242797][ T9707] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.254036][ T43] usb 4-1: ath9k_htc: USB layer deinitialized [ 314.283894][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.291057][ T8025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.359380][ T9902] netlink: 'syz.0.941': attribute type 5 has an invalid length. [ 314.367692][ T9902] netlink: 'syz.0.941': attribute type 7 has an invalid length. [ 314.757577][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.764731][ T8025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.784765][ T9902] : entered promiscuous mode [ 314.818919][ T9707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.830070][ T9707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.021723][ T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 315.051940][ T5970] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 315.200403][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.207422][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 315.218669][ T43] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 315.240516][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.250476][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.262940][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.282529][ T43] usb 2-1: config 0 descriptor?? [ 315.287714][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.409315][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.420032][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.430307][ T5970] usb 4-1: config 0 descriptor?? [ 315.512676][ T9903] fuse: Bad value for 'group_id' [ 315.517946][ T9903] fuse: Bad value for 'group_id' [ 315.532638][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 315.560024][ T43] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 315.609639][ T30] audit: type=1400 audit(1758913546.117:894): avc: denied { firmware_load } for pid=43 comm="kworker/1:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 315.630481][ T43] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 315.925801][ T30] audit: type=1400 audit(1758913546.367:895): avc: denied { ioctl } for pid=9904 comm="syz.3.942" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 315.951054][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.970524][ T9707] veth0_vlan: entered promiscuous mode [ 315.977044][ T5970] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 315.980820][ T9707] veth1_vlan: entered promiscuous mode [ 316.018673][ T9707] veth0_macvtap: entered promiscuous mode [ 316.189727][ T30] audit: type=1400 audit(1758913546.687:896): avc: denied { mount } for pid=9904 comm="syz.3.942" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 316.269366][ T9707] veth1_macvtap: entered promiscuous mode [ 316.379957][ T9905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.389259][ T9905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.400407][ T9905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.409357][ T9905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.513781][ T30] audit: type=1400 audit(1758913547.017:897): avc: denied { getopt } for pid=9923 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.533027][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.760137][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.771941][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.834688][ T5970] usb 4-1: USB disconnect, device number 44 [ 316.895494][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.918702][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.943476][ T8026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.958854][ T8026] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.973690][ T8026] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.986071][ T8026] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.070695][ T9932] loop2: detected capacity change from 0 to 7 [ 317.080726][ T9932] loop2: p1 [ 317.085569][ T9932] loop2: partition table partially beyond EOD, truncated [ 317.099801][ T9932] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 317.278289][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.369701][ T9938] FAULT_INJECTION: forcing a failure. [ 317.369701][ T9938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.383205][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: syz.1.948 Not tainted syzkaller #0 PREEMPT(full) [ 317.383228][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.383239][ T9938] Call Trace: [ 317.383245][ T9938] [ 317.383252][ T9938] dump_stack_lvl+0x16c/0x1f0 [ 317.383278][ T9938] should_fail_ex+0x512/0x640 [ 317.383304][ T9938] _copy_from_user+0x2e/0xd0 [ 317.383330][ T9938] kvm_arch_dev_ioctl+0x3c9/0x760 [ 317.383352][ T9938] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 317.383379][ T9938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.383404][ T9938] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 317.383435][ T9938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.383456][ T9938] kvm_dev_ioctl+0x721/0x1af0 [ 317.383481][ T9938] ? hook_file_ioctl_common+0x145/0x410 [ 317.383501][ T9938] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 317.383524][ T9938] ? selinux_file_ioctl+0x180/0x270 [ 317.383548][ T9938] ? selinux_file_ioctl+0xb4/0x270 [ 317.383574][ T9938] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 317.383594][ T9938] __x64_sys_ioctl+0x18b/0x210 [ 317.383622][ T9938] do_syscall_64+0xcd/0x4e0 [ 317.383647][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.383665][ T9938] RIP: 0033:0x7fdb0118eacb [ 317.383679][ T9938] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 317.383696][ T9938] RSP: 002b:00007fdb01fbf490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.383713][ T9938] RAX: ffffffffffffffda RBX: 00007fdb01fbfbe0 RCX: 00007fdb0118eacb [ 317.383724][ T9938] RDX: 00007fdb01fbfbe0 RSI: 00000000c008ae05 RDI: 0000000000000009 [ 317.383735][ T9938] RBP: 0000200000fe6000 R08: 0000000000000000 R09: 0000000000000009 [ 317.383746][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.383756][ T9938] R13: 0000000000000063 R14: 0000200000fe5000 R15: 0000200000fe6800 [ 317.383780][ T9938] [ 317.578744][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.822046][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.856175][ T8026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.891034][ T8026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.921512][ T30] audit: type=1400 audit(1758913548.427:898): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/root/syzkaller.WpD3kd/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 318.098848][ T30] audit: type=1400 audit(1758913548.577:899): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/root/syzkaller.WpD3kd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 318.125456][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.193126][ T30] audit: type=1400 audit(1758913548.577:900): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/root/syzkaller.WpD3kd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 318.220597][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.228977][ T30] audit: type=1400 audit(1758913548.607:901): avc: denied { read } for pid=9940 comm="syz.3.950" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 318.250109][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.284829][ T30] audit: type=1400 audit(1758913548.607:902): avc: denied { open } for pid=9940 comm="syz.3.950" path="/syzcgroup/unified/syz3" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 318.321326][ T30] audit: type=1400 audit(1758913548.647:903): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 318.522401][ T7864] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 318.679204][ T7864] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 318.722114][ T7864] usb 4-1: config 0 has no interface number 0 [ 318.746685][ T7864] usb 4-1: config 0 interface 244 has no altsetting 0 [ 318.869570][ T7864] usb 4-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=2d.d1 [ 319.019944][ T7864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.028698][ T7864] usb 4-1: Product: syz [ 319.033830][ T7864] usb 4-1: Manufacturer: syz [ 319.039111][ T7864] usb 4-1: SerialNumber: syz [ 319.111782][ T5970] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 319.113051][ T7864] usb 4-1: config 0 descriptor?? [ 319.226815][ T9963] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 319.362853][ T9942] trusted_key: encrypted_key: insufficient parameters specified [ 319.392491][ T5970] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 319.405134][ T9963] bond3: entered promiscuous mode [ 319.411050][ T7864] asix 4-1:0.244 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 319.420607][ T5970] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 319.439383][ T5970] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 319.448769][ T9963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.552122][ T5970] usb 6-1: config 0 has no interface number 0 [ 319.582229][ T5970] usb 6-1: config 0 has no interface number 1 [ 319.623279][ T5970] usb 6-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 319.652542][ T7864] asix 4-1:0.244: probe with driver asix failed with error -71 [ 319.654467][ T5970] usb 6-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 319.675018][ T7864] usb 4-1: USB disconnect, device number 45 [ 319.765918][ T9965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.777719][ T9965] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 319.789039][ T9965] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 319.845799][ T9965] bond3: (slave wireguard0): making interface the new active one [ 319.874028][ T9965] wireguard0: entered promiscuous mode [ 319.883585][ T9965] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 319.915856][ T5970] usb 6-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 319.934099][ T5970] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 319.952010][ T5970] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 319.964050][ T5970] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 320.034260][ T5970] usb 6-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid wMaxPacketSize 0 [ 320.090100][ T5970] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 0 [ 320.171982][ T5970] usb 6-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 320.237485][ T9977] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 320.306451][ T5970] usb 6-1: config 0 interface 66 has no altsetting 0 [ 320.485853][ T5970] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 320.495425][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.508525][ T5970] usb 6-1: Product: syz [ 320.521698][ T5970] usb 6-1: Manufacturer: syz [ 320.534287][ T5970] usb 6-1: SerialNumber: syz [ 320.549181][ T5970] usb 6-1: config 0 descriptor?? [ 320.566899][ T9979] overlay: Bad value for 'workdir' [ 320.589351][ T5970] ljca 6-1:0.84: bulk endpoints not found [ 321.638497][ T9999] netlink: 'syz.1.961': attribute type 4 has an invalid length. [ 321.650393][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 321.650409][ T30] audit: type=1400 audit(1758913551.817:961): avc: denied { append } for pid=9993 comm="syz.3.963" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 321.685104][ T9999] netlink: 'syz.1.961': attribute type 4 has an invalid length. [ 321.914931][ T5970] ljca 6-1:0.66: submit rx urb failed: -90 [ 321.970428][ T7864] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 322.197162][ T5970] ljca 6-1:0.66: probe with driver ljca failed with error -90 [ 322.241858][ T5970] usb 6-1: USB disconnect, device number 2 [ 322.282287][ T7864] usb 3-1: Using ep0 maxpacket: 8 [ 322.298847][ T7864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 322.336795][ T7864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.368239][ T7864] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 322.524155][ T7864] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 322.881612][ T30] audit: type=1400 audit(1758913560.132:962): avc: denied { mounton } for pid=10008 comm="syz.5.965" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 322.983467][ T7864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.013923][ T7864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.050099][ T7864] usb 3-1: Product: syz [ 323.065150][ T7864] usb 3-1: Manufacturer: syz [ 323.077061][ T7864] usb 3-1: SerialNumber: syz [ 323.086529][ T30] audit: type=1400 audit(1758913560.562:963): avc: denied { listen } for pid=10014 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 323.135770][ T30] audit: type=1400 audit(1758913560.562:964): avc: denied { bind } for pid=10014 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 323.365218][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.373903][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.496471][ T30] audit: type=1400 audit(1758913561.012:965): avc: denied { create } for pid=9990 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 323.599033][ T30] audit: type=1400 audit(1758913561.012:966): avc: denied { write } for pid=9990 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 323.714727][ T30] audit: type=1400 audit(1758913561.062:967): avc: denied { listen } for pid=10025 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.752345][ T7864] cdc_ncm 3-1:1.0: bind() failure [ 323.775960][ T7864] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 323.787757][ T7864] cdc_ncm 3-1:1.1: bind() failure [ 323.853069][T10044] SELinux: failed to load policy [ 323.891775][ T30] audit: type=1400 audit(1758913561.372:968): avc: denied { load_policy } for pid=10039 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 323.948309][ T7864] usb 3-1: USB disconnect, device number 39 [ 325.252162][T10055] netlink: 9 bytes leftover after parsing attributes in process `syz.0.976'. [ 325.370926][T10065] netlink: 5 bytes leftover after parsing attributes in process `syz.0.976'. [ 325.398911][T10065] 0ªî{X¹¦: renamed from gretap0 [ 325.432572][T10065] 0ªî{X¹¦: entered allmulticast mode [ 325.458152][T10066] netlink: 128 bytes leftover after parsing attributes in process `syz.5.979'. [ 325.470306][ T5970] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 325.496604][T10065] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 325.650387][ T5970] usb 3-1: Using ep0 maxpacket: 8 [ 325.666452][ T5970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.758402][T10071] netlink: 830 bytes leftover after parsing attributes in process `syz.1.980'. [ 325.799632][T10071] block nbd1: Attempted send on invalid socket [ 325.806102][T10071] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 325.816732][T10071] SQUASHFS error: Failed to read block 0x0: -5 [ 325.823527][ T5970] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 325.853669][T10071] unable to read squashfs_super_block [ 325.858258][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 325.989253][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 326.003312][ T5970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 326.118775][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 326.128900][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 326.142604][ T5970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 326.659291][ T5970] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 326.758326][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.983'. [ 326.763871][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.767570][T10083] netlink: 'syz.5.983': attribute type 1 has an invalid length. [ 326.803244][ T5970] usb 3-1: Product: syz [ 326.841568][ T5970] usb 3-1: Manufacturer: syz [ 326.941367][ T5970] usb 3-1: SerialNumber: syz [ 326.957197][ T5970] usb 3-1: config 0 descriptor?? [ 326.967182][T10062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.977227][ T5970] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.132013][ T30] audit: type=1326 audit(1758913564.634:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 327.412912][ T30] audit: type=1326 audit(1758913564.634:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 327.477249][ T30] audit: type=1326 audit(1758913564.634:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 327.500572][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.517207][ T30] audit: type=1326 audit(1758913564.634:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 327.587457][ T30] audit: type=1326 audit(1758913564.634:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 327.611665][ T30] audit: type=1326 audit(1758913564.634:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 327.634954][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.720025][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.728654][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.752412][ T5970] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 327.818549][ T30] audit: type=1326 audit(1758913564.644:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 328.014674][T10099] tipc: Started in network mode [ 328.019816][T10099] tipc: Node identity 2a8b3d777e27, cluster identity 4711 [ 328.028022][T10099] tipc: Enabled bearer , priority 0 [ 328.061494][ T30] audit: type=1326 audit(1758913564.644:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 328.084787][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.185647][ T30] audit: type=1326 audit(1758913564.644:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 328.254952][ T30] audit: type=1326 audit(1758913564.644:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 328.337144][T10114] loop2: detected capacity change from 0 to 7 [ 328.338067][T10117] netlink: 'syz.3.991': attribute type 3 has an invalid length. [ 328.355585][T10114] loop2: p1 [ 328.365033][T10114] loop2: partition table partially beyond EOD, truncated [ 328.397944][T10114] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 328.416802][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.993'. [ 328.430593][T10119] bridge_slave_1: left allmulticast mode [ 328.448176][T10119] bridge_slave_1: left promiscuous mode [ 328.456392][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.472248][T10119] bridge_slave_0: left allmulticast mode [ 328.477954][T10119] bridge_slave_0: left promiscuous mode [ 328.483859][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.594553][T10123] Invalid ELF header magic: != ELF [ 329.177348][ T7864] tipc: Node number set to 1420574071 [ 330.043621][ T7864] usb 3-1: USB disconnect, device number 40 [ 330.654714][T10171] FAULT_INJECTION: forcing a failure. [ 330.654714][T10171] name failslab, interval 1, probability 0, space 0, times 0 [ 330.677195][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.0.1002 Not tainted syzkaller #0 PREEMPT(full) [ 330.677221][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 330.677231][T10171] Call Trace: [ 330.677237][T10171] [ 330.677244][T10171] dump_stack_lvl+0x16c/0x1f0 [ 330.677263][T10171] should_fail_ex+0x512/0x640 [ 330.677278][T10171] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 330.677292][T10171] should_failslab+0xc2/0x120 [ 330.677306][T10171] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 330.677318][T10171] ? __alloc_skb+0x2b2/0x380 [ 330.677331][T10171] ? avc_has_perm+0x144/0x1f0 [ 330.677344][T10171] __alloc_skb+0x2b2/0x380 [ 330.677356][T10171] ? __pfx___alloc_skb+0x10/0x10 [ 330.677373][T10171] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 330.677396][T10171] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 330.677432][T10171] netlink_alloc_large_skb+0x69/0x130 [ 330.677458][T10171] netlink_sendmsg+0x6a1/0xdd0 [ 330.677485][T10171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.677514][T10171] ____sys_sendmsg+0xa98/0xc70 [ 330.677540][T10171] ? copy_msghdr_from_user+0x10a/0x160 [ 330.677560][T10171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.677602][T10171] ___sys_sendmsg+0x134/0x1d0 [ 330.677625][T10171] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.677677][T10171] __sys_sendmsg+0x16d/0x220 [ 330.677700][T10171] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.677733][T10171] ? rcu_is_watching+0x12/0xc0 [ 330.677757][T10171] do_syscall_64+0xcd/0x4e0 [ 330.677782][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.677800][T10171] RIP: 0033:0x7f6cc858eec9 [ 330.677816][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.677833][T10171] RSP: 002b:00007f6cc93f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.677851][T10171] RAX: ffffffffffffffda RBX: 00007f6cc87e5fa0 RCX: 00007f6cc858eec9 [ 330.677863][T10171] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 330.677874][T10171] RBP: 00007f6cc93f8090 R08: 0000000000000000 R09: 0000000000000000 [ 330.677885][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.677896][T10171] R13: 00007f6cc87e6038 R14: 00007f6cc87e5fa0 R15: 00007ffd5e3f65f8 [ 330.677920][T10171] [ 330.901431][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.238725][T10173] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 331.269176][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.328738][T10173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.359083][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.375066][T10174] afs: Unknown parameter 'dynµ³ [ 331.375066][T10174] @E ¨`UµK ' [ 331.642354][T10177] SELinux: failed to load policy [ 331.849665][T10188] 9pnet_fd: Insufficient options for proto=fd [ 332.659264][T10195] tipc: Started in network mode [ 332.664245][T10195] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 332.672226][T10195] tipc: Enabled bearer , priority 10 [ 332.698902][T10195] lo speed is unknown, defaulting to 1000 [ 332.705090][T10195] lo speed is unknown, defaulting to 1000 [ 332.716033][T10195] lo speed is unknown, defaulting to 1000 [ 332.772234][T10195] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 332.913794][T10195] lo speed is unknown, defaulting to 1000 [ 332.930147][T10195] lo speed is unknown, defaulting to 1000 [ 332.945352][T10195] lo speed is unknown, defaulting to 1000 [ 332.953763][T10195] lo speed is unknown, defaulting to 1000 [ 332.960879][T10195] lo speed is unknown, defaulting to 1000 [ 333.068495][T10189] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 333.524456][T10211] vxcan1 speed is unknown, defaulting to 1000 [ 333.539893][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 333.539908][ T30] audit: type=1400 audit(1758913571.047:998): avc: denied { mount } for pid=10182 comm="syz.0.1006" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 333.692919][ T30] audit: type=1400 audit(1758913571.057:999): avc: denied { search } for pid=10182 comm="syz.0.1006" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 333.799774][ T5970] tipc: Node number set to 10005162 [ 334.358284][T10211] lo speed is unknown, defaulting to 1000 [ 335.784477][T10245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42529 sclass=netlink_route_socket pid=10245 comm=syz.5.1020 [ 335.811034][ T30] audit: type=1400 audit(1758913573.318:1000): avc: denied { write } for pid=10242 comm="syz.1.1021" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 336.213211][T10251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.108596][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1025'. [ 337.388473][T10289] Bluetooth: MGMT ver 1.23 [ 337.434758][ T5970] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 337.976148][ T5970] usb 4-1: Using ep0 maxpacket: 32 [ 337.996367][ T5970] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 338.004626][ T5970] usb 4-1: config 0 has no interface number 0 [ 338.019883][ T5970] usb 4-1: config 0 interface 184 has no altsetting 0 [ 338.031224][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 338.074368][ T5970] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 338.086117][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.095571][ T5970] usb 4-1: Product: syz [ 338.099833][ T5970] usb 4-1: Manufacturer: syz [ 338.116008][ T5970] usb 4-1: SerialNumber: syz [ 338.132222][ T5970] usb 4-1: config 0 descriptor?? [ 338.156555][ T5970] smsc75xx v1.0.0 [ 338.160219][ T5970] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 338.172845][ T5970] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 338.188291][ T9] usb 6-1: config index 0 descriptor too short (expected 36441, got 36) [ 338.229021][ T9] usb 6-1: config 128 has too many interfaces: 198, using maximum allowed: 32 [ 338.278260][ T9] usb 6-1: config 128 has an invalid descriptor of length 31, skipping remainder of the config [ 338.483705][ T30] audit: type=1400 audit(1758913575.950:1001): avc: denied { setopt } for pid=10318 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.483914][ T9] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 198 [ 338.704454][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.716740][ T30] audit: type=1400 audit(1758913576.240:1002): avc: denied { listen } for pid=10324 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 338.743771][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.794305][T10330] usb usb9: usbfs: process 10330 (syz.0.1043) did not claim interface 47 before use [ 339.028156][T10295] syz_tun: entered allmulticast mode [ 339.143881][T10335] overlayfs: failed to resolve './file1': -2 [ 339.926639][T10341] loop2: detected capacity change from 0 to 7 [ 339.939151][T10341] loop2: p1 [ 339.943599][T10341] loop2: partition table partially beyond EOD, truncated [ 339.953152][T10341] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 340.020619][T10343] loop2: detected capacity change from 0 to 7 [ 340.028737][T10343] loop2: p1 [ 340.032018][T10343] loop2: partition table partially beyond EOD, truncated [ 340.040246][T10343] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 340.120759][T10347] lo: entered allmulticast mode [ 340.129389][T10346] lo: left allmulticast mode [ 340.352438][ T30] audit: type=1400 audit(1758913577.871:1003): avc: denied { write } for pid=10348 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 340.420529][ T30] audit: type=1400 audit(1758913577.901:1004): avc: denied { read write } for pid=10348 comm="syz.2.1050" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 340.454754][ T30] audit: type=1400 audit(1758913577.901:1005): avc: denied { open } for pid=10348 comm="syz.2.1050" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 340.485045][ T9] usb 6-1: string descriptor 0 read error: -71 [ 340.493656][ T9] usb 6-1: USB disconnect, device number 3 [ 341.254653][ T7864] usb 4-1: USB disconnect, device number 46 [ 342.204802][T10367] FAULT_INJECTION: forcing a failure. [ 342.204802][T10367] name failslab, interval 1, probability 0, space 0, times 0 [ 342.224087][T10367] CPU: 0 UID: 0 PID: 10367 Comm: syz.2.1056 Not tainted syzkaller #0 PREEMPT(full) [ 342.224113][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 342.224123][T10367] Call Trace: [ 342.224128][T10367] [ 342.224135][T10367] dump_stack_lvl+0x16c/0x1f0 [ 342.224163][T10367] should_fail_ex+0x512/0x640 [ 342.224185][T10367] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 342.224208][T10367] should_failslab+0xc2/0x120 [ 342.224228][T10367] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 342.224265][T10367] ? skb_clone+0x190/0x3f0 [ 342.224291][T10367] skb_clone+0x190/0x3f0 [ 342.224314][T10367] nfnetlink_rcv_batch+0x1cf/0x2330 [ 342.224339][T10367] ? __lock_acquire+0x62e/0x1ce0 [ 342.224371][T10367] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 342.224406][T10367] ? avc_has_perm_noaudit+0x149/0x3b0 [ 342.224429][T10367] ? __asan_memset+0x23/0x50 [ 342.224455][T10367] ? __nla_validate_parse+0x600/0x2880 [ 342.224488][T10367] ? __pfx___nla_validate_parse+0x10/0x10 [ 342.224516][T10367] ? cap_capable+0xb3/0x250 [ 342.224541][T10367] ? __nla_parse+0x40/0x60 [ 342.224571][T10367] nfnetlink_rcv+0x3c1/0x430 [ 342.224600][T10367] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 342.224625][T10367] netlink_unicast+0x5aa/0x870 [ 342.224653][T10367] ? __pfx_netlink_unicast+0x10/0x10 [ 342.224687][T10367] netlink_sendmsg+0x8d1/0xdd0 [ 342.224714][T10367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.224750][T10367] ____sys_sendmsg+0xa98/0xc70 [ 342.224777][T10367] ? copy_msghdr_from_user+0x10a/0x160 [ 342.224799][T10367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.224836][T10367] ___sys_sendmsg+0x134/0x1d0 [ 342.224859][T10367] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.224914][T10367] __sys_sendmsg+0x16d/0x220 [ 342.224937][T10367] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.224975][T10367] do_syscall_64+0xcd/0x4e0 [ 342.225001][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.225018][T10367] RIP: 0033:0x7f3c8e18eec9 [ 342.225033][T10367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.225050][T10367] RSP: 002b:00007f3c8efee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.225067][T10367] RAX: ffffffffffffffda RBX: 00007f3c8e3e5fa0 RCX: 00007f3c8e18eec9 [ 342.225080][T10367] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 342.225091][T10367] RBP: 00007f3c8efee090 R08: 0000000000000000 R09: 0000000000000000 [ 342.225102][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.225113][T10367] R13: 00007f3c8e3e6038 R14: 00007f3c8e3e5fa0 R15: 00007ffc84e68d38 [ 342.225138][T10367] [ 342.479132][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.675902][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 342.696633][ T30] audit: type=1400 audit(1758913580.202:1006): avc: denied { append } for pid=10365 comm="syz.1.1054" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 344.309124][ T30] audit: type=1400 audit(1758913581.833:1007): avc: denied { read } for pid=10385 comm="syz.2.1058" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 344.383637][T10389] loop2: detected capacity change from 0 to 7 [ 344.393159][T10389] loop2: p1 [ 344.396400][T10389] loop2: partition table partially beyond EOD, truncated [ 344.409301][T10387] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 344.413702][T10389] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 344.431440][ T30] audit: type=1400 audit(1758913581.833:1008): avc: denied { open } for pid=10385 comm="syz.2.1058" path="/232/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 344.454476][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.468442][T10387] block device autoloading is deprecated and will be removed. [ 344.716833][T10398] can0: slcan on ptm0. [ 344.758384][ T30] audit: type=1400 audit(1758913582.283:1009): avc: denied { read } for pid=10400 comm="syz.0.1063" path="socket:[29804]" dev="sockfs" ino=29804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 344.790664][ T30] audit: type=1400 audit(1758913582.313:1010): avc: denied { setopt } for pid=10397 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.148271][T10417] overlayfs: failed to resolve './file1': -2 [ 345.561538][T10397] can0 (unregistered): slcan off ptm0. [ 346.424374][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 346.433398][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 346.494978][T10436] loop2: detected capacity change from 0 to 7 [ 346.526291][T10436] loop2: p1 [ 346.533563][T10436] loop2: partition table partially beyond EOD, truncated [ 346.543919][T10436] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 346.907161][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1076'. [ 347.049417][ T975] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 347.181925][ T30] audit: type=1400 audit(1758913584.714:1011): avc: denied { accept } for pid=10464 comm="syz.5.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 347.201038][ T975] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 347.201425][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.209937][ T975] usb 4-1: config 8 has no interface number 0 [ 347.235915][ T975] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 347.263267][ T975] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8B has invalid maxpacket 1023, setting to 64 [ 347.323362][ T975] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 347.336339][ T975] usb 4-1: config 8 interface 177 has no altsetting 0 [ 347.346530][ T975] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 347.355878][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.370372][T10447] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 347.957076][ T975] usb 4-1: string descriptor 0 read error: -71 [ 347.980885][ T975] ir_toy 4-1:8.177: required endpoints not found [ 348.013006][ T975] usb 4-1: USB disconnect, device number 47 [ 348.420691][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 348.503964][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 348.650544][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1087'. [ 349.316551][ T30] audit: type=1400 audit(1758913586.835:1012): avc: denied { mount } for pid=10515 comm="syz.2.1093" name="/" dev="configfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 350.142159][ T30] audit: type=1400 audit(1758913586.875:1013): avc: denied { mounton } for pid=10515 comm="syz.2.1093" path="/237/file0" dev="configfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.188163][ T30] audit: type=1400 audit(1758913587.705:1014): avc: denied { read } for pid=10515 comm="syz.2.1093" name="/" dev="configfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.213978][ T30] audit: type=1400 audit(1758913587.705:1015): avc: denied { open } for pid=10515 comm="syz.2.1093" path="/237/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.236499][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.245393][ T30] audit: type=1400 audit(1758913587.705:1016): avc: denied { read } for pid=10515 comm="syz.2.1093" name="/" dev="configfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.267495][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.274147][ T30] audit: type=1400 audit(1758913587.716:1017): avc: denied { read } for pid=10515 comm="syz.2.1093" name="/" dev="configfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.413977][ T30] audit: type=1400 audit(1758913587.936:1018): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 350.434170][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.968829][T10565] mkiss: ax0: crc mode is auto. [ 353.756618][T10586] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 353.809198][T10585] [U] J"—e:ÀÆ" [ 353.960837][ T7864] libceph: connect (1)[c::]:6789 error -101 [ 353.980865][ T7864] libceph: mon0 (1)[c::]:6789 connect error [ 354.108141][T10597] ceph: No mds server is up or the cluster is laggy [ 354.567840][T10614] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1117'. [ 354.577762][T10614] openvswitch: netlink: Key type 334 is out of range max 32 [ 354.799888][T10616] syzkaller1: entered promiscuous mode [ 354.807790][T10616] syzkaller1: entered allmulticast mode [ 355.051837][T10622] ISOFS: Unable to identify CD-ROM format. [ 356.571596][T10630] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1121'. [ 356.588054][T10630] 9pnet_fd: Insufficient options for proto=fd [ 357.278728][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1131'. [ 357.952477][ T30] audit: type=1400 audit(1758913595.479:1019): avc: denied { setopt } for pid=10654 comm="syz.0.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.256964][T10689] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 358.298492][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 358.401156][T10692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.678444][T10704] overlayfs: failed to resolve './file1': -2 [ 359.030001][T10708] tipc: Started in network mode [ 359.035361][T10708] tipc: Node identity 4, cluster identity 4711 [ 359.041584][T10708] tipc: Node number set to 4 [ 359.049183][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1146'. [ 359.130962][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 359.132206][T10715] zonefs (nullb0) ERROR: Not a zoned block device [ 359.150105][T10715] zonefs (nullb0) ERROR: Not a zoned block device [ 359.158643][T10715] zonefs (nullb0) ERROR: Not a zoned block device [ 359.165739][T10715] zonefs (nullb0) ERROR: Not a zoned block device [ 359.168080][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 359.172665][T10715] zonefs (nullb0) ERROR: Not a zoned block device [ 359.246975][ T30] audit: type=1400 audit(1758913596.780:1020): avc: denied { bind } for pid=10722 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 359.269047][ T30] audit: type=1400 audit(1758913596.780:1021): avc: denied { node_bind } for pid=10722 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 359.447582][ T30] audit: type=1400 audit(1758913596.980:1022): avc: denied { map } for pid=10728 comm="syz.0.1151" path="pipe:[31855]" dev="pipefs" ino=31855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 359.510695][ T30] audit: type=1400 audit(1758913596.980:1023): avc: denied { execute } for pid=10728 comm="syz.0.1151" path="pipe:[31855]" dev="pipefs" ino=31855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 359.533891][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.583295][ T30] audit: type=1400 audit(1758913597.100:1024): avc: denied { bind } for pid=10726 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.294396][T10740] vxcan1 speed is unknown, defaulting to 1000 [ 360.316083][ T30] audit: type=1400 audit(1758913597.851:1025): avc: denied { create } for pid=10730 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 360.345098][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 360.658259][ T30] audit: type=1400 audit(1758913598.191:1026): avc: denied { accept } for pid=10745 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 360.677746][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.796343][T10740] lo speed is unknown, defaulting to 1000 [ 361.987961][T10767] overlayfs: failed to resolve './file1': -2 [ 362.400631][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1163'. [ 362.621273][ T5850] Bluetooth: hci4: unexpected event for opcode 0x080c [ 363.778716][ T30] audit: type=1326 audit(1758913601.292:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 363.832899][ T30] audit: type=1326 audit(1758913601.292:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 363.856654][ T30] audit: type=1326 audit(1758913601.292:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 363.880125][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.890400][ T30] audit: type=1326 audit(1758913601.292:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 363.913879][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.920961][ T30] audit: type=1326 audit(1758913601.292:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 363.944393][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.030134][ T30] audit: type=1326 audit(1758913601.292:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 364.054461][ T30] audit: type=1326 audit(1758913601.292:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 364.078154][ T30] audit: type=1326 audit(1758913601.292:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 364.101786][ T30] audit: type=1326 audit(1758913601.292:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 364.180081][ T30] audit: type=1326 audit(1758913601.292:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc858eec9 code=0x7ffc0000 [ 364.589965][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 364.605516][T10821] bridge_slave_1: entered promiscuous mode [ 364.624241][T10821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 364.633461][T10821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 364.656773][T10805] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1172'. [ 364.937614][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 365.370614][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 365.379851][ T9] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 365.392357][ T9] usb 6-1: config 0 has no interface number 0 [ 365.409210][ T9] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=fe.8f [ 365.420416][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.428527][ T9] usb 6-1: Product: syz [ 365.434078][ T9] usb 6-1: Manufacturer: syz [ 365.438762][ T9] usb 6-1: SerialNumber: syz [ 365.446460][ T9] usb 6-1: config 0 descriptor?? [ 365.585685][T10848] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.662177][ T5902] usb 6-1: USB disconnect, device number 4 [ 365.732116][ T7864] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 366.090068][ T7864] usb 3-1: Using ep0 maxpacket: 16 [ 366.401040][ T7864] usb 3-1: config 0 has no interfaces? [ 366.408502][ T7864] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 366.423778][ T7864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.435643][ T7864] usb 3-1: Product: syz [ 366.446633][ T7864] usb 3-1: Manufacturer: syz [ 366.609881][ T7864] usb 3-1: SerialNumber: syz [ 367.057714][ T7864] usb 3-1: config 0 descriptor?? [ 367.267348][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 367.283487][T10842] erspan0: entered promiscuous mode [ 367.288785][T10842] macsec2: entered allmulticast mode [ 367.402295][T10842] erspan0: entered allmulticast mode [ 367.412726][T10842] erspan0: left allmulticast mode [ 367.418130][T10842] erspan0: left promiscuous mode [ 367.503942][ T5970] usb 3-1: USB disconnect, device number 41 [ 369.032231][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 369.032247][ T30] audit: type=1326 audit(1758913606.565:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 369.062606][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.421123][ T30] audit: type=1326 audit(1758913606.625:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 369.444590][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.549378][ T30] audit: type=1326 audit(1758913606.685:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 369.572874][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.784688][ T30] audit: type=1326 audit(1758913606.685:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 370.085996][ T30] audit: type=1326 audit(1758913606.685:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 370.134339][ T30] audit: type=1326 audit(1758913606.685:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 370.279063][ T30] audit: type=1326 audit(1758913606.685:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 370.307523][ T30] audit: type=1326 audit(1758913606.685:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 370.353377][ T30] audit: type=1326 audit(1758913606.685:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 370.494321][ T30] audit: type=1326 audit(1758913606.685:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0118eec9 code=0x7ffc0000 [ 370.517853][ T5909] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 370.534989][T10889] overlayfs: failed to clone upperpath [ 370.548327][T10891] loop2: detected capacity change from 0 to 7 [ 370.554996][T10891] loop2: p1 [ 370.647398][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1199'. [ 370.676271][T10891] loop2: partition table partially beyond EOD, truncated [ 370.714516][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 370.733070][T10891] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 370.764385][ T5909] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 370.901443][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.982706][ T5909] usb 3-1: config 0 descriptor?? [ 371.087500][ T5970] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 371.217163][T10884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.252018][T10884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.259993][ T5970] usb 6-1: Using ep0 maxpacket: 8 [ 371.270146][ T5970] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 371.278173][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 371.289869][ T5970] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.308268][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.320084][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.333436][ T5970] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 371.341235][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 371.352969][ T5970] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.365113][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.377259][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.390476][ T5970] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 371.399396][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 371.417152][ T5970] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.433159][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.460136][ T5970] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.474545][ T5970] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 371.483995][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.494884][ T5970] usb 6-1: Product: syz [ 371.500509][ T5970] usb 6-1: Manufacturer: syz [ 371.507143][ T5970] usb 6-1: SerialNumber: syz [ 371.784487][ T5970] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 371.797170][ T5970] usb 6-1: USB disconnect, device number 5 [ 372.087663][ T5909] ath6kl: Failed to submit usb control message: -110 [ 372.094925][ T5909] ath6kl: unable to send the bmi data to the device: -110 [ 372.102921][ T5909] ath6kl: Unable to send get target info: -110 [ 372.121443][ T5909] ath6kl: Failed to init ath6kl core: -110 [ 372.219350][T10933] overlayfs: failed to resolve './file1': -2 [ 372.594320][ T5909] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 373.145353][T10948] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 373.151718][T10947] [U] J"—e:ÀÆ" [ 373.327338][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.420933][ T5909] usb 3-1: USB disconnect, device number 42 [ 373.450435][T10949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.501246][T10955] loop2: detected capacity change from 0 to 7 [ 373.501717][T10955] loop2: p1 [ 373.501731][T10955] loop2: partition table partially beyond EOD, truncated [ 373.501773][T10955] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 373.506138][ T5970] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 373.837770][ T5970] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.846012][ T5970] usb 6-1: config 0 has no interface number 0 [ 373.864018][ T5970] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 373.930487][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.045745][ T5970] usb 6-1: config 0 descriptor?? [ 374.071916][ T5970] usb 6-1: selecting invalid altsetting 1 [ 374.085680][ T5970] dvb_ttusb_budget: ttusb_init_controller: error [ 374.124407][ T5970] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 374.224109][ T5970] DVB: Unable to find symbol cx22700_attach() [ 374.344881][ T5970] DVB: Unable to find symbol tda10046_attach() [ 374.364565][ T5970] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 374.466679][ T5970] usb 6-1: USB disconnect, device number 6 [ 374.699301][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 374.699468][ T30] audit: type=1400 audit(1758913612.238:1090): avc: denied { name_bind } for pid=10980 comm="syz.2.1219" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 375.085495][ T5970] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 375.255634][ T5970] usb 6-1: Using ep0 maxpacket: 8 [ 375.274775][ T5970] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 375.291463][ T5970] usb 6-1: config 179 has no interface number 0 [ 375.304902][ T5970] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 375.326094][ T5970] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 375.341320][ T5970] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 375.354422][ T5970] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 375.368842][ T5970] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 375.383889][ T5970] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 375.396314][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.432903][T10989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 375.453901][T10995] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in; [ 375.453901][T10995] program syz.0.1223 not setting count and/or reply_len properly [ 375.653912][ T5970] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input13 [ 375.669096][ T5909] usb 6-1: USB disconnect, device number 7 [ 375.669121][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 375.685728][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 375.819166][T11004] loop2: detected capacity change from 0 to 7 [ 375.837881][T11004] loop2: p1 [ 375.843611][T11004] loop2: partition table partially beyond EOD, truncated [ 375.862376][T11004] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 377.641853][T11039] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1232'. [ 378.167271][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.172600][ T43] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 378.173675][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.290017][ T43] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 378.335823][ T30] audit: type=1804 audit(1758913615.880:1091): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1233" name="/newroot/55/file1" dev="fuse" ino=1 res=1 errno=0 [ 378.358244][ T43] usb 2-1: USB disconnect, device number 40 [ 378.378226][ T30] audit: type=1800 audit(1758913615.880:1092): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1233" name="/" dev="fuse" ino=1 res=0 errno=0 [ 378.610447][T11057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.657809][ T5909] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 378.903454][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 378.925591][ T5909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 378.935696][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 378.948403][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 378.960681][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 379.012792][ T5909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 379.025121][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 379.035511][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 379.053844][ T5909] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 379.065879][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.077946][ T5909] usb 6-1: Product: syz [ 379.125653][ T5909] usb 6-1: Manufacturer: syz [ 379.130964][ T5909] usb 6-1: SerialNumber: syz [ 379.176999][ T5909] usb 6-1: config 0 descriptor?? [ 379.182741][T11043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.192412][ T5909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.327641][ T30] audit: type=1400 audit(1758913616.850:1093): avc: denied { mount } for pid=11059 comm="syz.1.1238" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 379.396928][ T5909] usb 6-1: USB disconnect, device number 8 [ 379.412955][ T30] audit: type=1400 audit(1758913616.860:1094): avc: denied { mounton } for pid=11059 comm="syz.1.1238" path="/247/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 379.769869][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 379.870396][T11065] tipc: Enabled bearer , priority 0 [ 379.968234][ T30] audit: type=1400 audit(1758913617.510:1095): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 380.317260][ T5902] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 380.371041][T11061] tipc: Disabling bearer [ 380.492740][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 380.515552][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 380.541419][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 380.567320][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 380.605751][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 380.644366][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 380.672805][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 380.692580][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 380.721582][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 380.764327][ T5902] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 380.782560][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.800997][ T5902] usb 2-1: Product: syz [ 380.811096][ T5902] usb 2-1: Manufacturer: syz [ 380.821198][ T5902] usb 2-1: SerialNumber: syz [ 380.833481][ T5902] usb 2-1: config 0 descriptor?? [ 380.839975][T11068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.855824][ T5902] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.855993][T11085] loop2: detected capacity change from 0 to 7 [ 380.889999][T11085] loop2: p1 [ 380.896477][T11085] loop2: partition table partially beyond EOD, truncated [ 380.909534][ T5902] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 380.912513][T11085] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 380.981925][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.994301][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.003495][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.015185][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.017885][T11092] tipc: Started in network mode [ 381.024150][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.037444][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.038830][T11092] tipc: Node identity ac14140f, cluster identity 4711 [ 381.046014][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.061416][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.070484][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.079560][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.081804][T11092] tipc: New replicast peer: 255.255.255.255 [ 381.098498][T11092] tipc: Enabled bearer , priority 10 [ 381.232376][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 381.336139][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.345253][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.485293][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 381.494583][ T9] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 381.506528][ T9] usb 3-1: config 0 has no interface number 0 [ 381.513002][ T9] usb 3-1: config 0 interface 211 has no altsetting 0 [ 381.520002][ T9] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 381.559379][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.599389][ T9] usb 3-1: config 0 descriptor?? [ 381.791972][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1248'. [ 381.832780][ T9] usb 3-1: string descriptor 0 read error: -71 [ 381.872557][ T9] radioshark 3-1:0.211: Invalid radioSHARK device [ 381.934380][ T9] radioshark 3-1:0.211: probe with driver radioshark failed with error -22 [ 381.948042][ T9] usbhid 3-1:0.211: couldn't find an input interrupt endpoint [ 382.042408][ T9] usb 3-1: USB disconnect, device number 43 [ 382.223205][ T5970] tipc: Node number set to 2886997007 [ 382.547303][T11116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1251'. [ 382.743290][T11118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 382.798384][T11118] kvm: Disabled LAPIC found during irq injection [ 383.008259][T11130] loop2: detected capacity change from 0 to 7 [ 383.017043][T11130] loop2: p1 [ 383.022191][T11130] loop2: partition table partially beyond EOD, truncated [ 383.046126][T11130] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 383.061920][ T5902] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 383.330933][T11136] overlayfs: failed to resolve './file1': -2 [ 383.671112][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 383.702269][ T5909] usb 2-1: USB disconnect, device number 41 [ 383.875207][T11133] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.896206][T11133] overlayfs: overlapping lowerdir path [ 384.110715][ T5902] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 384.222475][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.252739][ T5902] usb 3-1: Product: syz [ 384.257138][ T5902] usb 3-1: Manufacturer: syz [ 384.710424][ T5902] usb 3-1: SerialNumber: syz [ 384.887641][ T5902] usb 3-1: config 0 descriptor?? [ 386.010985][ T5902] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.151553][ T5902] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 386.274412][ T5902] usb 3-1: USB disconnect, device number 44 [ 386.432918][ T30] audit: type=1400 audit(1758913623.944:1096): avc: denied { write } for pid=11152 comm="syz.3.1262" name="file0" dev="tmpfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 387.387786][ T30] audit: type=1400 audit(1758913623.944:1097): avc: denied { open } for pid=11152 comm="syz.3.1262" path="/253/file0" dev="tmpfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 387.411371][ T30] audit: type=1400 audit(1758913623.954:1098): avc: denied { ioctl } for pid=11152 comm="syz.3.1262" path="/253/file0" dev="tmpfs" ino=1360 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 387.543075][T11174] No control pipe specified [ 387.813763][T11169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.914916][T11185] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 387.922997][T11183] [U] J"—e:ÀÆ" [ 388.099303][T11191] loop2: detected capacity change from 0 to 7 [ 388.111600][T11191] loop2: p1 [ 388.116502][T11191] loop2: partition table partially beyond EOD, truncated [ 388.132782][T11191] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 388.140366][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 388.254805][T11192] bond4: entered promiscuous mode [ 388.316522][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.325709][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 388.375771][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.468011][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 388.497053][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 388.523306][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.532795][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.543186][ T9] usb 6-1: Product: syz [ 388.547442][ T9] usb 6-1: Manufacturer: syz [ 388.576455][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 388.600226][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 388.618875][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 388.774816][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'. [ 389.039712][ T30] audit: type=1400 audit(1758913626.305:1099): avc: denied { setopt } for pid=11200 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 389.238632][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 389.660518][ T30] audit: type=1400 audit(1758913627.205:1100): avc: denied { read write } for pid=11207 comm="syz.1.1275" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 389.759978][ T30] audit: type=1400 audit(1758913627.205:1101): avc: denied { open } for pid=11207 comm="syz.1.1275" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 389.865552][ T5902] usb 6-1: USB disconnect, device number 9 [ 390.032574][T11224] netlink: 'syz.5.1278': attribute type 4 has an invalid length. [ 390.054629][T11224] netlink: 'syz.5.1278': attribute type 4 has an invalid length. [ 390.177921][ T30] audit: type=1400 audit(1758913627.715:1102): avc: denied { write } for pid=11217 comm="syz.5.1278" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 390.307299][T11227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 391.180854][ T30] audit: type=1400 audit(1758913627.715:1103): avc: denied { open } for pid=11217 comm="syz.5.1278" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 391.533345][T11230] input: syz1 as /devices/virtual/input/input14 [ 391.565005][T11233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1281'. [ 391.595530][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 391.616851][T11233] smc: removing ib device syz2 [ 391.689383][T11235] tipc: Started in network mode [ 391.707492][T11235] tipc: Node identity 5a382a1b1872, cluster identity 4711 [ 391.754776][T11235] tipc: Enabled bearer , priority 0 [ 391.977605][ T30] audit: type=1400 audit(1758913629.526:1104): avc: denied { unmount } for pid=9707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 392.048122][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 392.122971][T11241] loop2: detected capacity change from 0 to 7 [ 392.268608][T11241] loop2: p1 [ 392.272058][T11241] loop2: partition table partially beyond EOD, truncated [ 392.339093][T11241] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 392.392796][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 392.405805][ T9] usb 3-1: can't read configurations, error -71 [ 392.520730][ T30] audit: type=1400 audit(1758913630.057:1105): avc: denied { nlmsg_read } for pid=11243 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 392.551071][ T30] audit: type=1400 audit(1758913630.097:1106): avc: denied { getopt } for pid=11243 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.675741][ T30] audit: type=1400 audit(1758913630.097:1107): avc: denied { ioctl } for pid=11243 comm="syz.5.1285" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 392.701421][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.750126][T11247] veth1_virt_wifi: entered promiscuous mode [ 392.756678][ T5970] tipc: Node number set to 1112156699 [ 392.820718][T11247] netlink: 'syz.5.1286': attribute type 2 has an invalid length. [ 392.829474][T11247] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1286'. [ 392.841551][T11247] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 392.860107][T11246] netlink: 'syz.5.1286': attribute type 2 has an invalid length. [ 392.926800][T11246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1286'. [ 393.770453][ T8282] ================================================================== [ 393.778565][ T8282] BUG: KASAN: slab-use-after-free in __mutex_lock+0xe8a/0x1060 [ 393.786121][ T8282] Read of size 8 at addr ffff88807b4b80a0 by task khidpd_16bf5505/8282 [ 393.794353][ T8282] [ 393.796669][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) [ 393.796687][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.796697][ T8282] Call Trace: [ 393.796702][ T8282] [ 393.796708][ T8282] dump_stack_lvl+0x116/0x1f0 [ 393.796730][ T8282] print_report+0xcd/0x630 [ 393.796746][ T8282] ? __virt_addr_valid+0x81/0x610 [ 393.796765][ T8282] ? __phys_addr+0xe8/0x180 [ 393.796783][ T8282] ? __mutex_lock+0xe8a/0x1060 [ 393.796801][ T8282] kasan_report+0xe0/0x110 [ 393.796817][ T8282] ? __mutex_lock+0xe8a/0x1060 [ 393.796837][ T8282] ? l2cap_unregister_user+0x71/0x240 [ 393.796856][ T8282] __mutex_lock+0xe8a/0x1060 [ 393.796873][ T8282] ? lockdep_unlock+0x64/0xe0 [ 393.796891][ T8282] ? __lock_acquire+0x107f/0x1ce0 [ 393.796912][ T8282] ? l2cap_unregister_user+0x71/0x240 [ 393.796931][ T8282] ? __pfx___mutex_lock+0x10/0x10 [ 393.796952][ T8282] ? find_held_lock+0x2b/0x80 [ 393.796971][ T8282] ? l2cap_unregister_user+0x71/0x240 [ 393.796989][ T8282] l2cap_unregister_user+0x71/0x240 [ 393.797008][ T8282] hidp_session_thread+0x45e/0x660 [ 393.797027][ T8282] ? __pfx_hidp_session_thread+0x10/0x10 [ 393.797041][ T8282] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 393.797066][ T8282] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 393.797087][ T8282] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.797105][ T8282] ? __kthread_parkme+0x19e/0x250 [ 393.797126][ T8282] ? __pfx_hidp_session_thread+0x10/0x10 [ 393.797139][ T8282] kthread+0x3c2/0x780 [ 393.797153][ T8282] ? __pfx_kthread+0x10/0x10 [ 393.797167][ T8282] ? rcu_is_watching+0x12/0xc0 [ 393.797184][ T8282] ? __pfx_kthread+0x10/0x10 [ 393.797198][ T8282] ret_from_fork+0x56a/0x730 [ 393.797211][ T8282] ? __pfx_kthread+0x10/0x10 [ 393.797224][ T8282] ret_from_fork_asm+0x1a/0x30 [ 393.797245][ T8282] [ 393.797250][ T8282] [ 393.976181][ T8282] Allocated by task 5854: [ 393.980491][ T8282] kasan_save_stack+0x33/0x60 [ 393.985165][ T8282] kasan_save_track+0x14/0x30 [ 393.989831][ T8282] __kasan_kmalloc+0xaa/0xb0 [ 393.994402][ T8282] __kmalloc_noprof+0x223/0x510 [ 393.999230][ T8282] hci_alloc_dev_priv+0x1d/0x28a0 [ 394.004251][ T8282] __vhci_create_device+0xf0/0x880 [ 394.009341][ T8282] vhci_write+0x2c0/0x480 [ 394.013650][ T8282] vfs_write+0x7d0/0x11d0 [ 394.017963][ T8282] ksys_write+0x12a/0x250 [ 394.022273][ T8282] do_syscall_64+0xcd/0x4e0 [ 394.026758][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.032631][ T8282] [ 394.035103][ T8282] Freed by task 6567: [ 394.039054][ T8282] kasan_save_stack+0x33/0x60 [ 394.043708][ T8282] kasan_save_track+0x14/0x30 [ 394.048358][ T8282] kasan_save_free_info+0x3b/0x60 [ 394.053365][ T8282] __kasan_slab_free+0x60/0x70 [ 394.058105][ T8282] kfree+0x2b4/0x4d0 [ 394.061983][ T8282] hci_release_dev+0x4ef/0x610 [ 394.066720][ T8282] bt_host_release+0x6a/0xb0 [ 394.071290][ T8282] device_release+0xa4/0x240 [ 394.075862][ T8282] kobject_put+0x1e7/0x5a0 [ 394.080260][ T8282] put_device+0x1f/0x30 [ 394.084388][ T8282] vhci_release+0x185/0x230 [ 394.088869][ T8282] __fput+0x402/0xb70 [ 394.092832][ T8282] task_work_run+0x150/0x240 [ 394.097399][ T8282] do_exit+0x86f/0x2bf0 [ 394.101546][ T8282] do_group_exit+0xd3/0x2a0 [ 394.106053][ T8282] get_signal+0x2673/0x26d0 [ 394.110550][ T8282] arch_do_signal_or_restart+0x8f/0x7d0 [ 394.116079][ T8282] exit_to_user_mode_loop+0x84/0x110 [ 394.121343][ T8282] do_syscall_64+0x41c/0x4e0 [ 394.125917][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.131787][ T8282] [ 394.134086][ T8282] Last potentially related work creation: [ 394.139795][ T8282] kasan_save_stack+0x33/0x60 [ 394.144452][ T8282] kasan_record_aux_stack+0xa7/0xc0 [ 394.149719][ T8282] insert_work+0x36/0x230 [ 394.154023][ T8282] __queue_work+0x97e/0x1160 [ 394.158593][ T8282] queue_work_on+0x1a4/0x1f0 [ 394.163256][ T8282] hci_cmd_sync_submit+0x273/0x330 [ 394.168364][ T8282] hci_cmd_sync_run+0x93/0xf0 [ 394.173033][ T8282] hci_cmd_sync_run_once+0x61/0x70 [ 394.178124][ T8282] hci_abort_conn+0x182/0x340 [ 394.182787][ T8282] hci_conn_timeout+0x1a2/0x210 [ 394.187618][ T8282] process_one_work+0x9cc/0x1b70 [ 394.192533][ T8282] worker_thread+0x6c8/0xf10 [ 394.197100][ T8282] kthread+0x3c2/0x780 [ 394.201182][ T8282] ret_from_fork+0x56a/0x730 [ 394.205752][ T8282] ret_from_fork_asm+0x1a/0x30 [ 394.210501][ T8282] [ 394.212799][ T8282] Second to last potentially related work creation: [ 394.219353][ T8282] kasan_save_stack+0x33/0x60 [ 394.224005][ T8282] kasan_record_aux_stack+0xa7/0xc0 [ 394.229187][ T8282] insert_work+0x36/0x230 [ 394.233493][ T8282] __queue_work+0x97e/0x1160 [ 394.238062][ T8282] queue_work_on+0x1a4/0x1f0 [ 394.242627][ T8282] hci_recv_frame+0x503/0x880 [ 394.247283][ T8282] vhci_write+0x399/0x480 [ 394.251592][ T8282] vfs_write+0x7d0/0x11d0 [ 394.255897][ T8282] ksys_write+0x12a/0x250 [ 394.260200][ T8282] do_syscall_64+0xcd/0x4e0 [ 394.264684][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.270553][ T8282] [ 394.272852][ T8282] The buggy address belongs to the object at ffff88807b4b8000 [ 394.272852][ T8282] which belongs to the cache kmalloc-8k of size 8192 [ 394.286878][ T8282] The buggy address is located 160 bytes inside of [ 394.286878][ T8282] freed 8192-byte region [ffff88807b4b8000, ffff88807b4ba000) [ 394.300733][ T8282] [ 394.303031][ T8282] The buggy address belongs to the physical page: [ 394.309414][ T8282] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b4b8 [ 394.318149][ T8282] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 394.326625][ T8282] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 394.334143][ T8282] page_type: f5(slab) [ 394.338106][ T8282] raw: 00fff00000000040 ffff88801b842280 ffffea0001eb0600 0000000000000004 [ 394.346665][ T8282] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 394.355224][ T8282] head: 00fff00000000040 ffff88801b842280 ffffea0001eb0600 0000000000000004 [ 394.363872][ T8282] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 394.372526][ T8282] head: 00fff00000000003 ffffea0001ed2e01 00000000ffffffff 00000000ffffffff [ 394.381175][ T8282] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 394.389813][ T8282] page dumped because: kasan: bad access detected [ 394.396195][ T8282] page_owner tracks the page as allocated [ 394.401882][ T8282] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5507, tgid 5507 (sh), ts 36745693695, free_ts 36710380456 [ 394.421566][ T8282] post_alloc_hook+0x1c0/0x230 [ 394.426318][ T8282] get_page_from_freelist+0x132b/0x38e0 [ 394.431841][ T8282] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 394.437708][ T8282] alloc_pages_mpol+0x1fb/0x550 [ 394.442538][ T8282] new_slab+0x247/0x330 [ 394.446674][ T8282] ___slab_alloc+0xcf2/0x1750 [ 394.451331][ T8282] __slab_alloc.constprop.0+0x56/0xb0 [ 394.456687][ T8282] __kmalloc_cache_noprof+0xfb/0x3e0 [ 394.461951][ T8282] tomoyo_init_log+0xc8a/0x2140 [ 394.466781][ T8282] tomoyo_supervisor+0x302/0x13b0 [ 394.471782][ T8282] tomoyo_env_perm+0x191/0x200 [ 394.476520][ T8282] tomoyo_find_next_domain+0xec2/0x20b0 [ 394.482041][ T8282] tomoyo_bprm_check_security+0x12e/0x1d0 [ 394.487735][ T8282] security_bprm_check+0x1b9/0x1e0 [ 394.492826][ T8282] bprm_execve+0x81a/0x1640 [ 394.497306][ T8282] do_execveat_common.isra.0+0x4a5/0x610 [ 394.502913][ T8282] page last free pid 5506 tgid 5506 stack trace: [ 394.509211][ T8282] __free_frozen_pages+0x7d5/0x10f0 [ 394.514390][ T8282] __put_partials+0x165/0x1c0 [ 394.519052][ T8282] qlist_free_all+0x4d/0x120 [ 394.523615][ T8282] kasan_quarantine_reduce+0x195/0x1e0 [ 394.529048][ T8282] __kasan_slab_alloc+0x69/0x90 [ 394.533877][ T8282] __kmalloc_noprof+0x1d4/0x510 [ 394.538703][ T8282] tomoyo_supervisor+0x45b/0x13b0 [ 394.543701][ T8282] tomoyo_path_permission+0x270/0x3b0 [ 394.549049][ T8282] tomoyo_path_perm+0x362/0x460 [ 394.553876][ T8282] security_inode_getattr+0x116/0x290 [ 394.559229][ T8282] vfs_fstat+0x4b/0xe0 [ 394.563278][ T8282] __do_sys_newfstat+0x87/0x100 [ 394.568106][ T8282] do_syscall_64+0xcd/0x4e0 [ 394.572591][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.578459][ T8282] [ 394.580755][ T8282] Memory state around the buggy address: [ 394.586356][ T8282] ffff88807b4b7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 394.594390][ T8282] ffff88807b4b8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.602424][ T8282] >ffff88807b4b8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.610457][ T8282] ^ [ 394.615540][ T8282] ffff88807b4b8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.623575][ T8282] ffff88807b4b8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.631693][ T8282] ================================================================== [ 394.640800][ T8282] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 394.647998][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) [ 394.657708][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.667744][ T8282] Call Trace: [ 394.671002][ T8282] [ 394.673913][ T8282] dump_stack_lvl+0x3d/0x1f0 [ 394.678490][ T8282] vpanic+0x6e8/0x7a0 [ 394.682460][ T8282] ? __pfx_vpanic+0x10/0x10 [ 394.686948][ T8282] ? __pfx_vprintk_emit+0x10/0x10 [ 394.691958][ T8282] ? __mutex_lock+0xe8a/0x1060 [ 394.696704][ T8282] panic+0xca/0xd0 [ 394.700398][ T8282] ? __pfx_panic+0x10/0x10 [ 394.704799][ T8282] ? check_panic_on_warn+0x1f/0xb0 [ 394.709885][ T8282] check_panic_on_warn+0xab/0xb0 [ 394.714798][ T8282] end_report+0x107/0x170 [ 394.719134][ T8282] kasan_report+0xee/0x110 [ 394.723531][ T8282] ? __mutex_lock+0xe8a/0x1060 [ 394.728279][ T8282] ? l2cap_unregister_user+0x71/0x240 [ 394.733636][ T8282] __mutex_lock+0xe8a/0x1060 [ 394.738223][ T8282] ? lockdep_unlock+0x64/0xe0 [ 394.742882][ T8282] ? __lock_acquire+0x107f/0x1ce0 [ 394.747890][ T8282] ? l2cap_unregister_user+0x71/0x240 [ 394.753247][ T8282] ? __pfx___mutex_lock+0x10/0x10 [ 394.758254][ T8282] ? find_held_lock+0x2b/0x80 [ 394.762913][ T8282] ? l2cap_unregister_user+0x71/0x240 [ 394.768265][ T8282] l2cap_unregister_user+0x71/0x240 [ 394.773444][ T8282] hidp_session_thread+0x45e/0x660 [ 394.778535][ T8282] ? __pfx_hidp_session_thread+0x10/0x10 [ 394.784147][ T8282] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 394.790380][ T8282] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 394.796605][ T8282] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.801785][ T8282] ? __kthread_parkme+0x19e/0x250 [ 394.806792][ T8282] ? __pfx_hidp_session_thread+0x10/0x10 [ 394.812406][ T8282] kthread+0x3c2/0x780 [ 394.816454][ T8282] ? __pfx_kthread+0x10/0x10 [ 394.821021][ T8282] ? rcu_is_watching+0x12/0xc0 [ 394.825766][ T8282] ? __pfx_kthread+0x10/0x10 [ 394.830332][ T8282] ret_from_fork+0x56a/0x730 [ 394.834897][ T8282] ? __pfx_kthread+0x10/0x10 [ 394.839464][ T8282] ret_from_fork_asm+0x1a/0x30 [ 394.844213][ T8282] [ 394.847456][ T8282] Kernel Offset: disabled [ 394.851751][ T8282] Rebooting in 86400 seconds..