last executing test programs: 16m21.689183077s ago: executing program 32 (id=305): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020) 16m0.397876698s ago: executing program 33 (id=499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r2, 0x0) listen(r0, 0x0) 14m44.114904s ago: executing program 34 (id=1064): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="00214717a7070075000003060000000000", 0x11}], 0x1, 0x73a, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0xc0) getdents64(r3, 0x0, 0x3705) 14m42.214311983s ago: executing program 35 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001700000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 5m1.708020113s ago: executing program 36 (id=3251): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)="8cb5b5cd4af62ba9bef972d90df3f044303fd3deb2ff", 0x16}], 0x1, 0x8, 0x5, 0x12) 4m17.772029266s ago: executing program 3 (id=3379): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 4m16.78410128s ago: executing program 3 (id=3383): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) io_setup(0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000001a180)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f000001a0c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x44000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_io_uring_setup(0x99e, &(0x7f0000000140)={0x0, 0x90c4, 0x10, 0xfffffffe, 0x8c}, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x49, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pwritev(r0, &(0x7f0000000500), 0x0, 0xfffffffa, 0x1f8) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) get_mempolicy(0x0, 0x0, 0x20000200, &(0x7f0000ffd000/0x2000)=nil, 0x3) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x300000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 4m15.026888743s ago: executing program 3 (id=3389): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4178, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x40002, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x134, 0x2, [@TCA_ROUTE4_ACT={0x130, 0x6, [@m_bpf={0x12c, 0xa, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x0, 0x1, 0x9}]}]}, {0xf5, 0x6, "8eb55930760aaf0b59772c5971036fba8994239acc2d66a896c98c740ca7d203000000000000002a326cef7c8ba136d0bce7d5be2f44c0f7df2af8b58cd15301925bdef87ac2e982db6d48439b06b9d7e9e88cb4d0262a5d0900461c33b2f76470602416519436d7f6f3d3dec1bf02a5ce6e83f8664d689fd77f1519cfac04b8ebd7ea20e82977ee8d8e46d44e8f8c8485af903929b1f3288322548d9e6a92389a03899eaaba97faeef8863180bc96804713e41b3d6d0032dc6414d0626a176725767c2a42131583a64bf3c2e43f64d02f9be090aa44978db670068ac547d4aa7dfb2219f8c926b7d6925ec9105d34f3b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004}, 0x20008885) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x501) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=@setlink={0x40, 0x13, 0x5, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m13.185948932s ago: executing program 5 (id=3395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m13.02406915s ago: executing program 3 (id=3396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(0x0, &(0x7f0000000280)='./file0\x00') 4m12.982184097s ago: executing program 5 (id=3398): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0xa) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x517a20f7, 0x8040000000000000}) close_range(r3, 0xffffffffffffffff, 0x0) 4m12.874090507s ago: executing program 3 (id=3399): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180084f70000000200000200950000000000000000001800"/34], &(0x7f0000000180)='GPL\x00', 0x0, 0x9f, &(0x7f0000000240)=""/159, 0x1e00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x0, 0x5eb8, 0xfffffffc}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=[{0x1, 0x2, 0xd, 0x1}, {0x0, 0x3, 0xc, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=0xffffffffffffffff, 0x13, 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x25, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf97, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x521, 0xe0, &(0x7f0000000840)=""/224, 0x81e00, 0x28, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x10, 0x7fff, 0x4}, 0x10, 0xcd91, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000009c0)=[{0x80000000, 0x3, 0xf, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0xf}, 0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) fsetxattr$security_ima(r6, &(0x7f0000000ac0), &(0x7f0000000b00)=@v2={0x5, 0x3, 0xd, 0x2, 0x67, "83e98434581f4e29bfda98f661e12b365064c750f1758530b51fee523cb4614f73329acef790611814d096854acb7ada88a69e53570bbdef566447ffa8c7721dd2f9cd1607598c2199d058c27c5019075c88aa1955b2eb278befbf58bc6b2d3399049cd9644027"}, 0x70, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r10, 0x8}, &(0x7f0000000140)=0x8) 4m12.743891653s ago: executing program 5 (id=3401): socket$inet6(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1) 4m12.536600783s ago: executing program 3 (id=3403): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r2, &(0x7f000001fc40)={0x2020}, 0xffffffca) listen(r0, 0xfffffffe) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @hyper}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='N', 0x1}, {&(0x7f0000000280)="9fd831fdf734cb55b59f74a1f3b403a96f5b4415814fa48fd18f98e2858857ab56fa28b3e451169bc328ed", 0x2b}], 0x2, 0x0, 0x0, 0x4000800}, 0x20040811) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc02c5625, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f003}) recvfrom$unix(r3, &(0x7f0000000500)=""/241, 0xf1, 0x10120, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) 4m11.543394219s ago: executing program 37 (id=3403): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r2, &(0x7f000001fc40)={0x2020}, 0xffffffca) listen(r0, 0xfffffffe) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @hyper}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='N', 0x1}, {&(0x7f0000000280)="9fd831fdf734cb55b59f74a1f3b403a96f5b4415814fa48fd18f98e2858857ab56fa28b3e451169bc328ed", 0x2b}], 0x2, 0x0, 0x0, 0x4000800}, 0x20040811) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc02c5625, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f003}) recvfrom$unix(r3, &(0x7f0000000500)=""/241, 0xf1, 0x10120, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) 4m11.515772818s ago: executing program 5 (id=3409): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(0x0, &(0x7f0000000280)='./file0\x00') 4m11.400520976s ago: executing program 5 (id=3410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d0, 0x2, 0x1, 0x35c}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 4m11.199568663s ago: executing program 9 (id=3411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000540)={0x13, 0x9fd2b001b467feb2, {0x3, @struct={0xd87, 0xfffffff9}, 0x0, 0xfffffffffffffc00, 0x8, 0x3, 0x8, 0x7fffffffffffffff, 0xa4, @struct={0x401, 0x3}, 0x7, 0x2, [0x0, 0x10001, 0x7fff, 0x7, 0x26000, 0x39c8]}, {0x1ff, @struct={0xebfc, 0xfffffffd}, 0x0, 0x4, 0x4d, 0x0, 0x3, 0x0, 0x6, @usage=0x8d, 0x401, 0x4a5, [0x45a, 0xec, 0x0, 0xca6a, 0x8, 0x3]}, {0x5, @usage=0xff80, 0x0, 0x0, 0x1d6, 0xff, 0x0, 0x2, 0x8, @usage=0x9b, 0x9, 0x4, [0xfff, 0x3c51, 0x7, 0x6, 0xffffffffffffff01, 0x10001]}, {0x562, 0x8d31, 0x2a0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000940)={0x0, 0x100000001, 0x0, [0x8001, 0xb, 0x0, 0x20, 0xb15], [0xfffffffffffffffc, 0x1, 0x70a, 0xa, 0x6, 0x0, 0x8000000000000000, 0x8, 0xffffffffffffb466, 0xe, 0x4, 0x800, 0x7, 0x5, 0x8000000000000001, 0x5, 0x80, 0x11, 0x8, 0x4, 0xffff, 0x81, 0xe8, 0xf, 0x3a9, 0x7a8, 0x3535, 0x8, 0x100, 0x6, 0x4, 0x4, 0x8, 0x8000000000000001, 0x6, 0x7, 0x3, 0xeccc, 0x147400000, 0x8001, 0x3, 0x3, 0xb, 0x8001, 0x8, 0x2, 0x862, 0xffffffffffffffff, 0x3, 0x7, 0x6, 0x81, 0x3, 0x6, 0x8, 0x7, 0x8, 0xffffffffffffff7f, 0x80000001, 0x0, 0x8, 0x6, 0x2, 0x8c3, 0x0, 0x5, 0x8, 0x905, 0x3, 0x2, 0x1, 0x7, 0x6, 0x3, 0x8, 0x2832, 0xab4, 0x8, 0x7, 0x0, 0x1, 0x7f3, 0x4, 0x83b, 0x7, 0xd1, 0x0, 0x0, 0x8, 0x4, 0x9, 0x8, 0x4c400d5c, 0x8001, 0x4, 0x5, 0x0, 0x0, 0x8000, 0x8000000000000001, 0x2, 0x7, 0x81, 0x8, 0x381, 0xb, 0x0, 0x9, 0x3, 0x9, 0x5, 0x8, 0x3, 0x50, 0x6, 0x8, 0x5, 0x7, 0xcf1, 0x100, 0xe]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000d80)={0x15, 0x1, {0x8000000000000001, @struct={0x80000001, 0x7fffffff}, r6, 0x4, 0x3, 0x9, 0x78, 0x6, 0x10, @usage, 0x8, 0x1, [0xffba, 0x82, 0x7, 0x2, 0x101, 0x2c1c3979]}, {0x6, @struct={0x2, 0x4c46acb6}, r7, 0x4, 0xfffffffffffffff5, 0x9, 0x32, 0x7fffffffffffffff, 0x400, @struct={0x2, 0x2}, 0x1, 0xfffffffd, [0x1, 0xff, 0x552a, 0x7fffffffffffffff, 0x6522b590, 0x3]}, {0xffffffffffffffff, @struct={0x7, 0xd29}, r8, 0x80000000, 0xfff, 0x9, 0x8, 0x6, 0x0, @struct={0x0, 0x80000000}, 0x3, 0x4, [0xffffffffffff702c, 0x8, 0x4, 0x81, 0x6, 0x7fffffff]}, {0x8, 0x75, 0x6}}) 4m10.303886599s ago: executing program 5 (id=3414): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000e000/0xa000)=nil, 0x3000, 0x3}) 4m9.581614506s ago: executing program 38 (id=3414): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000e000/0xa000)=nil, 0x3000, 0x3}) 4m9.578872336s ago: executing program 9 (id=3416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) 4m9.249285953s ago: executing program 9 (id=3418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4m8.296369119s ago: executing program 9 (id=3419): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', 0x0) 4m8.001092046s ago: executing program 9 (id=3420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000480)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x80000007, 0x0, 0x7102000000000000, 0x8, 0x12a4bcc3, 0xbc, 0x9, 0x1, 0x6, 0xffff, 0x1, 0x8, 0x5, 0x7fffffffffbfbfff, 0x9, 0x5], 0xeeef0000, 0x100100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m6.544855551s ago: executing program 9 (id=3423): socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, 0x0, 0x0, 0x12000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 4m6.165532993s ago: executing program 39 (id=3423): socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, 0x0, 0x0, 0x12000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 2m47.37720251s ago: executing program 1 (id=3723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d0, 0x2, 0x1, 0x35c}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 2m47.038484297s ago: executing program 1 (id=3726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x28002, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x80000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000003c0)={0x0, 0x1, [0x0, 0x0, 0x1, 0xfff, 0x7, 0x1ff, 0x8, 0x23af]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0x0, 0x99, {0x63, 0x7}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x2f, 0x9f, 0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000780)={0x48, 0x0, 0x0, [{0x4, 0x3ff, 0x0, 0x1}, {0x2, 0xd, 0x4, 0xf, 'pci\x00'}]}, 0x48) (async) dup(0xffffffffffffffff) (async) getsockopt(r0, 0xe, 0xfffffffa, &(0x7f0000000040)=""/133, &(0x7f0000000180)=0x85) r8 = syz_clone(0x6000200, &(0x7f0000000140)="e97d5781c1c47db21d", 0x9, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="4d772e7283f0a70331f9b000e39d0aa06da9c9bb6aab372b56e24748b25cc28eb73047e11dc87f5134b29a414b2cfa79983f34bdecddd8c47f4a25a3748e0ce38fd85ac820854a7ec2b91df7fe6d9af4a4edb05bb79925001d5ea9b7a8b6090ce5bdab36c42dc72819815290af2de70f0229c0ec4914be49b96344bb0c04fcbc9b780f881f3999f78bcac06e2de079e771f29f82b7edc2921e347297ea3adc795b67184ca0d237d28370546f771deb15bd807d25aa480f345c6ad9da6ae138ff50af460f9756ec5870eeb7eda01fd9967ee24eabd423e878b146c65319abf84e550d527ccefb8be62dee89ebde563d") sched_setscheduler(r8, 0x6, &(0x7f00000005c0)=0x7fffffff) 2m44.072016204s ago: executing program 1 (id=3735): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000540)={'P\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1002) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0xd4, 0x24, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xffff, 0x8}, {0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x86}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7f, 0xb7b5, 0x1, 0x7, 0x6, 0x1}}, {0x6, 0x2, [0x200]}}, {{0x1c, 0x1, {0x6, 0xff, 0x9, 0x1, 0x1, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x100, 0x0]}}, {{0x1c, 0x1, {0xeb, 0xa, 0xf, 0x5, 0x2, 0x9c, 0x1, 0x3}}, {0xa, 0x2, [0x7f, 0x800, 0x7]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfc}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8000}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x2004c890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x5e5480) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x80, 0x0, 0xf}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) 2m39.53578268s ago: executing program 1 (id=3743): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 2m39.486441727s ago: executing program 1 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f0007000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 2m39.044028699s ago: executing program 1 (id=3746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d0, 0x2, 0x1, 0x35c}, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 2m38.856362658s ago: executing program 40 (id=3746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d0, 0x2, 0x1, 0x35c}, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 41.020087004s ago: executing program 4 (id=4201): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200ff797a310000000008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1039699b6308b2e8d820000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r3) fchdir(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x1) r5 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x102}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 40.684223757s ago: executing program 4 (id=4202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="23c65d54f4c5b2babf5c69a185dbff810f38fd90ca899adb0f5f20000000000000005ccad8c230f11b3f1d4db7d6d15136901ae9b5630dde5ae4617eab63a73595bac8332292e02cbc98162455420f9435aa727b090260f7c68e06e1e54e2bcfe9e4210d9ba263e2000000f8a49f102874d2fe80fec28e0b84552470f43e45c508dae05d842d28101ce992cfb22754e81de7e2ba70efceb435946b644796b2ed7d909371b5094bfbce2c8861f0597561c7440814ee2ce467eb3193558b1c454e6c4ada2d4c4c0671485a7c6b5c13a498e261835b6f1ecd6f513d85eac1c619f77ea9c8b1c4f73a37c398569e780bb5b5d0856030e64da2575e2b5e072c4061c1631d5ee88067f249a3ec00343ff37914226422d33a143ec733c66ba2619c4fea5ee9ff07374ea98620e5cca892997b11bdd7c7e0ea553e207c38df29a5ae58d0ef611a1460bc5b03a63a728eff9b1ce98885a6497033d54486cc939bb92c5d292a37fe9ac2f5e7d3913612ca91dcf2d137f90aab571907673a4399680acec5cc8b5b87ecc14223c95a65c95dda1f227a9db02cca68a4a157c9da8e5dacdab0cd9d3df0f055b8a2c99f1eced693fa46525e21f651fee85f47c6f3fd6acb1e51e5542c1212508a72c7e79a7cb8eeae7aca7bba4b4d9d74c2b7c5cb111f0d716d57ae21b8abda1658abfd250e9be722c37e886d5fb073c39f", 0x2, 0x0, 0x7ffc}, 0x21) (fail_nth: 1) 40.436059756s ago: executing program 4 (id=4203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) landlock_restrict_self(r4, 0x0) getrlimit(0x6, &(0x7f0000000100)) landlock_restrict_self(r4, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x8) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioprio_get$pid(0x1, 0x0) 39.51303627s ago: executing program 4 (id=4204): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 39.319209779s ago: executing program 4 (id=4206): rseq(&(0x7f0000001980)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) (fail_nth: 2) 39.008073998s ago: executing program 4 (id=4208): r0 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r2 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0xe07a, 0x3000, 0x80200000, 0xfefffffa}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) umount2(0x0, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x101802, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 38.852808312s ago: executing program 41 (id=4208): r0 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r2 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0xe07a, 0x3000, 0x80200000, 0xfefffffa}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) umount2(0x0, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x101802, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 14.27691942s ago: executing program 6 (id=4292): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.41956635s ago: executing program 6 (id=4295): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) (fail_nth: 3) 13.135993034s ago: executing program 6 (id=4296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) 13.01098102s ago: executing program 6 (id=4299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendto$packet(r2, &(0x7f0000000040)="48357e0287af48ffa745b497a54e0eec1b81000000000000009d15afaef1bd7efe075ff441b16e244b8b05fe", 0x3b, 0x0, 0x0, 0x0) 12.635440377s ago: executing program 6 (id=4302): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000240)={@local}, &(0x7f0000000300)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000280)={0x18, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x415, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x13d60bb, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xbb2, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000040801040000000000000000000206000240884c0000060005000300b6000000000000000000000018b187b4c61a252c774376613edfb3d2f99878755afb3515bff10d0a847e4d77aa6e84d12cd0e80b497eeae563a4f253265521d9f0bd8045d185f4fe76b34553a12bc28144ffc59fbf997ff6dae9099d1ae3be1ff36a8a857dc16bbf57d2d83adb8ab69c04a0bd055e3e92d87f42a086f5bfeaa3ccebab242417849f41d7df8fc9df837f265b86355bd5459857932dd5b96f68a5dff9ea8a9237accd337d3c260edcab72c1a43917023a25f928092a24"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x48001) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x80001) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000180)="9433d4afef5c461912401a8221c4c154752c31945144a45fd9acb25b67c167cb3c3749cd224fba3a780710c5c99f08bd643bc96d9c4fedaadd00c65b", 0x3c, 0x1c, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000}, 0x1c) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440), 0x106}}, 0x20) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27", 0xfdef}], 0x1) 8.784594207s ago: executing program 8 (id=4315): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r1, 0x9}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0xa000, 0x7f, r5, r6, 0xfffffffb, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/220], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) read(r3, 0x0, 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r7, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x185802, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e24, 0x7f, @local, 0x3}, r1, 0x7}}, 0x48) 8.575752001s ago: executing program 2 (id=4316): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x80108907, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/36, 0x24) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xf1, 0x0, 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sysfs$1(0x1, &(0x7f0000000080)='\x00') 7.270343508s ago: executing program 7 (id=4323): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 5.783300841s ago: executing program 7 (id=4325): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)='>', 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000006c0)="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", 0x141}, {&(0x7f0000000540)="f2e659a0b00d26c2ee23", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="1b0c5d5f73adbf7ac24dfc5633039f9abdc2f411f62b255858ac6e57395f702e381f49eb6a7bc583d82c4eeeb9009dd85747751f5aa2f275f96c24f86a0cdc3540df1cfa0adda370ec9b7374756f670864ddca3d2d2f08ba4fbea34f395bc995abdb5ff7cf851f72cceb6efadef877fccfab99e7a7a651", 0x77}, {&(0x7f0000000280)="a0c191979604882b7f", 0x9}, {&(0x7f0000000500)="e9c63b0260236e1dbcbd9efb0178d78d9a911a134f78f1ce28e59b19e6fb81ed4428c29701c2", 0x26}, {&(0x7f0000000840)="b3934588d4ea831e7052ce17168cc1ec8f74f81a2bd5fb0f6aba928b9fd360f057cd0008e220e84e7b84aef6ea7677da2c90697277c3bd4b0614a9f2deb52f50e1731da869cf3e9541cb51e4db015edc30f5c196102628ec7367370e420302218bbd45dd1822d7af0a016cd1bf46a53d0b684f0b397465ac397a02f1b4f125c0b8ed177daa2e140d916fcf51273e742f8deac6915f01f0e2285cc130804c63852ab1d48fe208ebfafd2b23fd5bcbf70e2b", 0xb1}, {&(0x7f0000000600)="96e9787f9f2c42", 0x7}, {&(0x7f0000000900)="2bd467f9f96bf0d2880b5bb83585241d1ced9fe8130dc8661802d222318553a1acc24482ae10ed2aaf63f98060451d1be7a3910ba13af29b437f94973f9266a28338c80d6f6d890a7dd072d773df9c20c451bc5900414e5267683fd218c3090386abc0a580db596ae4aa7969a5c106cbbc3c88a3f15c5bd9855ce963bf31c5704df43a7c863eb96a58f9ad215decb86dd7c6dd7334f3d734987c78833ee9a75b", 0xa0}, {&(0x7f00000009c0)="9056591c33ac8ff6e985d954cb24b1a11385cc9c8ce760bef184b425b2021e5b7bc784664b03f7cd9d790c48d4651dd934a759ef6e801bd7e4c428face7c55738022a2cf8a345e3f0551f921752adba0370f340290c765bc4b2779305f6a92cbeebc34fdc20ed1d84b9a99cc23115a0c8742e4d56c980ce38806233e25baf444e75d33686a598efc3e462aef607ee202239fa81acacd204f95f4d4bb8c83ef076ed6de6721a4fdce533a8fcbc26c19e4a36d673c0f2aef9c5e466dbe9598c12167f3e7e8f4a45f3a4973da55a1998a", 0xcf}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)}}], 0x4, 0x44091) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x505d, 0x500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r6) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 5.050622715s ago: executing program 2 (id=4327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x100000001, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000340)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc81) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) r4 = syz_usb_connect(0x3, 0x645, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x5c, 0x3c, 0x22, 0x1c, 0x90c, 0x2000, 0x6a74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x633, 0x1, 0x6c, 0x1, 0x0, 0x9, [{{0x9, 0x4, 0x1a, 0x1, 0x9, 0xe5, 0xab, 0xf7, 0x3, [@generic={0xba, 0x22, "f1693dd5fc2f849d86d0f4c440f30ff7c9fd3c2b7635343af7ecd963c7ec9a619fd7c63a91aa0a83b02b051dce654f267c3f4c5b8d848e21bc50e39ce6c4f07623ae3edfec9d6bdd9c0a7cfae37ec4198aaca9531484bc3d2d99cb2d92d3c08630142f0d085df87a0b57a24123217a17ddd348bd5320e9c877c6ab3eb9fc0bc7f0d42c0cb0dca15ff3ac6d3daa1c2a5070439c58d2f5e07c01437cd6be489b3269d88b9bf79cac0678f36eb9d3fea6402c1c8f8cfab760c8"}], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0xf, 0x3, [@generic={0xfd, 0x2f, "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"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x9, 0x3, 0x9, [@generic={0xb7, 0xc, "49564b364a451e6c6f458c1c9a82b65483882bf2eff1a7a1554c9c8ca1c0b4f778165199043871b3e6adf120d1da2bbc53eae392dd2de83a6acb0ed0cb96553f54ca3b3fcb98e869184794cf96b796c25538b877347fce0ab7ba28f5f35e621639b117bb6c932279589bb1eb711ef7e7efe4af5d4340a7ade939e8151bf738c8c5cc902dab36613fbe604ef35a84f035cf17295d08dd5db88ff625736f70e55cd4c9246105d4bd85112a1ac09768cf1b9a68d5075d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8a, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x5ff, 0xf, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8000}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x7f, 0x80, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0x891}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7f, 0x6, 0x3, [@generic={0x56, 0xb, "5fd09dab65b990160473d2c180e04b8035f3560756f99b09c394de3bd7ee39cdfd9522fda9992a1b7a4bc7b76f13b59d2c73e114d258cbded6f8d1b0ecd31ecd9440599f920733e6f85d6472bda92ac0b65a779f"}, @generic={0x4e, 0x23, "884609e81006e704be9a2b6e189bf6085f9959b89a8666e53490a61038cc75569b1fe5b38d167ca195b700452e6129dc17dca04d18386bddced465d5404c02b1a2197dda3647f54a95cc3487"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xcb, 0x9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x5, 0xfb, 0x2, [@generic={0xf8, 0x30, "b226abf14740ebe8d6c8f1fefea94aa8b9cf233ceaed39e965c203e4640e4b3faa6c33eec919cc4a8d4aade1af8bd9e1c77d30aa790bb74d74c70871b60024a91b48b79e4a5b4edfb9221bc13802249d620021d9ccb394eb4662cf585a565652f4dda8cf557d0e9299846ef15b6c7b0f8e5598eaeb46c6f7bdd502b37353f7d874091d34d3d4b2d531b63ef6861b5db30195bbe46a8f4925563d2347b330f209718f2bff45e184d232144013ff49e0923e8408c1b072d631f19b51f2640acf96945a171e315c85d6a5ff475324b25f512a833c801619b4fbd657e22f2170a4a8760649aa389e19f2c1a1a644d75aee0fc0ac6f3ff59d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0x2, 0x7f, [@generic={0xe9, 0xa, "4908156115b3b559124d039d86998dba0c1afe790fde38143244fd3fc8fdb4f97b763beade4fe8ef274dcd56dec54764783bdb3337e06f2a513c0da6a054e9e97cb6f9fc10f15d6b5f9644d7764cbe06c1ad9710ca6a0bef20518ae328d6d9706f7c40a247409add2296f1897d4efaddb633672530fd22992a6394d3554a9449450508320e62669c129ca3e8292975946fd9194f12c94bc10c1691e47a722be36be0b5699b69c545cc9b8563462ad7771ffd7acf7ce66fe4ad9283fbff30ebabe54b4a04c6cbdd2b60cb32cbace5e98346d06efd3d003c385fe71ed836939fd006927cbf264481"}, @generic={0xba, 0x13, "55762fb4dd6090e80de09ba997cc79bb008c0345af9fd714ff19a99dfedc69f070cd1339495a9027a91fe13e9bd549a6a0109f50bbb8d08d4f0bf7159198b3b6b17e968053dd830fec2f955be6d89296d542844e91892bb2db7bb5a346b8ab2d8e9b8031115fb28009a611a65b091477230f1ba4b07263241e502ccb7b2907170dcc10fc41cbc2c1e528e96749da186b50c9aeef213504b765063d0b56abc467beec68567c1470d763c73470a565bd296adb6b0ff30c0baf"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x51, 0xa, 0x65, 0xff, 0xc}, 0x4e, &(0x7f00000000c0)={0x5, 0xf, 0x4e, 0x3, [@generic={0x2a, 0x10, 0x1, "ef4771cc635e2d005d09c5b4101992c69fb983062ee7eb0454f33bb75e88fe1a0e36c4313673a8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x5, 0xb, 0xf800, 0x28}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "184057bbac1add452bd586b02d0abda9"}]}, 0x3, [{0xd, &(0x7f00000002c0)=@string={0xd, 0x3, "f08af1b117218a5cf3654f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x409}}, {0x8c, &(0x7f0000000a00)=@string={0x8c, 0x3, "be7a923807cb9e1abe9b081f2184931e47bc214ee3a2656cdf9b593b0a1a64182e65da23efc188303bfdc15b2048b90469a75e6f4e440b1e816e5e034dfcb41623fd02c3dfa33b1b3184fbd8fedbb154dd7bf5bf94e5cc7d7b2b92fe84627f8819b1cf40041a241a9edfe1f8a1cbe9ee85dc96b5bba2431fa7a7f20fe1c8c816e00f8a2d5feb8a66ab01"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000bc0)={0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="00015000000050002e2f64ff4fa1b34b310300d573288cf5086178dec698fc000000000000017e1b71c4b96fa8bc245eebdc7a65ca18e61458c8294c4e02e32ebd00662c791a9e9b58f33c45f20c22c44aad1e80"], &(0x7f0000000b80)={0x0, 0x3, 0xa, @string={0xa, 0x3, "64804bb5640a6b4e"}}}, &(0x7f0000000e40)={0x34, &(0x7f0000000c00)=ANY=[@ANYBLOB="400e3a0000000b833cd9378e658edaa8c0ec828b8ecc82615cc5c4de7c46bbf7bb3abe585b72099c73f3bceb936fcda2ce1acaadf95b76cc45981c6b921d42f8"], &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000cc0)={0x20, 0x0, 0xf5, {0xf3, "a5bf7e33d43e55bc25d796a13408f02978ec9799700749f19bcc575e7aae699695e6c1cc81d0dde600c7c949427be4543f4e8a86d7f0a6fa84aee4fd658d8c30d4cc78e1aa745b61ca72353083fc256473594e0436b57e373e8dd1e868d9277fdd07287f756e17d8e42e25a61fcf5cf71d542a111d7d1fc649c8aee0c744e659fb9dfeeb62213e0ad44b84051bc08b4b4211855850460ba61d3c57114dd803b5ffa41dacb4bac1fe5c36d98209820ee59af4f3419ebe71dec23748e51076b500a4324542c8b6096c5b72ca7fd081fb30269d91401fbf7d8d93b2d6b873668dc3509f5e989efbb4b34a7797ae4d13cda3a17ada"}}, &(0x7f0000000dc0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000e00)={0x20, 0x0, 0x1, 0xd}}) fcntl$setlease(r3, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x17ff, @private1, 0x5}, 0x1c) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) fspick(r3, &(0x7f0000000ec0)='./file0\x00', 0x1) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.637672816s ago: executing program 0 (id=4330): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r1, 0x8000000) (fail_nth: 3) 4.485458224s ago: executing program 0 (id=4331): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ea) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000001800070000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000800)=[{{&(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="1f3f0c7b460a7c765f249bf0085f2050f2e86c53412889c4ed22da694ab551ed51a1ba20274da3c9cf1b2f270e6dfac418b7ce138abb301a558ab122e802993584f0d23e17f9be71dc7cecf217b52cccaf7a29f1e260e1d4875c206597ff67edcd6f37044a861fe5f90956a57c52dec7e459c10925affb0ba6a7b05aea6bfc00f20a8e906bd28c066b9bc497235bbfc72df715ad6b47fd234c0547e2c2db6d2d4443225a2e45ba32b3fe1ce2f31cf7be95397f045b0edd67d728604f34e2c87d4a3ea1cf75ede07ef42c33a36ad7a97334ac5f7cd6af7eff39370a5922fe8c99009be0e7ede74a2d2b72e1502506224833ae", 0xf2}, {&(0x7f0000000480)="1d023227d7a7f851a491be5a0fa276408a2df282dd68ae43592284158ff473e6e0b688b55366fe03f20f4e00544feb46c514868a3a5fca0d469815d5d127c94f715901ba13c5f9c159f520700bfd17e5fa4fa3d1852d19636c2056ad72271768c50e3ee29bb28a2b4f6468fdceac61cd4c956eab3fa27345b049ed0a2be8170a8a2303013aa45f7bc4cac03ad12bc20cb93e0117858b3cf4dd46d1e783004c8163c833505a69b4021bf912ca2aa09b02699a6fdf289083c75dd454e1fd62ad3d7825a37c9de869880c5eecaa1a843f575290e91fe59645cae69909", 0xdb}, {&(0x7f0000000600)="76e26ab42a237b46be685893f40984f50c5e731df6752265a04be76b7ccf9f19b4bc06e5c546233697f28828f81d245dc0e6af6cfa82bf5e048d8cf8431c4d733958f0a9", 0x44}, {&(0x7f0000000580)="8d1b64f336b1d190574434a1", 0xc}], 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="00000000140000000080000001004ad201000000", @ANYRES32=r8, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r3], 0x90, 0x20000000}}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000440)='./file1\x00', 0x1d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 3.456135037s ago: executing program 0 (id=4332): io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000001200)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, &(0x7f0000004680)}, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 2.239733371s ago: executing program 0 (id=4333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001c40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c80)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008141}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x11, 0x7, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2.04036439s ago: executing program 7 (id=4334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000400)={0x9, 0x8, "f0b5f9302e7eb4975f8fb7c507188f9c31b10495c230d3cee8c2b4bc391eb17f", 0x8, 0x8, 0x6, 0x9, 0x80}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000000)=0x1399, 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r7, 0x8, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40488c4}, 0x200080d4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x6, 0x1, {0x1, 0x3}}, @TCA_U32_HASH={0x8, 0x2, 0x9}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r11, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x40f4}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x2000, 0x20000000, 0x5, 0xefffffff, 0x0, [{0x2, 0x8, 0xfc, '\x00', 0x3}, {0x4, 0x9, 0xfc, '\x00', 0x7c}, {0x80, 0x12, 0x4, '\x00', 0x1}, {0x1, 0xb, 0x1, '\x00', 0xea}, {}, {0xfe, 0x0, 0x1, '\x00', 0x6}, {0x1f, 0x1, 0x2}, {0xfd, 0x0, 0x7, '\x00', 0x2}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x9, 0x9, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x6}, {0xff, 0x9, 0x0, '\x00', 0x49}, {0x1, 0x1, 0x80, '\x00', 0xff}, {0x3, 0x0, 0x0, '\x00', 0x84}, {0x2, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0xc0, 0x3}, {0x4, 0x12, 0x3, '\x00', 0x25}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x4, 0x2, 0x9}, {0x9, 0xff, 0x3, '\x00', 0x7}]}}) 1.904479271s ago: executing program 6 (id=4335): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = semget$private(0x0, 0x4, 0x29b) move_mount(0xffffffffffffff9c, &(0x7f0000002f80)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x252) socket$netlink(0x10, 0x3, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7, 0xfff}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r8 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0) lseek(r8, 0x8000000000000000, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a00", 0x24}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x240, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 1.822897302s ago: executing program 0 (id=4336): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05030500", 0x4, 0x4, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x8, 0x9}) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000640), 0x0, 0x6061, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 1.82249417s ago: executing program 8 (id=4337): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) (fail_nth: 3) 1.519931386s ago: executing program 8 (id=4338): ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x100000000, 0x3a, '9,\'(*{]}\\{$*', 0x3a, '@$2^,', 0x3a, './file0', 0x3a, [0x46, 0x46, 0x43, 0x50, 0x4f, 0x46]}, 0x3e) (async, rerun: 32) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x25, 0x1f, 0xc, 0x12, 0x3, 0x7, 0x3, 0xdc, 0xffffffffffffffff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) connect$802154_dgram(r5, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sync() (async, rerun: 64) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) fstat(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sync() (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x10000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000380)={r11, 0x1, 0x2, [0x6, 0x1000]}, 0xc) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$FS_IOC_GETFSLABEL(r12, 0x81009431, &(0x7f0000000400)) sync() (async) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000580)={0x9, &(0x7f0000000500)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f00000005c0)={r14, 0x20}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000600)={r11, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x0, 0x0, 0xd9, 0x7, 0x1, 0x2, 0x8c}, &(0x7f00000006c0)=0x9c) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000009c0)=0x0) (async, rerun: 32) r16 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000a00)={0xf34b, 0x5, {0x0}, {r8}, 0x1, 0xf73}) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="070a961a3fbeaf1f0af4aff1236a6b0ec6dac54274ed8673c8099223f79a89c4bbc7746ba21fcb65bc0c489674cdeeb802d485de3f8e6ced6a69c8bd60cd73c07b1f54c47428be3be04c0bf8fad6c6ba83e2469bbea0", 0x56}, {&(0x7f0000000800)="8e2a3349bcfbac073ee097e8da25e846a0023f1b8711144ec93e1395df3d24afa680174bb63dbeadf2b24686dd277ade67c1fb6af9c9759a670202ba45fb2d39c629ec3792f1869f7313845461a13f383efbbf12acad56834c3df4e0cdb73935e78f310c0575e9e875c83ef2d9f30c3655fbf066ff8ceb867f7d", 0x7a}, {&(0x7f0000000880)="288cb8cbcaded662c47f6c8a1d35c303a102ff11974970d8e60cfe841fec11b4cda4261033db07f5c96a1a50a155e4d4b559cec1fb8a2a2dd3246e3bad0dde693f2e074806eb9456b78cd60f285c9dece8ef3e89b921765a67c37c35405c0546bc37df320f409801ae2422c7cfaff59480ce8b7f3ba14e39007f9e10f31a96bed5b8430c6cdbb4b8b3442f2bca9b0474908a6feb6b8cdade41a952bf489c8f4ad0c40ae4ab3be511cc0d31077f3b87b10fdcdcf6df47abed449a92c3e9af578e881c6fea711cc965d32f053a5c8f01b53b36e729920487516136", 0xda}], 0x3, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r15, r8, r9}}}, @rights={{0x28, 0x1, 0x1, [r13, r7, r16, r2, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xb0, 0x20000000}}], 0x1, 0x20040004) 1.028075479s ago: executing program 7 (id=4339): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f00000085c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r2, &(0x7f0000006580)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380), 0x2, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[], [{@fowner_lt={'fowner<', r5}}, {@flag='rw'}, {@euid_gt={'euid>', r4}}]}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x10, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x10, r9, 0xffffffffffffffff, 0x6000, '\x00', 0x1, 0x80000002, 0x8, 0x2, {0x80000008103, 0x8}, {0x9, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa82}, 0x70, 0xb, 0x4, 0x6}}}}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r12, 0xc02064b6, &(0x7f0000000180)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000200)=[r11, r13, r14], 0x3}) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r8}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) recvmsg$inet_nvme(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000000) r15 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x8b42) ioctl$VIDIOC_S_CROP(r15, 0x4014563c, &(0x7f0000000100)={0x9, {0xd, 0x9, 0x500, 0xb}}) 741.371287ms ago: executing program 8 (id=4340): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) (fail_nth: 3) 674.832814ms ago: executing program 2 (id=4341): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) prlimit64(0x0, 0xa, &(0x7f0000000240)={0x6, 0x248}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="0f32baf80c66b891a1148066efbafc0cec0f20c06635200000000f22c0b800008ee8660f38804367baf80c66b8dc390f8f66efbafc0c66b80500000066ef0f017636660f6c31ba4100ecf30f23ec", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$sock_int(r4, 0x1, 0xd, &(0x7f00000009c0)=0xfefffffb, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r6, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}], 0x2, 0x20, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) madvise(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x67) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000a80)={{0x3, 0x0, 0x80, {0x8000000, 0x4000, 0x7}}, "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", "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"}) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000003b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="187ffd69bc845be72cf423fa351595bda7d6b6b11f09001997a0db82a876f161ea23557175ffcdbbb592b818c44f0d15ce19784fd8fc96fc6896eb1b352e5ac39314f729c9b3b4834f06abe06fd0c4bcd06bdb01323d4ea96eea5956fa67beaa433411c1dd13997d20527835f296e8607e1593e372c89db2e08ad94bcfb406013a67d586537139f00586943a3ec4f31ff6f9a03be0ff1dae96c0af46ca789d016b778c01ae54b454e9b850b2d59d5b9d7d94abf3baaf8a8db2d564400c4c1116fa017897fca29f397856578757e410d13b3c9c22abb33a47abee5d4b234f5359e01db22c73d1b33a41f1cdc4e76cd2811110017220ca0346f02265b82497be6fa87eb46f752261503b9e6888f551355986d0c58d9ad9244dd992c6520fa3d781a082afb86463"], 0x18}, {0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000000100)="f1b8203ef868197f498d885f129212663231eaace989d7c7705cf71beeed32793dd1a456", 0x24}, {&(0x7f0000000340)="29c7f13be4a360083edc2b4fe76527f5568408f3c5ae685191112b6280118d5696e5b4f58ba1793f2385c5895cda5e43b46c19b0205139e15604ea75324f375a6ae9ad3554ec693d595704d030e9126ab405e8ae74842fdbb4", 0x59}, {&(0x7f0000000580)="7e3eab7a01bb24ff72442a001cfc6f787fd23ad4e47ae313a43e0b3e02ccf5a2739fad1f4f964621c67ba919e079c519f947b677ed99d9c674dce7ae03ccc9561fc410baac7fec349eb72004b1d72ae7dd41338aa41705abfcc9f30211ca9e7d5255e488c2f736b081a0ca0122cdd8a5455b87e989314baffd186eacf00f0aac1ad9013536d513e3dd473b3402421a412b5286db3019dfeb", 0x98}], 0x4, &(0x7f0000003bc0)=ANY=[@ANYBLOB="d000000000000000170100000200000d35fa62a854b0264aeb00bc00000067dc7f5426eef503abf6358d53d0eedeeba6e1bfa6ab935f7e8d2de820f537b7468babb5799ee6bfd53383266d02e4e023cebc2f21804ee514029b623cf9062ab58a04d14d88e7920b6776c9879c8ad14a9bb260c2f8f7094277fa3c721cedfc03e645ca2193e40dc923d040a44e019c1c740ea6875a9d28929d2b618bce60d52d161d5f88e3b4382e4f477e26ae772222ab8ffe5a8a6f7843fa7380aab2bfdff9a92fc68e7795279a0dce23d199c4a8ad9b906253a01c680817878784b5590ba7d18104b97b7f18d359c04e0d7f26cabb24a078ff45e450a7e09e5b32eee6bb304facce8e4100000000"], 0xd0, 0x4000}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="670eb62aa2ab7f15ce920394354d482847faee05266a2394231013c9b35d4900051642a6494e37d5fb32457c08d8ca264198c9e8c371de763a91c71629aa6434c303d47240b94750b505b6876874f0d58cddf24be1", 0x55}, {&(0x7f0000003e40)="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", 0x19d}, {&(0x7f00000003c0)="33f04b349ccaadf9f5ba7c641fcae7573304599e42599f6564", 0x19}, {&(0x7f0000000640)="b0f76208c1bf07ff6e219a81bceada3d8f45f803d1e098c60e5ef1827a1e791abff8ced819c3b0c604a4691b52967312f39d66468ea252c5959ed013ac3b6608093ef1f859b698903c79e52fabe9d18faf634a15606b39437a0bc0", 0x5b}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="400000000000000017010000020000002a0000007c695d9de2f45f5473e1239ea95df0aee2a57c4f93f7e585e94acc14eaec7d46cfad99964812fbf9886c0000180000000000000017010000030000000000000000000000180000000000000017010000040000000500001000004000180000000000000017010000040000000100008000000000180000000000000017010000030000000100000000000000"], 0xa0, 0x4000800}], 0x3, 0x80) 516.005942ms ago: executing program 0 (id=4342): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000040)={0x14}, 0x14) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x14}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0xdc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x6}, {0xfff3}, {0xe, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xb}}, @TCA_U32_SEL={0xa4, 0x5, {0x6, 0x7, 0x9, 0xcbe, 0x1, 0x1, 0x2, 0x7fffffff, [{0x7, 0xd, 0xfffffab6, 0x4}, {0x8af, 0x1ff, 0x5, 0x1}, {0x60cb, 0x0, 0x80, 0x1}, {0x60000, 0x10, 0x100, 0x8}, {0x2, 0x1, 0x7, 0x7}, {0xffffff80, 0x697, 0x6, 0x1}, {0x81, 0x6, 0x1ff, 0x7}, {0x401, 0x2, 0x87, 0x9}, {0x3, 0x0, 0x80, 0x10001}]}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) read$FUSE(r0, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400c9a, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r7, @ANYBLOB="be1084b775705f69643d", @ANYRESDEC=r8, @ANYBLOB=',blksize=0x0000000000000000,blksize=0x0000000000001000,blksize=0x0000000000001600,allow_other,default_permissions,blksize=0x0000000000000800,default_permissions,max_read=0x0000000000000e69,mask=MAY_EXEC,nolazytime,uid>', @ANYRESDEC=r9, @ANYBLOB=',\x00']) r10 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r12, 0x4010744d, &(0x7f0000000040)) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 420.014847ms ago: executing program 2 (id=4343): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') (fail_nth: 3) 127.014276ms ago: executing program 2 (id=4344): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) poll(&(0x7f0000000380)=[{r0, 0x2205}], 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xf}}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f021}) 77.788552ms ago: executing program 7 (id=4345): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 0s ago: executing program 8 (id=4346): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000", 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) (fail_nth: 3) kernel console output (not intermixed with test programs): 2.4096 Not tainted syzkaller #0 PREEMPT(full) [ 1012.501588][T20520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1012.501598][T20520] Call Trace: [ 1012.501604][T20520] [ 1012.501611][T20520] dump_stack_lvl+0x16c/0x1f0 [ 1012.501636][T20520] should_fail_ex+0x512/0x640 [ 1012.501656][T20520] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1012.501675][T20520] should_failslab+0xc2/0x120 [ 1012.501695][T20520] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1012.501711][T20520] ? __alloc_skb+0x2b2/0x380 [ 1012.501733][T20520] __alloc_skb+0x2b2/0x380 [ 1012.501751][T20520] ? __pfx___alloc_skb+0x10/0x10 [ 1012.501771][T20520] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1012.501796][T20520] netlink_alloc_large_skb+0x69/0x130 [ 1012.501817][T20520] netlink_sendmsg+0x6a1/0xdd0 [ 1012.501841][T20520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.501869][T20520] ____sys_sendmsg+0xa95/0xc70 [ 1012.501894][T20520] ? copy_msghdr_from_user+0x10a/0x160 [ 1012.501913][T20520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.501946][T20520] ___sys_sendmsg+0x134/0x1d0 [ 1012.501966][T20520] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.502011][T20520] __sys_sendmsg+0x16d/0x220 [ 1012.502031][T20520] ? __pfx___sys_sendmsg+0x10/0x10 [ 1012.502063][T20520] do_syscall_64+0xcd/0x4e0 [ 1012.502086][T20520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.502102][T20520] RIP: 0033:0x7fcf8cb8eba9 [ 1012.502116][T20520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.502132][T20520] RSP: 002b:00007fcf8dab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.502148][T20520] RAX: ffffffffffffffda RBX: 00007fcf8cdd5fa0 RCX: 00007fcf8cb8eba9 [ 1012.502158][T20520] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1012.502168][T20520] RBP: 00007fcf8dab2090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.502177][T20520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.502186][T20520] R13: 00007fcf8cdd6038 R14: 00007fcf8cdd5fa0 R15: 00007ffdb3324de8 [ 1012.502207][T20520] [ 1012.738073][T14599] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1012.748193][T14599] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.756306][T14599] usb 7-1: Product: syz [ 1012.760789][T14599] usb 7-1: Manufacturer: syz [ 1012.765578][T14599] usb 7-1: SerialNumber: syz [ 1012.773312][T14599] usb 7-1: config 0 descriptor?? [ 1012.838129][T14599] smsc75xx v1.0.0 [ 1012.841791][T14599] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1012.862563][T14599] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1013.250983][ T5852] ft260 0003:0403:6030.0035: unknown main item tag 0x7 [ 1013.438221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.451355][ T5852] ft260 0003:0403:6030.0035: chip code: 6424 8183 [ 1013.604502][T20524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.652046][ T5852] ft260 0003:0403:6030.0035: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1013.676064][T20524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.678558][T10231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.692330][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.700995][ T7047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.853208][ T5852] ft260 0003:0403:6030.0035: failed to retrieve status: -32, no wakeup [ 1013.882331][ T5852] ft260 0003:0403:6030.0035: failed to retrieve status: -32 [ 1013.945139][T20524] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1014.052416][T20528] : entered promiscuous mode [ 1014.067566][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.087679][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.115491][T20536] netlink: 'syz.7.4101': attribute type 1 has an invalid length. [ 1014.120538][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.138904][T20497] i2c i2c-1: adapter quirk: too many messages (addr 0x0003, size 0, read) [ 1014.145273][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.157491][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.173617][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.182933][T20536] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4101'. [ 1014.195435][ T5967] usb 5-1: USB disconnect, device number 19 [ 1014.212325][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.241329][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.300613][T20539] FAULT_INJECTION: forcing a failure. [ 1014.300613][T20539] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.319262][T20539] CPU: 1 UID: 0 PID: 20539 Comm: syz.2.4102 Not tainted syzkaller #0 PREEMPT(full) [ 1014.319290][T20539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.319301][T20539] Call Trace: [ 1014.319307][T20539] [ 1014.319314][T20539] dump_stack_lvl+0x16c/0x1f0 [ 1014.319343][T20539] should_fail_ex+0x512/0x640 [ 1014.319365][T20539] ? fs_reclaim_acquire+0xae/0x150 [ 1014.319391][T20539] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1014.319416][T20539] should_failslab+0xc2/0x120 [ 1014.319438][T20539] __kmalloc_noprof+0xd2/0x510 [ 1014.319462][T20539] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1014.319491][T20539] ? tomoyo_profile+0x47/0x60 [ 1014.319513][T20539] tomoyo_path_number_perm+0x245/0x580 [ 1014.319535][T20539] ? tomoyo_path_number_perm+0x237/0x580 [ 1014.319561][T20539] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1014.319585][T20539] ? find_held_lock+0x2b/0x80 [ 1014.319630][T20539] ? find_held_lock+0x2b/0x80 [ 1014.319661][T20539] ? hook_file_ioctl_common+0x145/0x410 [ 1014.319685][T20539] ? __fget_files+0x20e/0x3c0 [ 1014.319710][T20539] security_file_ioctl+0x9b/0x240 [ 1014.319736][T20539] __x64_sys_ioctl+0xb7/0x210 [ 1014.319766][T20539] do_syscall_64+0xcd/0x4e0 [ 1014.319792][T20539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.319809][T20539] RIP: 0033:0x7fcf8cb8eba9 [ 1014.319824][T20539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.319841][T20539] RSP: 002b:00007fcf8dab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.319859][T20539] RAX: ffffffffffffffda RBX: 00007fcf8cdd5fa0 RCX: 00007fcf8cb8eba9 [ 1014.319871][T20539] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1014.319881][T20539] RBP: 00007fcf8dab2090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.319892][T20539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.319902][T20539] R13: 00007fcf8cdd6038 R14: 00007fcf8cdd5fa0 R15: 00007ffdb3324de8 [ 1014.319925][T20539] [ 1014.320827][T20539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1014.484670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.645280][T20547] SELinux: syz.7.4105 (20547) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1014.693341][ T5967] usb 7-1: USB disconnect, device number 13 [ 1014.896894][T20555] FAULT_INJECTION: forcing a failure. [ 1014.896894][T20555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.920987][T20555] CPU: 1 UID: 0 PID: 20555 Comm: syz.4.4108 Not tainted syzkaller #0 PREEMPT(full) [ 1014.921014][T20555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.921025][T20555] Call Trace: [ 1014.921031][T20555] [ 1014.921039][T20555] dump_stack_lvl+0x16c/0x1f0 [ 1014.921067][T20555] should_fail_ex+0x512/0x640 [ 1014.921092][T20555] strncpy_from_user+0x3b/0x2e0 [ 1014.921116][T20555] bpf_raw_tp_link_attach+0x11b/0x630 [ 1014.921141][T20555] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1014.921162][T20555] ? find_held_lock+0x2b/0x80 [ 1014.921184][T20555] ? __fget_files+0x204/0x3c0 [ 1014.921210][T20555] ? fput+0x9b/0xd0 [ 1014.921233][T20555] ? __bpf_prog_get+0x97/0x2a0 [ 1014.921252][T20555] __sys_bpf+0x23c2/0x4de0 [ 1014.921277][T20555] ? __pfx___sys_bpf+0x10/0x10 [ 1014.921300][T20555] ? ksys_write+0x190/0x250 [ 1014.921320][T20555] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1014.921359][T20555] ? fput+0x9b/0xd0 [ 1014.921381][T20555] ? ksys_write+0x1ac/0x250 [ 1014.921398][T20555] ? __pfx_ksys_write+0x10/0x10 [ 1014.921420][T20555] __x64_sys_bpf+0x78/0xc0 [ 1014.921442][T20555] ? lockdep_hardirqs_on+0x7c/0x110 [ 1014.921462][T20555] do_syscall_64+0xcd/0x4e0 [ 1014.921486][T20555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.921503][T20555] RIP: 0033:0x7f7e69d8eba9 [ 1014.921517][T20555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.921533][T20555] RSP: 002b:00007f7e6ac2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1014.921548][T20555] RAX: ffffffffffffffda RBX: 00007f7e69fd5fa0 RCX: 00007f7e69d8eba9 [ 1014.921559][T20555] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 1014.921569][T20555] RBP: 00007f7e6ac2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.921580][T20555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.921590][T20555] R13: 00007f7e69fd6038 R14: 00007f7e69fd5fa0 R15: 00007ffefb54bc88 [ 1014.921611][T20555] [ 1015.118380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.351723][ T30] audit: type=1400 audit(2000000190.510:821): avc: denied { watch watch_reads } for pid=20569 comm="syz.4.4112" path="/123/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1015.399895][ T30] audit: type=1400 audit(2000000190.540:822): avc: denied { name_bind } for pid=20571 comm="syz.2.4113" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1015.517831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.538931][ T30] audit: type=1400 audit(2000000190.670:823): avc: denied { unmount } for pid=17853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1015.639527][T20580] kvm: pic: single mode not supported [ 1015.639545][T20580] kvm: pic: level sensitive irq not supported [ 1015.646890][T20580] kvm: pic: single mode not supported [ 1015.656641][T20580] kvm: pic: single mode not supported [ 1015.662438][T20580] kvm: pic: level sensitive irq not supported [ 1015.903422][ T30] audit: type=1326 audit(2000000191.060:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20584 comm="syz.4.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e69d8eba9 code=0x7ffc0000 [ 1016.050025][ T30] audit: type=1326 audit(2000000191.060:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20584 comm="syz.4.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e69d8eba9 code=0x7ffc0000 [ 1016.078619][ T30] audit: type=1326 audit(2000000191.060:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20584 comm="syz.4.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7e69d8eba9 code=0x7ffc0000 [ 1016.327749][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1016.327768][ T30] audit: type=1326 audit(2000000191.380:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20584 comm="syz.4.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e69d8eba9 code=0x7ffc0000 [ 1016.382784][T20590] overlayfs: failed to resolve './file2': -2 [ 1016.412823][ T30] audit: type=1326 audit(2000000191.380:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20584 comm="syz.4.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e69d8eba9 code=0x7ffc0000 [ 1016.465045][T20592] FAULT_INJECTION: forcing a failure. [ 1016.465045][T20592] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.528161][T20592] CPU: 0 UID: 0 PID: 20592 Comm: syz.8.4119 Not tainted syzkaller #0 PREEMPT(full) [ 1016.528189][T20592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1016.528201][T20592] Call Trace: [ 1016.528209][T20592] [ 1016.528217][T20592] dump_stack_lvl+0x16c/0x1f0 [ 1016.528242][T20592] should_fail_ex+0x512/0x640 [ 1016.528262][T20592] ? fs_reclaim_acquire+0xae/0x150 [ 1016.528286][T20592] ? tomoyo_encode2+0x100/0x3e0 [ 1016.528312][T20592] should_failslab+0xc2/0x120 [ 1016.528333][T20592] __kmalloc_noprof+0xd2/0x510 [ 1016.528351][T20592] ? d_absolute_path+0x136/0x1a0 [ 1016.528382][T20592] tomoyo_encode2+0x100/0x3e0 [ 1016.528409][T20592] tomoyo_encode+0x29/0x50 [ 1016.528433][T20592] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1016.528463][T20592] tomoyo_path_number_perm+0x245/0x580 [ 1016.528483][T20592] ? tomoyo_path_number_perm+0x237/0x580 [ 1016.528507][T20592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1016.528532][T20592] ? find_held_lock+0x2b/0x80 [ 1016.528574][T20592] ? find_held_lock+0x2b/0x80 [ 1016.528594][T20592] ? hook_file_ioctl_common+0x145/0x410 [ 1016.528617][T20592] ? __fget_files+0x20e/0x3c0 [ 1016.528642][T20592] security_file_ioctl+0x9b/0x240 [ 1016.528674][T20592] __x64_sys_ioctl+0xb7/0x210 [ 1016.528699][T20592] do_syscall_64+0xcd/0x4e0 [ 1016.528717][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.528730][T20592] RIP: 0033:0x7f2aa2f8eba9 [ 1016.528740][T20592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.528752][T20592] RSP: 002b:00007f2aa3e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.528763][T20592] RAX: ffffffffffffffda RBX: 00007f2aa31d5fa0 RCX: 00007f2aa2f8eba9 [ 1016.528771][T20592] RDX: 0000000000000000 RSI: 0000000000005602 RDI: 0000000000000003 [ 1016.528777][T20592] RBP: 00007f2aa3e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.528784][T20592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.528791][T20592] R13: 00007f2aa31d6038 R14: 00007f2aa31d5fa0 R15: 00007fff42e916b8 [ 1016.528805][T20592] [ 1016.529699][ T30] audit: type=1400 audit(2000000191.570:870): avc: denied { getopt } for pid=20589 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1016.557757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.784876][T20592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1016.916913][ T30] audit: type=1400 audit(2000000192.070:871): avc: denied { lock } for pid=20596 comm="syz.2.4123" path="socket:[93848]" dev="sockfs" ino=93848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1017.008335][T20601] FAULT_INJECTION: forcing a failure. [ 1017.008335][T20601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.040735][T20601] CPU: 0 UID: 0 PID: 20601 Comm: syz.8.4122 Not tainted syzkaller #0 PREEMPT(full) [ 1017.040761][T20601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1017.040772][T20601] Call Trace: [ 1017.040779][T20601] [ 1017.040787][T20601] dump_stack_lvl+0x16c/0x1f0 [ 1017.040817][T20601] should_fail_ex+0x512/0x640 [ 1017.040844][T20601] _copy_to_user+0x32/0xd0 [ 1017.040871][T20601] copy_siginfo_to_user+0x27/0xc0 [ 1017.040898][T20601] x64_setup_rt_frame+0x811/0xcf0 [ 1017.040928][T20601] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1017.040951][T20601] ? read_tsc+0x9/0x20 [ 1017.040973][T20601] ? ktime_get+0x1a7/0x310 [ 1017.041003][T20601] arch_do_signal_or_restart+0x5e4/0x7d0 [ 1017.041032][T20601] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1017.041070][T20601] irqentry_exit_to_user_mode+0x13e/0x290 [ 1017.041095][T20601] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1017.041115][T20601] RIP: 0033:0x7f2aa2e560af [ 1017.041130][T20601] Code: 5e 41 5f c3 0f 1f 80 00 00 00 00 53 48 89 fb 48 85 ff 74 47 80 3d 44 f6 ea 00 00 75 1e 80 3d 0f c0 37 00 00 75 55 48 8b 43 18 <48> c7 00 00 00 00 00 c6 43 48 00 5b c3 0f 1f 40 00 8b 3b 31 d2 31 [ 1017.041147][T20601] RSP: 002b:00007f2aa3e09050 EFLAGS: 00000246 [ 1017.041163][T20601] RAX: 00007f2aa21fb000 RBX: 00007f2aa31d6218 RCX: 0000000000000000 [ 1017.041175][T20601] RDX: 0000000000000000 RSI: 00007f2aa3e09090 RDI: 00007f2aa31d6218 [ 1017.041186][T20601] RBP: 00007f2aa3e09090 R08: 0000000000000000 R09: 00007f2aa3e08df7 [ 1017.041197][T20601] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1017.041207][T20601] R13: 00007f2aa31d6218 R14: 00007f2aa31d6180 R15: 00007fff42e916b8 [ 1017.041231][T20601] [ 1017.433622][ T30] audit: type=1400 audit(2000000192.580:872): avc: denied { getopt } for pid=20605 comm="syz.2.4125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1017.515245][T20611] FAULT_INJECTION: forcing a failure. [ 1017.515245][T20611] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.546708][T20611] CPU: 0 UID: 0 PID: 20611 Comm: syz.8.4126 Not tainted syzkaller #0 PREEMPT(full) [ 1017.546736][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1017.546750][T20611] Call Trace: [ 1017.546755][T20611] [ 1017.546762][T20611] dump_stack_lvl+0x16c/0x1f0 [ 1017.546790][T20611] should_fail_ex+0x512/0x640 [ 1017.546812][T20611] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1017.546833][T20611] should_failslab+0xc2/0x120 [ 1017.546851][T20611] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1017.546868][T20611] ? __alloc_skb+0x2b2/0x380 [ 1017.546892][T20611] __alloc_skb+0x2b2/0x380 [ 1017.546912][T20611] ? __pfx___alloc_skb+0x10/0x10 [ 1017.546934][T20611] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1017.546960][T20611] netlink_alloc_large_skb+0x69/0x130 [ 1017.546984][T20611] netlink_sendmsg+0x6a1/0xdd0 [ 1017.547010][T20611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.547042][T20611] ____sys_sendmsg+0xa95/0xc70 [ 1017.547070][T20611] ? copy_msghdr_from_user+0x10a/0x160 [ 1017.547092][T20611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1017.547128][T20611] ___sys_sendmsg+0x134/0x1d0 [ 1017.547150][T20611] ? __pfx____sys_sendmsg+0x10/0x10 [ 1017.547202][T20611] __sys_sendmsg+0x16d/0x220 [ 1017.547226][T20611] ? __pfx___sys_sendmsg+0x10/0x10 [ 1017.547264][T20611] do_syscall_64+0xcd/0x4e0 [ 1017.547289][T20611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.547307][T20611] RIP: 0033:0x7f2aa2f8eba9 [ 1017.547323][T20611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.547341][T20611] RSP: 002b:00007f2aa3e4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.547367][T20611] RAX: ffffffffffffffda RBX: 00007f2aa31d5fa0 RCX: 00007f2aa2f8eba9 [ 1017.547377][T20611] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1017.547386][T20611] RBP: 00007f2aa3e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.547395][T20611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.547403][T20611] R13: 00007f2aa31d6038 R14: 00007f2aa31d5fa0 R15: 00007fff42e916b8 [ 1017.547422][T20611] [ 1017.607826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.158145][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.210217][ T30] audit: type=1400 audit(2000000193.360:873): avc: denied { read } for pid=20623 comm="syz.2.4131" dev="sockfs" ino=92825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1018.261682][T20624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60944 sclass=netlink_route_socket pid=20624 comm=syz.2.4131 [ 1018.421175][T19256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1018.434054][T19256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1018.446543][T19256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1018.454856][T19256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1018.459492][T20630] FAULT_INJECTION: forcing a failure. [ 1018.459492][T20630] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.478576][T19256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1018.484732][T20630] CPU: 0 UID: 0 PID: 20630 Comm: syz.6.4132 Not tainted syzkaller #0 PREEMPT(full) [ 1018.484756][T20630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1018.484766][T20630] Call Trace: [ 1018.484771][T20630] [ 1018.484778][T20630] dump_stack_lvl+0x16c/0x1f0 [ 1018.484803][T20630] should_fail_ex+0x512/0x640 [ 1018.484824][T20630] ? fs_reclaim_acquire+0xae/0x150 [ 1018.484846][T20630] ? tomoyo_encode2+0x100/0x3e0 [ 1018.484868][T20630] should_failslab+0xc2/0x120 [ 1018.484887][T20630] __kmalloc_noprof+0xd2/0x510 [ 1018.484908][T20630] tomoyo_encode2+0x100/0x3e0 [ 1018.484934][T20630] tomoyo_encode+0x29/0x50 [ 1018.484955][T20630] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1018.484980][T20630] ? tomoyo_profile+0x47/0x60 [ 1018.484997][T20630] tomoyo_path_number_perm+0x245/0x580 [ 1018.485016][T20630] ? tomoyo_path_number_perm+0x237/0x580 [ 1018.485037][T20630] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1018.485059][T20630] ? find_held_lock+0x2b/0x80 [ 1018.485099][T20630] ? find_held_lock+0x2b/0x80 [ 1018.485117][T20630] ? hook_file_ioctl_common+0x145/0x410 [ 1018.485138][T20630] ? __fget_files+0x20e/0x3c0 [ 1018.485160][T20630] security_file_ioctl+0x9b/0x240 [ 1018.485184][T20630] __x64_sys_ioctl+0xb7/0x210 [ 1018.485209][T20630] do_syscall_64+0xcd/0x4e0 [ 1018.485231][T20630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.485247][T20630] RIP: 0033:0x7f54d998eba9 [ 1018.485260][T20630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.485275][T20630] RSP: 002b:00007f54da887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.485291][T20630] RAX: ffffffffffffffda RBX: 00007f54d9bd5fa0 RCX: 00007f54d998eba9 [ 1018.485301][T20630] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1018.485311][T20630] RBP: 00007f54da887090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.485321][T20630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.485330][T20630] R13: 00007f54d9bd6038 R14: 00007f54d9bd5fa0 R15: 00007ffd04c9ee78 [ 1018.485352][T20630] [ 1018.485366][T20630] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1018.562054][T19456] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1018.641541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.677295][T20630] kvm: pic: single mode not supported [ 1018.715347][T20630] kvm: pic: level sensitive irq not supported [ 1018.734749][T19456] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1018.750325][T20630] kvm: pic: single mode not supported [ 1018.750507][T20630] kvm: pic: single mode not supported [ 1018.755896][T20630] kvm: pic: level sensitive irq not supported [ 1018.761721][T19456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1018.779024][T19456] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1018.789335][T19456] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1018.822400][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.896903][T20638] FAULT_INJECTION: forcing a failure. [ 1018.896903][T20638] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.923392][T20638] CPU: 0 UID: 0 PID: 20638 Comm: syz.2.4133 Not tainted syzkaller #0 PREEMPT(full) [ 1018.923420][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1018.923431][T20638] Call Trace: [ 1018.923437][T20638] [ 1018.923443][T20638] dump_stack_lvl+0x16c/0x1f0 [ 1018.923472][T20638] should_fail_ex+0x512/0x640 [ 1018.923495][T20638] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1018.923517][T20638] should_failslab+0xc2/0x120 [ 1018.923540][T20638] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1018.923559][T20638] ? __alloc_skb+0x2b2/0x380 [ 1018.923586][T20638] __alloc_skb+0x2b2/0x380 [ 1018.923606][T20638] ? __pfx___alloc_skb+0x10/0x10 [ 1018.923630][T20638] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1018.923660][T20638] netlink_alloc_large_skb+0x69/0x130 [ 1018.923691][T20638] netlink_sendmsg+0x6a1/0xdd0 [ 1018.923720][T20638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.923754][T20638] ____sys_sendmsg+0xa95/0xc70 [ 1018.923782][T20638] ? copy_msghdr_from_user+0x10a/0x160 [ 1018.923802][T20638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.923839][T20638] ___sys_sendmsg+0x134/0x1d0 [ 1018.923862][T20638] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.923916][T20638] __sys_sendmsg+0x16d/0x220 [ 1018.923940][T20638] ? __pfx___sys_sendmsg+0x10/0x10 [ 1018.923979][T20638] do_syscall_64+0xcd/0x4e0 [ 1018.924006][T20638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.924023][T20638] RIP: 0033:0x7fcf8cb8eba9 [ 1018.924039][T20638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.924054][T20638] RSP: 002b:00007fcf8dab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.924072][T20638] RAX: ffffffffffffffda RBX: 00007fcf8cdd5fa0 RCX: 00007fcf8cb8eba9 [ 1018.924085][T20638] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 1018.924095][T20638] RBP: 00007fcf8dab2090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.924106][T20638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.924115][T20638] R13: 00007fcf8cdd6038 R14: 00007fcf8cdd5fa0 R15: 00007ffdb3324de8 [ 1018.924138][T20638] [ 1019.173989][T20631] chnl_net:caif_netlink_parms(): no params data found [ 1019.408440][ T5967] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1019.442064][T19513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.456389][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.616311][ T5967] usb 7-1: Using ep0 maxpacket: 8 [ 1019.655097][ T5967] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 1019.677581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.750591][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.751817][T20631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.767175][T20631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.775091][T20631] bridge_slave_0: entered allmulticast mode [ 1019.812476][ T5967] usb 7-1: config 0 descriptor?? [ 1019.818244][T20631] bridge_slave_0: entered promiscuous mode [ 1019.834733][T20663] FAULT_INJECTION: forcing a failure. [ 1019.834733][T20663] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.848309][T20631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.860690][T20631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.868364][T20663] CPU: 1 UID: 0 PID: 20663 Comm: syz.7.4139 Not tainted syzkaller #0 PREEMPT(full) [ 1019.868387][T20663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1019.868398][T20663] Call Trace: [ 1019.868404][T20663] [ 1019.868411][T20663] dump_stack_lvl+0x16c/0x1f0 [ 1019.868446][T20663] should_fail_ex+0x512/0x640 [ 1019.868470][T20663] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1019.868491][T20663] should_failslab+0xc2/0x120 [ 1019.868512][T20663] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1019.868530][T20663] ? __alloc_skb+0x2b2/0x380 [ 1019.868550][T20663] ? avc_has_perm+0x144/0x1f0 [ 1019.868570][T20663] __alloc_skb+0x2b2/0x380 [ 1019.868589][T20663] ? __pfx___alloc_skb+0x10/0x10 [ 1019.868608][T20663] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1019.868632][T20663] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1019.868662][T20663] netlink_alloc_large_skb+0x69/0x130 [ 1019.868688][T20663] netlink_sendmsg+0x6a1/0xdd0 [ 1019.868715][T20663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1019.868748][T20663] ____sys_sendmsg+0xa95/0xc70 [ 1019.868775][T20663] ? copy_msghdr_from_user+0x10a/0x160 [ 1019.868797][T20663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1019.868833][T20663] ___sys_sendmsg+0x134/0x1d0 [ 1019.868856][T20663] ? __pfx____sys_sendmsg+0x10/0x10 [ 1019.868905][T20663] __sys_sendmsg+0x16d/0x220 [ 1019.868927][T20663] ? __pfx___sys_sendmsg+0x10/0x10 [ 1019.868963][T20663] do_syscall_64+0xcd/0x4e0 [ 1019.868987][T20663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.869005][T20663] RIP: 0033:0x7ff1ff98eba9 [ 1019.869021][T20663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.869037][T20663] RSP: 002b:00007ff2007b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.869054][T20663] RAX: ffffffffffffffda RBX: 00007ff1ffbd5fa0 RCX: 00007ff1ff98eba9 [ 1019.869067][T20663] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1019.869078][T20663] RBP: 00007ff2007b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.869089][T20663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.869099][T20663] R13: 00007ff1ffbd6038 R14: 00007ff1ffbd5fa0 R15: 00007fff691487f8 [ 1019.869124][T20663] [ 1020.101605][T20631] bridge_slave_1: entered allmulticast mode [ 1020.108951][T20631] bridge_slave_1: entered promiscuous mode [ 1020.147080][T14599] usb 7-1: USB disconnect, device number 14 [ 1020.208788][T20631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.230285][T20631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.312681][T20631] team0: Port device team_slave_0 added [ 1020.322218][T20631] team0: Port device team_slave_1 added [ 1020.350368][T20671] FAULT_INJECTION: forcing a failure. [ 1020.350368][T20671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.373454][T20631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.382884][T20671] CPU: 1 UID: 0 PID: 20671 Comm: syz.7.4142 Not tainted syzkaller #0 PREEMPT(full) [ 1020.382911][T20671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1020.382921][T20671] Call Trace: [ 1020.382927][T20671] [ 1020.382934][T20671] dump_stack_lvl+0x16c/0x1f0 [ 1020.382960][T20671] should_fail_ex+0x512/0x640 [ 1020.382986][T20671] strncpy_from_user+0x3b/0x2e0 [ 1020.383009][T20671] getname_flags.part.0+0x8f/0x550 [ 1020.383038][T20671] getname_flags+0x93/0xf0 [ 1020.383055][T20671] do_sys_openat2+0xb8/0x1d0 [ 1020.383080][T20671] ? __pfx_do_sys_openat2+0x10/0x10 [ 1020.383105][T20671] ? __fget_files+0x20e/0x3c0 [ 1020.383129][T20671] __x64_sys_openat+0x174/0x210 [ 1020.383153][T20671] ? __pfx___x64_sys_openat+0x10/0x10 [ 1020.383175][T20671] ? ksys_write+0x1ac/0x250 [ 1020.383200][T20671] do_syscall_64+0xcd/0x4e0 [ 1020.383224][T20671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.383241][T20671] RIP: 0033:0x7ff1ff98eba9 [ 1020.383254][T20671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.383271][T20671] RSP: 002b:00007ff200798038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1020.383288][T20671] RAX: ffffffffffffffda RBX: 00007ff1ffbd6090 RCX: 00007ff1ff98eba9 [ 1020.383299][T20671] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1020.383309][T20671] RBP: 00007ff200798090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.383319][T20671] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1020.383328][T20671] R13: 00007ff1ffbd6128 R14: 00007ff1ffbd6090 R15: 00007fff691487f8 [ 1020.383351][T20671] [ 1020.383543][T20631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.575000][T20631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.588712][T20631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.595701][T20631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.633633][T20631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.704830][T20631] hsr_slave_0: entered promiscuous mode [ 1020.714774][T20631] hsr_slave_1: entered promiscuous mode [ 1020.717600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.722403][T20631] debugfs: 'hsr0' already exists in 'hsr' [ 1020.734483][T20631] Cannot create hsr debugfs directory [ 1020.835583][T20677] tmpfs: Unknown parameter '' [ 1020.877969][T19256] Bluetooth: hci5: command tx timeout [ 1020.943210][T20631] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.052403][T20631] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.087551][T14599] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1021.127040][T20631] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.237626][T14599] usb 7-1: Using ep0 maxpacket: 16 [ 1021.258943][T20631] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.261146][T14599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1021.312873][T14599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.313723][ T30] audit: type=1400 audit(2000000196.471:874): avc: denied { checkpoint_restore } for pid=20684 comm="syz.4.4147" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1021.325831][T14599] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1021.344685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.399380][T20689] netlink: 'syz.7.4149': attribute type 1 has an invalid length. [ 1021.423502][T14599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.462131][T14599] usb 7-1: config 0 descriptor?? [ 1021.480732][T20692] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1021.623498][T20631] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1021.654856][T20631] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1021.675516][T20631] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1021.707242][T20631] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1021.757535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.774751][T20700] FAULT_INJECTION: forcing a failure. [ 1021.774751][T20700] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.792728][T20700] CPU: 0 UID: 0 PID: 20700 Comm: syz.2.4153 Not tainted syzkaller #0 PREEMPT(full) [ 1021.792756][T20700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1021.792767][T20700] Call Trace: [ 1021.792774][T20700] [ 1021.792782][T20700] dump_stack_lvl+0x16c/0x1f0 [ 1021.792810][T20700] should_fail_ex+0x512/0x640 [ 1021.792833][T20700] ? fs_reclaim_acquire+0xae/0x150 [ 1021.792858][T20700] ? tomoyo_encode2+0x100/0x3e0 [ 1021.792883][T20700] should_failslab+0xc2/0x120 [ 1021.792904][T20700] __kmalloc_noprof+0xd2/0x510 [ 1021.792928][T20700] tomoyo_encode2+0x100/0x3e0 [ 1021.792957][T20700] tomoyo_encode+0x29/0x50 [ 1021.792980][T20700] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1021.793008][T20700] ? tomoyo_profile+0x47/0x60 [ 1021.793028][T20700] tomoyo_path_number_perm+0x245/0x580 [ 1021.793049][T20700] ? tomoyo_path_number_perm+0x237/0x580 [ 1021.793071][T20700] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1021.793094][T20700] ? lockdep_hardirqs_on+0x7c/0x110 [ 1021.793137][T20700] ? find_held_lock+0x2b/0x80 [ 1021.793158][T20700] ? hook_file_ioctl_common+0x145/0x410 [ 1021.793182][T20700] ? __fget_files+0x20e/0x3c0 [ 1021.793208][T20700] security_file_ioctl+0x9b/0x240 [ 1021.793235][T20700] __x64_sys_ioctl+0xb7/0x210 [ 1021.793264][T20700] do_syscall_64+0xcd/0x4e0 [ 1021.793288][T20700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.793305][T20700] RIP: 0033:0x7fcf8cb8eba9 [ 1021.793320][T20700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.793335][T20700] RSP: 002b:00007fcf8dab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.793353][T20700] RAX: ffffffffffffffda RBX: 00007fcf8cdd5fa0 RCX: 00007fcf8cb8eba9 [ 1021.793364][T20700] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1021.793374][T20700] RBP: 00007fcf8dab2090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.793384][T20700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.793394][T20700] R13: 00007fcf8cdd6038 R14: 00007fcf8cdd5fa0 R15: 00007ffdb3324de8 [ 1021.793417][T20700] [ 1021.793435][T20700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1022.011266][T14599] magicmouse 0003:05AC:0265.0036: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0 [ 1022.173962][T14599] usb 7-1: USB disconnect, device number 15 [ 1022.226119][T20631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.254590][T20631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.271651][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.278837][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.577593][ T5852] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1022.689637][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.696829][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.798945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.809510][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 1022.826647][ T5852] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 1022.835553][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.857435][ T5852] usb 3-1: config 0 has no interface number 0 [ 1022.858500][T20720] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4157'. [ 1022.902710][ T5852] usb 3-1: too many endpoints for config 0 interface 135 altsetting 89: 100, using maximum allowed: 30 [ 1022.923945][ T5852] usb 3-1: config 0 interface 135 altsetting 89 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.942952][ T5852] usb 3-1: config 0 interface 135 has no altsetting 0 [ 1022.958859][T19256] Bluetooth: hci5: command tx timeout [ 1022.970531][ T5852] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1022.990181][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.037488][ T5852] usb 3-1: Product: syz [ 1023.041690][ T5852] usb 3-1: Manufacturer: syz [ 1023.046293][ T5852] usb 3-1: SerialNumber: syz [ 1023.091299][ T5852] usb 3-1: config 0 descriptor?? [ 1023.101253][T20631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.166719][T20732] netlink: 'syz.6.4159': attribute type 1 has an invalid length. [ 1023.174685][T20732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.191829][T20734] netlink: 'syz.4.4160': attribute type 5 has an invalid length. [ 1023.300916][T20717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.321418][T20717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.412030][T20742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.436732][T20742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.821484][T20631] veth0_vlan: entered promiscuous mode [ 1023.837361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.918857][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.940989][T20631] veth1_vlan: entered promiscuous mode [ 1023.963745][T20748] FAULT_INJECTION: forcing a failure. [ 1023.963745][T20748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.989833][T20748] CPU: 1 UID: 0 PID: 20748 Comm: syz.6.4163 Not tainted syzkaller #0 PREEMPT(full) [ 1023.989858][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1023.989868][T20748] Call Trace: [ 1023.989874][T20748] [ 1023.989882][T20748] dump_stack_lvl+0x16c/0x1f0 [ 1023.989909][T20748] should_fail_ex+0x512/0x640 [ 1023.989934][T20748] _copy_from_user+0x2e/0xd0 [ 1023.989959][T20748] eventfd_write+0xdb/0x670 [ 1023.989982][T20748] ? get_pid_task+0xfc/0x250 [ 1023.989996][T20748] ? __pfx_eventfd_write+0x10/0x10 [ 1023.990022][T20748] ? selinux_file_permission+0x126/0x660 [ 1023.990050][T20748] ? bpf_lsm_file_permission+0x9/0x10 [ 1023.990071][T20748] ? security_file_permission+0x71/0x210 [ 1023.990098][T20748] ? rw_verify_area+0xcf/0x6c0 [ 1023.990126][T20748] ? __pfx_eventfd_write+0x10/0x10 [ 1023.990151][T20748] vfs_write+0x29d/0x11d0 [ 1023.990175][T20748] ? __pfx_vfs_write+0x10/0x10 [ 1023.990191][T20748] ? find_held_lock+0x2b/0x80 [ 1023.990213][T20748] ? __fget_files+0x204/0x3c0 [ 1023.990237][T20748] ? __fget_files+0x20e/0x3c0 [ 1023.990263][T20748] ksys_write+0x12a/0x250 [ 1023.990280][T20748] ? __pfx_ksys_write+0x10/0x10 [ 1023.990298][T20748] ? fput+0x9b/0xd0 [ 1023.990325][T20748] do_syscall_64+0xcd/0x4e0 [ 1023.990351][T20748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.990369][T20748] RIP: 0033:0x7f54d998eba9 [ 1023.990386][T20748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.990402][T20748] RSP: 002b:00007f54da887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.990421][T20748] RAX: ffffffffffffffda RBX: 00007f54d9bd5fa0 RCX: 00007f54d998eba9 [ 1023.990433][T20748] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000006 [ 1023.990443][T20748] RBP: 00007f54da887090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.990454][T20748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.990464][T20748] R13: 00007f54d9bd6038 R14: 00007f54d9bd5fa0 R15: 00007ffd04c9ee78 [ 1023.990487][T20748] [ 1024.373388][T20631] veth0_macvtap: entered promiscuous mode [ 1024.383976][ T5852] usb 3-1: USB disconnect, device number 13 [ 1024.478264][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.490652][T20631] veth1_macvtap: entered promiscuous mode [ 1024.548762][T20631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.558035][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.570865][T20631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.642875][T20755] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4165'. [ 1024.718937][T19513] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.730608][T19513] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.740483][T19513] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.822778][T19513] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.877344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.039240][T19256] Bluetooth: hci5: command tx timeout [ 1025.114467][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.149881][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.200803][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.246970][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.256112][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.917258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.082725][ T30] audit: type=1326 audit(2000000201.231:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20779 comm="syz.2.4171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf8cb8eba9 code=0x0 [ 1026.470962][T20798] 9pnet_fd: Insufficient options for proto=fd [ 1026.957214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.129380][T19256] Bluetooth: hci5: command tx timeout [ 1028.007103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.145430][T20816] NILFS (loop2): device size too small [ 1028.413233][ T30] audit: type=1400 audit(2000000203.561:876): avc: denied { ioctl } for pid=20819 comm="syz.7.4182" path="socket:[94819]" dev="sockfs" ino=94819 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1028.504605][ T30] audit: type=1400 audit(2000000203.591:877): avc: denied { read } for pid=20819 comm="syz.7.4182" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1028.543617][ T30] audit: type=1400 audit(2000000203.591:878): avc: denied { open } for pid=20819 comm="syz.7.4182" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1028.586979][ T30] audit: type=1400 audit(2000000203.591:879): avc: denied { ioctl } for pid=20819 comm="syz.7.4182" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1028.636420][ T5909] hid-generic 0001:0009:0001.0037: item fetching failed at offset 0/2 [ 1028.653578][ T5909] hid-generic 0001:0009:0001.0037: probe with driver hid-generic failed with error -22 [ 1029.047062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.209243][T16019] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1029.364346][T16019] usb 9-1: device descriptor read/64, error -71 [ 1029.367246][ T5909] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1029.507108][T14809] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1029.529820][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.542165][ T5909] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1029.551742][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.566796][ T5909] usb 7-1: config 0 descriptor?? [ 1029.627430][T16019] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1029.661259][T14809] usb 3-1: Using ep0 maxpacket: 32 [ 1029.682261][T14809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1029.702593][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.711123][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.721082][T14809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1029.743122][T14809] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1029.762584][T16019] usb 9-1: device descriptor read/64, error -71 [ 1029.762747][T14809] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1029.777921][T14809] usb 3-1: Product: syz [ 1029.783872][T14809] usb 3-1: Manufacturer: syz [ 1029.790018][T14809] usb 3-1: SerialNumber: syz [ 1029.797343][T14809] usb 3-1: config 0 descriptor?? [ 1029.827331][T14809] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1029.911307][T16019] usb usb9-port1: attempt power cycle [ 1030.087003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.183577][ T5909] pantherlord 0003:0810:0001.0038: hidraw0: USB HID v0.03 Device [HID 0810:0001] on usb-dummy_hcd.6-1/input0 [ 1030.195965][ T5909] pantherlord 0003:0810:0001.0038: no output reports found [ 1030.248327][T20881] FAULT_INJECTION: forcing a failure. [ 1030.248327][T20881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.262527][T20881] CPU: 0 UID: 0 PID: 20881 Comm: syz.4.4202 Not tainted syzkaller #0 PREEMPT(full) [ 1030.262554][T20881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1030.262564][T20881] Call Trace: [ 1030.262571][T20881] [ 1030.262578][T20881] dump_stack_lvl+0x16c/0x1f0 [ 1030.262609][T20881] should_fail_ex+0x512/0x640 [ 1030.262637][T20881] _copy_from_user+0x2e/0xd0 [ 1030.262662][T20881] __sys_bpf+0x21d/0x4de0 [ 1030.262688][T20881] ? __pfx___sys_bpf+0x10/0x10 [ 1030.262712][T20881] ? ksys_write+0x190/0x250 [ 1030.262735][T20881] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1030.262772][T20881] ? fput+0x9b/0xd0 [ 1030.262794][T20881] ? ksys_write+0x1ac/0x250 [ 1030.262812][T20881] ? __pfx_ksys_write+0x10/0x10 [ 1030.262835][T20881] __x64_sys_bpf+0x78/0xc0 [ 1030.262857][T20881] ? lockdep_hardirqs_on+0x7c/0x110 [ 1030.262879][T20881] do_syscall_64+0xcd/0x4e0 [ 1030.262903][T20881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.262921][T20881] RIP: 0033:0x7f7e69d8eba9 [ 1030.262936][T20881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.262953][T20881] RSP: 002b:00007f7e6ac2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1030.262972][T20881] RAX: ffffffffffffffda RBX: 00007f7e69fd5fa0 RCX: 00007f7e69d8eba9 [ 1030.262984][T20881] RDX: 0000000000000021 RSI: 00002000000001c0 RDI: 000000000000000a [ 1030.262994][T20881] RBP: 00007f7e6ac2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.263004][T20881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.263014][T20881] R13: 00007f7e69fd6038 R14: 00007f7e69fd5fa0 R15: 00007ffefb54bc88 [ 1030.263039][T20881] [ 1030.436221][ T7047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.452930][ T5923] usb 7-1: USB disconnect, device number 16 [ 1030.613297][T16019] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 1030.647616][T16019] usb 9-1: device descriptor read/8, error -71 [ 1030.962048][ T7047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.049431][ T1347] usb 3-1: Failed to submit usb control message: -110 [ 1031.057021][ T1347] usb 3-1: unable to send the bmi data to the device: -110 [ 1031.064396][ T1347] usb 3-1: unable to get target info from device [ 1031.071281][ T1347] usb 3-1: could not get target info (-110) [ 1031.078154][ T1347] usb 3-1: could not probe fw (-110) [ 1031.116939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.156935][T16019] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 1031.177349][T16019] usb 9-1: device descriptor read/8, error -71 [ 1031.288137][T16019] usb usb9-port1: unable to enumerate USB device [ 1031.832020][T20894] netlink: 'syz.6.4207': attribute type 10 has an invalid length. [ 1031.842487][T20894] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 1031.931516][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.027162][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.166869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.227974][T20900] usb usb8: usbfs: process 20900 (syz.6.4210) did not claim interface 0 before use [ 1032.237586][T20900] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1032.330690][ T5923] usb 3-1: USB disconnect, device number 14 [ 1032.658776][T20909] FAULT_INJECTION: forcing a failure. [ 1032.658776][T20909] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.671566][T20909] CPU: 0 UID: 0 PID: 20909 Comm: syz.2.4213 Not tainted syzkaller #0 PREEMPT(full) [ 1032.671581][T20909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1032.671589][T20909] Call Trace: [ 1032.671593][T20909] [ 1032.671597][T20909] dump_stack_lvl+0x16c/0x1f0 [ 1032.671616][T20909] should_fail_ex+0x512/0x640 [ 1032.671631][T20909] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1032.671645][T20909] should_failslab+0xc2/0x120 [ 1032.671658][T20909] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1032.671670][T20909] ? __alloc_skb+0x2b2/0x380 [ 1032.671686][T20909] __alloc_skb+0x2b2/0x380 [ 1032.671698][T20909] ? __pfx___alloc_skb+0x10/0x10 [ 1032.671713][T20909] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1032.671731][T20909] netlink_alloc_large_skb+0x69/0x130 [ 1032.671747][T20909] netlink_sendmsg+0x6a1/0xdd0 [ 1032.671764][T20909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1032.671784][T20909] ____sys_sendmsg+0xa95/0xc70 [ 1032.671801][T20909] ? copy_msghdr_from_user+0x10a/0x160 [ 1032.671815][T20909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1032.671838][T20909] ___sys_sendmsg+0x134/0x1d0 [ 1032.671853][T20909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1032.671882][T20909] __sys_sendmsg+0x16d/0x220 [ 1032.671896][T20909] ? __pfx___sys_sendmsg+0x10/0x10 [ 1032.671918][T20909] do_syscall_64+0xcd/0x4e0 [ 1032.671934][T20909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.671946][T20909] RIP: 0033:0x7fcf8cb8eba9 [ 1032.671956][T20909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.671967][T20909] RSP: 002b:00007fcf8dab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.671979][T20909] RAX: ffffffffffffffda RBX: 00007fcf8cdd5fa0 RCX: 00007fcf8cb8eba9 [ 1032.671986][T20909] RDX: 0000000000004880 RSI: 0000200000000780 RDI: 0000000000000003 [ 1032.671993][T20909] RBP: 00007fcf8dab2090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.671999][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.672006][T20909] R13: 00007fcf8cdd6038 R14: 00007fcf8cdd5fa0 R15: 00007ffdb3324de8 [ 1032.672019][T20909] [ 1032.979100][T19456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1032.990646][T19456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1033.002470][T19456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1033.012640][T19456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1033.020750][T19456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1033.090404][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.157177][T20910] syzkaller1: entered promiscuous mode [ 1033.176387][T20910] syzkaller1: entered allmulticast mode [ 1033.206833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.222100][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.264866][T20921] FAULT_INJECTION: forcing a failure. [ 1033.264866][T20921] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.277858][T20921] CPU: 1 UID: 0 PID: 20921 Comm: syz.8.4217 Not tainted syzkaller #0 PREEMPT(full) [ 1033.277883][T20921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1033.277894][T20921] Call Trace: [ 1033.277901][T20921] [ 1033.277908][T20921] dump_stack_lvl+0x16c/0x1f0 [ 1033.277936][T20921] should_fail_ex+0x512/0x640 [ 1033.277958][T20921] ? fs_reclaim_acquire+0xae/0x150 [ 1033.277983][T20921] ? tomoyo_encode2+0x100/0x3e0 [ 1033.278008][T20921] should_failslab+0xc2/0x120 [ 1033.278029][T20921] __kmalloc_noprof+0xd2/0x510 [ 1033.278054][T20921] tomoyo_encode2+0x100/0x3e0 [ 1033.278083][T20921] tomoyo_encode+0x29/0x50 [ 1033.278107][T20921] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1033.278136][T20921] ? tomoyo_profile+0x47/0x60 [ 1033.278156][T20921] tomoyo_path_number_perm+0x245/0x580 [ 1033.278178][T20921] ? tomoyo_path_number_perm+0x237/0x580 [ 1033.278202][T20921] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1033.278227][T20921] ? find_held_lock+0x2b/0x80 [ 1033.278272][T20921] ? find_held_lock+0x2b/0x80 [ 1033.278293][T20921] ? hook_file_ioctl_common+0x145/0x410 [ 1033.278317][T20921] ? __fget_files+0x20e/0x3c0 [ 1033.278342][T20921] security_file_ioctl+0x9b/0x240 [ 1033.278370][T20921] __x64_sys_ioctl+0xb7/0x210 [ 1033.278399][T20921] do_syscall_64+0xcd/0x4e0 [ 1033.278425][T20921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.278443][T20921] RIP: 0033:0x7fa0ead8eba9 [ 1033.278458][T20921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.278476][T20921] RSP: 002b:00007fa0e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.278500][T20921] RAX: ffffffffffffffda RBX: 00007fa0eafd5fa0 RCX: 00007fa0ead8eba9 [ 1033.278511][T20921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1033.278523][T20921] RBP: 00007fa0e8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.278534][T20921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.278545][T20921] R13: 00007fa0eafd6038 R14: 00007fa0eafd5fa0 R15: 00007ffdc8ea2ab8 [ 1033.278571][T20921] [ 1033.278588][T20921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1033.452830][T20912] chnl_net:caif_netlink_parms(): no params data found [ 1033.596966][ T5923] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1033.616000][T20931] FAULT_INJECTION: forcing a failure. [ 1033.616000][T20931] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.658039][T20931] CPU: 1 UID: 0 PID: 20931 Comm: syz.8.4219 Not tainted syzkaller #0 PREEMPT(full) [ 1033.658066][T20931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1033.658077][T20931] Call Trace: [ 1033.658083][T20931] [ 1033.658091][T20931] dump_stack_lvl+0x16c/0x1f0 [ 1033.658120][T20931] should_fail_ex+0x512/0x640 [ 1033.658142][T20931] ? fs_reclaim_acquire+0xae/0x150 [ 1033.658169][T20931] ? tomoyo_encode2+0x100/0x3e0 [ 1033.658193][T20931] should_failslab+0xc2/0x120 [ 1033.658215][T20931] __kmalloc_noprof+0xd2/0x510 [ 1033.658234][T20931] ? d_absolute_path+0x136/0x1a0 [ 1033.658264][T20931] tomoyo_encode2+0x100/0x3e0 [ 1033.658293][T20931] tomoyo_encode+0x29/0x50 [ 1033.658318][T20931] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1033.658351][T20931] tomoyo_path_number_perm+0x245/0x580 [ 1033.658374][T20931] ? tomoyo_path_number_perm+0x237/0x580 [ 1033.658405][T20931] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1033.658430][T20931] ? find_held_lock+0x2b/0x80 [ 1033.658476][T20931] ? find_held_lock+0x2b/0x80 [ 1033.658498][T20931] ? hook_file_ioctl_common+0x145/0x410 [ 1033.658523][T20931] ? __fget_files+0x20e/0x3c0 [ 1033.658548][T20931] security_file_ioctl+0x9b/0x240 [ 1033.658575][T20931] __x64_sys_ioctl+0xb7/0x210 [ 1033.658604][T20931] do_syscall_64+0xcd/0x4e0 [ 1033.658630][T20931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.658649][T20931] RIP: 0033:0x7fa0ead8eba9 [ 1033.658666][T20931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.658683][T20931] RSP: 002b:00007fa0e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.658701][T20931] RAX: ffffffffffffffda RBX: 00007fa0eafd5fa0 RCX: 00007fa0ead8eba9 [ 1033.658713][T20931] RDX: 0000200000000200 RSI: 0000000040045613 RDI: 0000000000000003 [ 1033.658724][T20931] RBP: 00007fa0e8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.658735][T20931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.658746][T20931] R13: 00007fa0eafd6038 R14: 00007fa0eafd5fa0 R15: 00007ffdc8ea2ab8 [ 1033.658771][T20931] [ 1033.658787][T20931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1033.868048][ T30] audit: type=1400 audit(2000000209.021:880): avc: denied { lock } for pid=20927 comm="syz.6.4218" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1034.203149][T20937] overlayfs: missing 'lowerdir' [ 1034.236760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.254496][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 1034.357333][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.373867][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.404422][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1034.429329][T20912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.436429][T20912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.452947][ T5923] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1034.467138][T20912] bridge_slave_0: entered allmulticast mode [ 1034.606892][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.039805][T20912] bridge_slave_0: entered promiscuous mode [ 1035.052443][ T49] bridge_slave_1: left allmulticast mode [ 1035.053850][ T5923] usb 3-1: config 0 descriptor?? [ 1035.064796][ T49] bridge_slave_1: left promiscuous mode [ 1035.081284][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.103810][ T49] bridge_slave_0: left allmulticast mode [ 1035.112328][ T49] bridge_slave_0: left promiscuous mode [ 1035.130165][T19456] Bluetooth: hci0: command tx timeout [ 1035.140635][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.281845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.455948][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.464080][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.480094][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.493740][ T5923] microsoft 0003:045E:07DA.0039: ignoring exceeding usage max [ 1035.503815][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.511697][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.519184][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.526484][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.534259][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.550835][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.558407][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.565680][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.579269][ T5923] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 1035.586954][ T5923] microsoft 0003:045E:07DA.0039: unsupported Resolution Multiplier 0 [ 1035.675278][ T5923] microsoft 0003:045E:07DA.0039: unsupported Resolution Multiplier 0 [ 1035.696014][ T5909] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1035.698402][ T5923] microsoft 0003:045E:07DA.0039: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1035.715377][ T5923] microsoft 0003:045E:07DA.0039: no inputs found [ 1035.722104][ T5923] microsoft 0003:045E:07DA.0039: could not initialize ff, continuing anyway [ 1035.845460][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.857244][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.858772][ T5909] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1035.874969][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 1035.883295][ T5909] usb 7-1: New USB device found, idVendor=0525, idProduct=dfb5, bcdDevice= 0.40 [ 1035.892662][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.894385][ T49] bond0 (unregistering): Released all slaves [ 1035.900892][ T5909] usb 7-1: Product: syz [ 1035.900911][ T5909] usb 7-1: Manufacturer: syz [ 1035.900926][ T5909] usb 7-1: SerialNumber: syz [ 1035.941138][T20912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.948705][T20912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.955970][T20912] bridge_slave_1: entered allmulticast mode [ 1035.963599][T20912] bridge_slave_1: entered promiscuous mode [ 1036.079432][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.087960][ T49] tipc: Left network mode [ 1036.112931][T20912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.132796][T20912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.211162][T20912] team0: Port device team_slave_0 added [ 1036.262219][T20912] team0: Port device team_slave_1 added [ 1036.326776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.335958][ T49] hsr_slave_0: left promiscuous mode [ 1036.346027][ T49] hsr_slave_1: left promiscuous mode [ 1036.356894][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.364489][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.395959][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.405114][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.434479][ T49] veth1_macvtap: left promiscuous mode [ 1036.443027][ T49] veth0_macvtap: left promiscuous mode [ 1036.449607][ T49] veth1_vlan: left promiscuous mode [ 1036.455197][ T49] veth0_vlan: left promiscuous mode [ 1036.581541][ T5909] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xDFB5 [ 1036.724867][T19513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.939079][ T5852] usb 3-1: USB disconnect, device number 15 [ 1036.945430][T20974] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1037.196767][T19456] Bluetooth: hci0: command tx timeout [ 1037.366818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.724845][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1037.800039][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1038.202888][T20982] block nbd2: Attempted send on invalid socket [ 1038.210919][T20982] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.226247][T20982] block nbd2: Attempted send on invalid socket [ 1038.258870][T20982] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.278639][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1038.379765][T18238] block nbd2: Attempted send on invalid socket [ 1038.388990][T18238] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.398508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.410663][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1038.422783][T20982] block nbd2: Attempted send on invalid socket [ 1038.432854][ T5909] usb 7-1: USB disconnect, device number 17 [ 1038.447468][T20982] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.447987][ T5909] usblp0: removed [ 1038.461263][T20982] block nbd2: Attempted send on invalid socket [ 1038.477667][T20982] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.487333][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1038.499774][T20982] block nbd2: Attempted send on invalid socket [ 1038.515014][T20982] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.525130][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1038.536250][T20982] block nbd2: Attempted send on invalid socket [ 1038.543321][T20982] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.553264][T20982] block nbd2: Attempted send on invalid socket [ 1038.561606][T20982] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.571234][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1038.592587][T20982] block nbd2: Attempted send on invalid socket [ 1038.612852][T20982] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.742950][T20986] ubi: mtd0 is already attached to ubi31 [ 1038.916873][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1038.929913][T20982] block nbd2: Attempted send on invalid socket [ 1038.956906][T20982] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.983714][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1039.012957][T20982] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1039.022933][T20982] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1039.211235][T20912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.220505][T20912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.248900][T20912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.291179][T19456] Bluetooth: hci0: command tx timeout [ 1039.294415][T20912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.319068][T20912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.421617][T20912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.440750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.565830][T20912] hsr_slave_0: entered promiscuous mode [ 1039.594517][T20912] hsr_slave_1: entered promiscuous mode [ 1039.815198][T20912] debugfs: 'hsr0' already exists in 'hsr' [ 1039.821361][T20912] Cannot create hsr debugfs directory [ 1040.476463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.641138][T21008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1040.656461][T21008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1040.662583][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.671135][ T3018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.690515][T21008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1040.728665][ T49] IPVS: stop unused estimator thread 0... [ 1040.767970][T21008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1040.776281][T21008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1040.820107][T21008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1041.170837][T21027] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4241'. [ 1041.200818][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.206736][ T5909] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1041.394084][ T5909] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1041.402907][ T5909] usb 9-1: New USB device found, idVendor=0525, idProduct=dfb5, bcdDevice= 0.40 [ 1041.441537][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.466462][ T5909] usb 9-1: Product: syz [ 1041.488517][ T5909] usb 9-1: Manufacturer: syz [ 1041.503420][ T5909] usb 9-1: SerialNumber: syz [ 1041.516374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.564440][T20912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1041.578331][T20912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1041.592206][T20912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1041.610096][T20912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1041.751422][T20912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.766689][T14809] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1041.802859][T20912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.823407][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.830568][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.855001][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.862154][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.928159][T14809] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1041.939790][T14809] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1041.952075][T14809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1041.968735][T14809] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1041.978376][T14809] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1041.988290][T14809] usb 3-1: Product: syz [ 1041.992651][T14809] usb 3-1: Manufacturer: syz [ 1042.005328][T14809] usb 3-1: SerialNumber: syz [ 1042.021965][T14809] usb 3-1: config 0 descriptor?? [ 1042.041347][T14809] hub 3-1:0.0: bad descriptor, ignoring hub [ 1042.057207][T14809] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1042.076520][T19456] Bluetooth: hci5: command 0x0c1a tx timeout [ 1042.079694][T14809] usb 3-1: selecting invalid altsetting 0 [ 1042.141746][ T5909] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 253 proto 1 vid 0x0525 pid 0xDFB5 [ 1042.321021][T14809] usb 3-1: USB disconnect, device number 16 [ 1042.414549][T20912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.467548][T20912] veth0_vlan: entered promiscuous mode [ 1042.476578][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.494478][T20912] veth1_vlan: entered promiscuous mode [ 1042.515762][T20912] veth0_macvtap: entered promiscuous mode [ 1042.525388][T20912] veth1_macvtap: entered promiscuous mode [ 1042.542292][T20912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.555702][T20912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.563153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.583227][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.592127][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.602461][ T3018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.611912][ T3018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.709022][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.725552][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.780306][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.788673][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.796960][T19456] Bluetooth: hci0: command 0x0c1a tx timeout [ 1042.920953][T21047] Bluetooth: MGMT ver 1.23 [ 1043.219951][T21048] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1043.596329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.932849][T14599] usb 9-1: USB disconnect, device number 58 [ 1044.181834][T19456] Bluetooth: hci5: command 0x0c1a tx timeout [ 1044.192663][T14599] usblp0: removed [ 1044.646225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.978384][T19456] Bluetooth: hci0: command 0x0c1a tx timeout [ 1045.295915][T21068] debugfs: '!' already exists in 'ieee80211' [ 1045.573768][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4250'. [ 1045.672297][T21076] usb usb8: usbfs: process 21076 (syz.8.4251) did not claim interface 0 before use [ 1045.681895][T21076] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1045.686147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.791533][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.042520][T19256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1046.055399][T19256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1046.068520][T19256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1046.151755][T19256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1046.161315][T19256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1046.236120][T19256] Bluetooth: hci5: command 0x0c1a tx timeout [ 1046.334595][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.344338][T15774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.456124][ T30] audit: type=1400 audit(2000000221.602:881): avc: denied { ioctl } for pid=21084 comm="syz.8.4255" path="socket:[97072]" dev="sockfs" ino=97072 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1046.485762][ T5923] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1046.635812][ T30] audit: type=1400 audit(2000000221.782:882): avc: denied { ioctl } for pid=21087 comm="syz.6.4254" path="socket:[97085]" dev="sockfs" ino=97085 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1046.660435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.716054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.798488][ T5923] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1046.836121][T14809] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1046.864523][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1046.871846][ T5923] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1046.882448][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.899712][ T5923] usb 1-1: config 0 descriptor?? [ 1046.979311][T21099] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1046.985835][T21099] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1047.006299][T21099] vhci_hcd vhci_hcd.0: Device attached [ 1047.036587][T21099] FAULT_INJECTION: forcing a failure. [ 1047.036587][T21099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.036645][T19256] Bluetooth: hci0: command 0x0c1a tx timeout [ 1047.274913][T21078] chnl_net:caif_netlink_parms(): no params data found [ 1047.458891][ T5852] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 1047.675308][T21099] CPU: 1 UID: 0 PID: 21099 Comm: syz.6.4257 Not tainted syzkaller #0 PREEMPT(full) [ 1047.675328][T14809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.675336][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1047.675348][T21099] Call Trace: [ 1047.675354][T21099] [ 1047.675362][T21099] dump_stack_lvl+0x16c/0x1f0 [ 1047.675386][T21099] should_fail_ex+0x512/0x640 [ 1047.675410][T21099] _copy_from_user+0x2e/0xd0 [ 1047.675435][T21099] core_sys_select+0x35b/0xc10 [ 1047.675458][T21099] ? __pfx_core_sys_select+0x10/0x10 [ 1047.675495][T21099] ? set_user_sigmask+0x21b/0x2b0 [ 1047.675514][T21099] ? __pfx_set_user_sigmask+0x10/0x10 [ 1047.675537][T21099] do_pselect.constprop.0+0x19f/0x1e0 [ 1047.675555][T21099] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1047.675580][T21099] __x64_sys_pselect6+0x182/0x240 [ 1047.675598][T21099] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 1047.675622][T21099] do_syscall_64+0xcd/0x4e0 [ 1047.675644][T21099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.675661][T21099] RIP: 0033:0x7f54d998eba9 [ 1047.675674][T21099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.675689][T21099] RSP: 002b:00007f54da887038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1047.675705][T21099] RAX: ffffffffffffffda RBX: 00007f54d9bd5fa0 RCX: 00007f54d998eba9 [ 1047.675715][T21099] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1047.675725][T21099] RBP: 00007f54da887090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.675734][T21099] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1047.675743][T21099] R13: 00007f54d9bd6038 R14: 00007f54d9bd5fa0 R15: 00007ffd04c9ee78 [ 1047.675764][T21099] [ 1047.765982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.864228][T21101] vhci_hcd: connection closed [ 1047.919730][ T3018] vhci_hcd: stop threads [ 1047.946031][ T3018] vhci_hcd: release socket [ 1047.950534][ T3018] vhci_hcd: disconnect device [ 1047.999990][T14809] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.019095][T14809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.029630][T14809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.048197][T14809] usb 3-1: SerialNumber: syz [ 1048.075287][T14809] cdc_acm 3-1:1.0: skipping garbage [ 1048.142300][T21078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.166414][T21078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.174058][T21078] bridge_slave_0: entered allmulticast mode [ 1048.194521][T21078] bridge_slave_0: entered promiscuous mode [ 1048.203271][T21078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.213864][T21078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.221220][T21078] bridge_slave_1: entered allmulticast mode [ 1048.234950][T21078] bridge_slave_1: entered promiscuous mode [ 1048.241322][ T3018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.290810][ T30] audit: type=1400 audit(2000000223.442:883): avc: denied { ioctl } for pid=21108 comm="syz.8.4258" path="socket:[97166]" dev="sockfs" ino=97166 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1048.327251][T19256] Bluetooth: hci1: command tx timeout [ 1048.412877][T16019] usb 3-1: USB disconnect, device number 17 [ 1048.500187][T21078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.550337][T21078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.795944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.118958][T21078] team0: Port device team_slave_0 added [ 1049.156071][T21078] team0: Port device team_slave_1 added [ 1049.275546][ T5923] usbhid 1-1:0.0: can't add hid device: -71 [ 1049.763395][ T5923] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1049.781178][ T5923] usb 1-1: USB disconnect, device number 20 [ 1049.832951][T21078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.840360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.858470][T21078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.884959][T21078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.897093][T21078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.904126][T21078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.931158][T21078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.405475][T21149] usb usb8: usbfs: process 21149 (syz.6.4263) did not claim interface 0 before use [ 1050.414998][T21149] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1050.426262][T19256] Bluetooth: hci1: command tx timeout [ 1050.526963][T21078] hsr_slave_0: entered promiscuous mode [ 1050.546821][T21078] hsr_slave_1: entered promiscuous mode [ 1050.553951][T21078] debugfs: 'hsr0' already exists in 'hsr' [ 1050.566087][T21078] Cannot create hsr debugfs directory [ 1050.799855][T21153] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1050.806400][T21153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1050.846221][T21153] vhci_hcd vhci_hcd.0: Device attached [ 1050.875837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.930578][T21078] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.283124][ T5923] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1051.437893][ T3018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.447218][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.504571][T21078] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.555821][T14809] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1051.576606][T21078] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.668653][T21078] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.707296][T14809] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1051.715489][T14809] usb 1-1: config 0 has no interface number 0 [ 1051.756450][T14809] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1051.772349][T21171] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4270'. [ 1051.811267][T14809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.866941][T14809] usb 1-1: config 0 descriptor?? [ 1051.912286][T14809] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.105/input/input40 [ 1051.925752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.019563][T21176] FAULT_INJECTION: forcing a failure. [ 1052.019563][T21176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.171507][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.230259][T21176] CPU: 1 UID: 0 PID: 21176 Comm: syz.2.4272 Not tainted syzkaller #0 PREEMPT(full) [ 1052.230283][T21176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1052.230293][T21176] Call Trace: [ 1052.230299][T21176] [ 1052.230306][T21176] dump_stack_lvl+0x16c/0x1f0 [ 1052.230325][T21176] should_fail_ex+0x512/0x640 [ 1052.230350][T21176] _copy_to_user+0x32/0xd0 [ 1052.230376][T21176] simple_read_from_buffer+0xcb/0x170 [ 1052.230396][T21176] proc_fail_nth_read+0x197/0x240 [ 1052.230415][T21176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.230430][T21176] ? rw_verify_area+0xcf/0x6c0 [ 1052.230447][T21176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.230460][T21176] vfs_read+0x1e4/0xcf0 [ 1052.230474][T21176] ? __pfx___mutex_lock+0x10/0x10 [ 1052.230496][T21176] ? __pfx_vfs_read+0x10/0x10 [ 1052.230520][T21176] ? __fget_files+0x20e/0x3c0 [ 1052.230545][T21176] ksys_read+0x12a/0x250 [ 1052.230560][T21176] ? __pfx_ksys_read+0x10/0x10 [ 1052.230576][T21176] do_syscall_64+0xcd/0x4e0 [ 1052.230592][T21176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.230604][T21176] RIP: 0033:0x7fcf8cb8d5bc [ 1052.230613][T21176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1052.230626][T21176] RSP: 002b:00007fcf8dab2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.230643][T21176] RAX: ffffffffffffffda RBX: 00007fcf8cdd5fa0 RCX: 00007fcf8cb8d5bc [ 1052.230654][T21176] RDX: 000000000000000f RSI: 00007fcf8dab20a0 RDI: 0000000000000009 [ 1052.230664][T21176] RBP: 00007fcf8dab2090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.230674][T21176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.230684][T21176] R13: 00007fcf8cdd6038 R14: 00007fcf8cdd5fa0 R15: 00007ffdb3324de8 [ 1052.230704][T21176] [ 1052.429993][T21078] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1052.451365][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4266'. [ 1052.460523][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4266'. [ 1052.482865][T19256] Bluetooth: hci1: command tx timeout [ 1052.483569][T21078] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1052.555685][T21078] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1052.568390][T21078] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1052.664306][T21078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.700401][T21078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.722872][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.730040][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.748541][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.755729][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.905900][T14809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1052.945996][ T5852] vhci_hcd: vhci_device speed not set [ 1052.955717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.041657][T21078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.087281][T14809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.105469][T14809] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1053.114802][T14809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.135800][T14809] usb 3-1: config 0 descriptor?? [ 1053.387265][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4276'. [ 1053.616085][T21078] veth0_vlan: entered promiscuous mode [ 1053.634875][T21078] veth1_vlan: entered promiscuous mode [ 1053.683616][T21078] veth0_macvtap: entered promiscuous mode [ 1053.705924][T21078] veth1_macvtap: entered promiscuous mode [ 1053.817777][T14809] usbhid 3-1:0.0: can't add hid device: -71 [ 1053.822209][T21078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.834720][T21078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.845512][T14809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1053.861970][T21210] usb usb8: usbfs: process 21210 (syz.8.4278) did not claim interface 0 before use [ 1053.871010][T14809] usb 3-1: USB disconnect, device number 18 [ 1053.872883][T21210] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1053.881986][ T5205] bcm5974 1-1:0.105: could not read from device [ 1053.900102][ T5967] usb 1-1: USB disconnect, device number 21 [ 1053.906268][T21154] usb 33-1: recv xbuf, 0 [ 1053.914418][ T7047] vhci_hcd: stop threads [ 1053.926192][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.942700][ T7047] vhci_hcd: release socket [ 1053.948024][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.975510][T20158] bcm5974 1-1:0.105: could not read from device [ 1053.989465][ T7047] vhci_hcd: disconnect device [ 1053.999666][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.006561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.016173][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.042195][ T5923] usb 33-1: device descriptor read/64, error -71 [ 1054.168725][ T7047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.219084][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.224274][ T30] audit: type=1400 audit(2000000229.112:884): avc: denied { write } for pid=21211 comm="syz.0.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1054.336355][ T5923] vhci_hcd: vhci_device speed not set [ 1054.389563][ T5205] bcm5974 1-1:0.105: could not read from device [ 1054.402054][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.453818][T20158] udevd[20158]: Error opening device "/dev/input/event4": No such file or directory [ 1054.500541][T21217] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 1054.567042][T19256] Bluetooth: hci1: command tx timeout [ 1054.586598][T20158] udevd[20158]: Unable to EVIOCGABS device "/dev/input/event4" [ 1054.616188][T20158] udevd[20158]: Unable to EVIOCGABS device "/dev/input/event4" [ 1054.623885][T20158] udevd[20158]: Unable to EVIOCGABS device "/dev/input/event4" [ 1054.712436][T20158] udevd[20158]: Unable to EVIOCGABS device "/dev/input/event4" [ 1054.723866][T21221] FAULT_INJECTION: forcing a failure. [ 1054.723866][T21221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.752591][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.765477][T21221] CPU: 1 UID: 0 PID: 21221 Comm: syz.8.4281 Not tainted syzkaller #0 PREEMPT(full) [ 1054.765505][T21221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1054.765519][T21221] Call Trace: [ 1054.765525][T21221] [ 1054.765530][T21221] dump_stack_lvl+0x16c/0x1f0 [ 1054.765558][T21221] should_fail_ex+0x512/0x640 [ 1054.765584][T21221] _copy_from_user+0x2e/0xd0 [ 1054.765609][T21221] bpf_test_init.isra.0+0xe2/0x140 [ 1054.765632][T21221] bpf_prog_test_run_skb+0x245/0x2280 [ 1054.765654][T21221] ? __fget_files+0x204/0x3c0 [ 1054.765677][T21221] ? __fget_files+0x20e/0x3c0 [ 1054.765697][T21221] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1054.765722][T21221] ? fput+0x9b/0xd0 [ 1054.765747][T21221] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1054.765770][T21221] __sys_bpf+0x1050/0x4de0 [ 1054.765797][T21221] ? __pfx___sys_bpf+0x10/0x10 [ 1054.765820][T21221] ? ksys_write+0x190/0x250 [ 1054.765842][T21221] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1054.765879][T21221] ? fput+0x9b/0xd0 [ 1054.765902][T21221] ? ksys_write+0x1ac/0x250 [ 1054.765918][T21221] ? __pfx_ksys_write+0x10/0x10 [ 1054.765938][T21221] __x64_sys_bpf+0x78/0xc0 [ 1054.765959][T21221] ? lockdep_hardirqs_on+0x7c/0x110 [ 1054.765982][T21221] do_syscall_64+0xcd/0x4e0 [ 1054.766006][T21221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.766024][T21221] RIP: 0033:0x7fa0ead8eba9 [ 1054.766040][T21221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.766057][T21221] RSP: 002b:00007fa0e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1054.766075][T21221] RAX: ffffffffffffffda RBX: 00007fa0eafd5fa0 RCX: 00007fa0ead8eba9 [ 1054.766087][T21221] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1054.766098][T21221] RBP: 00007fa0e8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.766115][T21221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.766126][T21221] R13: 00007fa0eafd6038 R14: 00007fa0eafd5fa0 R15: 00007ffdc8ea2ab8 [ 1054.766150][T21221] [ 1054.783986][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.035580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.087909][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.125228][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.762307][ T30] audit: type=1400 audit(2000000230.912:885): avc: denied { write } for pid=21239 comm="syz.0.4288" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1055.786138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1055.996566][ T5923] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 1056.085540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.159972][ T5923] usb 1-1: device descriptor read/64, error -71 [ 1056.251848][T21252] FAULT_INJECTION: forcing a failure. [ 1056.251848][T21252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.291315][T21252] CPU: 1 UID: 0 PID: 21252 Comm: syz.6.4289 Not tainted syzkaller #0 PREEMPT(full) [ 1056.291346][T21252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1056.291357][T21252] Call Trace: [ 1056.291364][T21252] [ 1056.291372][T21252] dump_stack_lvl+0x16c/0x1f0 [ 1056.291402][T21252] should_fail_ex+0x512/0x640 [ 1056.291431][T21252] _copy_to_user+0x32/0xd0 [ 1056.291461][T21252] simple_read_from_buffer+0xcb/0x170 [ 1056.291484][T21252] proc_fail_nth_read+0x197/0x240 [ 1056.291507][T21252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1056.291531][T21252] ? rw_verify_area+0xcf/0x6c0 [ 1056.291559][T21252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1056.291580][T21252] vfs_read+0x1e4/0xcf0 [ 1056.291602][T21252] ? __pfx___mutex_lock+0x10/0x10 [ 1056.291626][T21252] ? __pfx_vfs_read+0x10/0x10 [ 1056.291652][T21252] ? __fget_files+0x20e/0x3c0 [ 1056.291680][T21252] ksys_read+0x12a/0x250 [ 1056.291699][T21252] ? __pfx_ksys_read+0x10/0x10 [ 1056.291725][T21252] do_syscall_64+0xcd/0x4e0 [ 1056.291751][T21252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.291770][T21252] RIP: 0033:0x7f54d998d5bc [ 1056.291786][T21252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1056.291803][T21252] RSP: 002b:00007f54da887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1056.291827][T21252] RAX: ffffffffffffffda RBX: 00007f54d9bd5fa0 RCX: 00007f54d998d5bc [ 1056.291840][T21252] RDX: 000000000000000f RSI: 00007f54da8870a0 RDI: 0000000000000004 [ 1056.291851][T21252] RBP: 00007f54da887090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.291861][T21252] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1056.291873][T21252] R13: 00007f54d9bd6038 R14: 00007f54d9bd5fa0 R15: 00007ffd04c9ee78 [ 1056.291898][T21252] [ 1056.473912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.566651][ T5923] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 1056.670038][T21262] FAULT_INJECTION: forcing a failure. [ 1056.670038][T21262] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.716461][ T5923] usb 1-1: device descriptor read/64, error -71 [ 1056.725637][T21262] CPU: 1 UID: 0 PID: 21262 Comm: syz.8.4290 Not tainted syzkaller #0 PREEMPT(full) [ 1056.725666][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1056.725677][T21262] Call Trace: [ 1056.725684][T21262] [ 1056.725691][T21262] dump_stack_lvl+0x16c/0x1f0 [ 1056.725720][T21262] should_fail_ex+0x512/0x640 [ 1056.725744][T21262] ? fs_reclaim_acquire+0xae/0x150 [ 1056.725770][T21262] ? tomoyo_encode2+0x100/0x3e0 [ 1056.725795][T21262] should_failslab+0xc2/0x120 [ 1056.725816][T21262] __kmalloc_noprof+0xd2/0x510 [ 1056.725841][T21262] tomoyo_encode2+0x100/0x3e0 [ 1056.725871][T21262] tomoyo_unix_entry+0x341/0x650 [ 1056.725899][T21262] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 1056.725923][T21262] ? __lock_acquire+0x62e/0x1ce0 [ 1056.725962][T21262] ? __lock_acquire+0xb97/0x1ce0 [ 1056.725994][T21262] tomoyo_socket_sendmsg_permission+0x352/0x3c0 [ 1056.726023][T21262] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1056.726050][T21262] ? __might_fault+0xe3/0x190 [ 1056.726075][T21262] ? iovec_from_user+0xbb/0x140 [ 1056.726105][T21262] ? __import_iovec+0x1dd/0x650 [ 1056.726136][T21262] security_socket_sendmsg+0x211/0x240 [ 1056.726162][T21262] ____sys_sendmsg+0x2f2/0xc70 [ 1056.726192][T21262] ? copy_msghdr_from_user+0x10a/0x160 [ 1056.726216][T21262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1056.726248][T21262] ? __pfx__kstrtoull+0x10/0x10 [ 1056.726274][T21262] ___sys_sendmsg+0x134/0x1d0 [ 1056.726299][T21262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1056.726334][T21262] ? find_held_lock+0x2b/0x80 [ 1056.726374][T21262] __sys_sendmmsg+0x200/0x420 [ 1056.726401][T21262] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1056.726432][T21262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1056.726468][T21262] ? fput+0x9b/0xd0 [ 1056.726492][T21262] ? ksys_write+0x1ac/0x250 [ 1056.726510][T21262] ? __pfx_ksys_write+0x10/0x10 [ 1056.726534][T21262] __x64_sys_sendmmsg+0x9c/0x100 [ 1056.726556][T21262] ? lockdep_hardirqs_on+0x7c/0x110 [ 1056.726578][T21262] do_syscall_64+0xcd/0x4e0 [ 1056.726603][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.726622][T21262] RIP: 0033:0x7fa0ead8eba9 [ 1056.726638][T21262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.726654][T21262] RSP: 002b:00007fa0e8fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1056.726672][T21262] RAX: ffffffffffffffda RBX: 00007fa0eafd6090 RCX: 00007fa0ead8eba9 [ 1056.726684][T21262] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1056.726695][T21262] RBP: 00007fa0e8fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.726705][T21262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.726716][T21262] R13: 00007fa0eafd6128 R14: 00007fa0eafd6090 R15: 00007ffdc8ea2ab8 [ 1056.726741][T21262] [ 1057.005862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.115464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.141748][ T5923] usb usb1-port1: attempt power cycle [ 1057.199565][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.211863][T15774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.255245][ T30] audit: type=1400 audit(2000000232.403:886): avc: denied { create } for pid=21266 comm="syz.2.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1057.296623][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.309988][ T30] audit: type=1400 audit(2000000232.463:887): avc: denied { write } for pid=21266 comm="syz.2.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1057.310266][T21267] netlink: 'syz.2.4294': attribute type 1 has an invalid length. [ 1057.330245][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.370801][T21269] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000 [ 1057.407394][T21269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1057.446384][T21267] sctp: [Deprecated]: syz.2.4294 (pid 21267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1057.446384][T21267] Use struct sctp_sack_info instead [ 1057.447976][T21269] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1057.495482][ T5923] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 1057.502201][T21272] FAULT_INJECTION: forcing a failure. [ 1057.502201][T21272] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.516474][T21272] CPU: 0 UID: 0 PID: 21272 Comm: syz.6.4295 Not tainted syzkaller #0 PREEMPT(full) [ 1057.516499][T21272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1057.516509][T21272] Call Trace: [ 1057.516516][T21272] [ 1057.516522][T21272] dump_stack_lvl+0x16c/0x1f0 [ 1057.516549][T21272] should_fail_ex+0x512/0x640 [ 1057.516572][T21272] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1057.516593][T21272] should_failslab+0xc2/0x120 [ 1057.516614][T21272] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1057.516632][T21272] ? getname_flags.part.0+0x4c/0x550 [ 1057.516662][T21272] getname_flags.part.0+0x4c/0x550 [ 1057.516690][T21272] getname_flags+0x93/0xf0 [ 1057.516707][T21272] __x64_sys_linkat+0xd8/0x130 [ 1057.516730][T21272] do_syscall_64+0xcd/0x4e0 [ 1057.516755][T21272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.516770][T21272] RIP: 0033:0x7f54d998eba9 [ 1057.516787][T21272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.516802][T21272] RSP: 002b:00007f54da887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 1057.516821][T21272] RAX: ffffffffffffffda RBX: 00007f54d9bd5fa0 RCX: 00007f54d998eba9 [ 1057.516833][T21272] RDX: ffffffffffffff9c RSI: 0000200000000500 RDI: ffffffffffffff9c [ 1057.516845][T21272] RBP: 00007f54da887090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.516856][T21272] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 1057.516867][T21272] R13: 00007f54d9bd6038 R14: 00007f54d9bd5fa0 R15: 00007ffd04c9ee78 [ 1057.516891][T21272] [ 1057.685080][ T5923] usb 1-1: device descriptor read/8, error -71 [ 1057.892635][ T30] audit: type=1326 audit(2000000233.043:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.2.4298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf8cb8eba9 code=0x0 [ 1057.895886][T21280] FAULT_INJECTION: forcing a failure. [ 1057.895886][T21280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.915424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.940953][T21280] CPU: 0 UID: 0 PID: 21280 Comm: syz.8.4297 Not tainted syzkaller #0 PREEMPT(full) [ 1057.940979][T21280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1057.940989][T21280] Call Trace: [ 1057.940996][T21280] [ 1057.941003][T21280] dump_stack_lvl+0x16c/0x1f0 [ 1057.941037][T21280] should_fail_ex+0x512/0x640 [ 1057.941063][T21280] _copy_from_user+0x2e/0xd0 [ 1057.941088][T21280] bpf_test_init.isra.0+0xe2/0x140 [ 1057.941110][T21280] bpf_prog_test_run_skb+0x245/0x2280 [ 1057.941139][T21280] ? __fget_files+0x204/0x3c0 [ 1057.941164][T21280] ? __fget_files+0x20e/0x3c0 [ 1057.941183][T21280] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1057.941209][T21280] ? fput+0x9b/0xd0 [ 1057.941234][T21280] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1057.941257][T21280] __sys_bpf+0x1050/0x4de0 [ 1057.941285][T21280] ? __pfx___sys_bpf+0x10/0x10 [ 1057.941308][T21280] ? ksys_write+0x190/0x250 [ 1057.941331][T21280] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1057.941369][T21280] ? fput+0x9b/0xd0 [ 1057.941392][T21280] ? ksys_write+0x1ac/0x250 [ 1057.941409][T21280] ? __pfx_ksys_write+0x10/0x10 [ 1057.941431][T21280] __x64_sys_bpf+0x78/0xc0 [ 1057.941455][T21280] ? lockdep_hardirqs_on+0x7c/0x110 [ 1057.941478][T21280] do_syscall_64+0xcd/0x4e0 [ 1057.941503][T21280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.941521][T21280] RIP: 0033:0x7fa0ead8eba9 [ 1057.941535][T21280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.941552][T21280] RSP: 002b:00007fa0e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1057.941569][T21280] RAX: ffffffffffffffda RBX: 00007fa0eafd5fa0 RCX: 00007fa0ead8eba9 [ 1057.941581][T21280] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1057.941592][T21280] RBP: 00007fa0e8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.941602][T21280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.941613][T21280] R13: 00007fa0eafd6038 R14: 00007fa0eafd5fa0 R15: 00007ffdc8ea2ab8 [ 1057.941637][T21280] [ 1058.148248][ T5923] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1058.155833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.209315][ T5923] usb 1-1: device descriptor read/8, error -71 [ 1058.236017][T21287] FAULT_INJECTION: forcing a failure. [ 1058.236017][T21287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.343008][T21287] CPU: 0 UID: 0 PID: 21287 Comm: syz.7.4300 Not tainted syzkaller #0 PREEMPT(full) [ 1058.343032][ T5923] usb usb1-port1: unable to enumerate USB device [ 1058.343035][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1058.343048][T21287] Call Trace: [ 1058.343054][T21287] [ 1058.343062][T21287] dump_stack_lvl+0x16c/0x1f0 [ 1058.343087][T21287] should_fail_ex+0x512/0x640 [ 1058.343116][T21287] _copy_to_user+0x32/0xd0 [ 1058.343142][T21287] simple_read_from_buffer+0xcb/0x170 [ 1058.343161][T21287] proc_fail_nth_read+0x197/0x240 [ 1058.343180][T21287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.343200][T21287] ? rw_verify_area+0xcf/0x6c0 [ 1058.343223][T21287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.343241][T21287] vfs_read+0x1e4/0xcf0 [ 1058.343261][T21287] ? __pfx___mutex_lock+0x10/0x10 [ 1058.343281][T21287] ? __pfx_vfs_read+0x10/0x10 [ 1058.343304][T21287] ? __fget_files+0x20e/0x3c0 [ 1058.343328][T21287] ksys_read+0x12a/0x250 [ 1058.343343][T21287] ? __pfx_ksys_read+0x10/0x10 [ 1058.343365][T21287] do_syscall_64+0xcd/0x4e0 [ 1058.343388][T21287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.343404][T21287] RIP: 0033:0x7f67f898d5bc [ 1058.343418][T21287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1058.343432][T21287] RSP: 002b:00007f67f9783030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1058.343447][T21287] RAX: ffffffffffffffda RBX: 00007f67f8bd5fa0 RCX: 00007f67f898d5bc [ 1058.343458][T21287] RDX: 000000000000000f RSI: 00007f67f97830a0 RDI: 0000000000000005 [ 1058.343467][T21287] RBP: 00007f67f9783090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.343477][T21287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.343486][T21287] R13: 00007f67f8bd6038 R14: 00007f67f8bd5fa0 R15: 00007ffcc696a8e8 [ 1058.343507][T21287] [ 1058.661935][T21289] tipc: Enabled bearer , priority 0 [ 1059.205895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.214413][ T3018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.681599][T21307] trusted_key: encrypted_key: master key parameter '0' is invalid [ 1059.775405][ T5909] tipc: Node number set to 4100869812 [ 1060.235383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.610610][T21326] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1060.626483][ T30] audit: type=1400 audit(2000000235.773:889): avc: denied { mount } for pid=21288 comm="syz.6.4302" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1060.628765][ T30] audit: type=1400 audit(2000000235.783:890): avc: denied { remount } for pid=21288 comm="syz.6.4302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1060.676528][T21289] syzkaller0: entered promiscuous mode [ 1060.676554][T21289] syzkaller0: entered allmulticast mode [ 1060.677231][T21289] tipc: Resetting bearer [ 1060.729427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.972439][T21322] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1061.069446][T21322] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1061.275401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.291180][T21322] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1061.475377][T21288] tipc: Resetting bearer [ 1061.508034][T21322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1061.787840][T21322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1062.315170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.645329][T19256] Bluetooth: hci5: command 0x0c1a tx timeout [ 1062.677534][T21342] ucma_write: process 146 (syz.8.4315) changed security contexts after opening file descriptor, this is not allowed. [ 1062.885283][ T5967] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1062.900127][ T30] audit: type=1400 audit(2000000238.053:891): avc: denied { bind } for pid=21350 comm="syz.7.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1062.924872][T21351] FAULT_INJECTION: forcing a failure. [ 1062.924872][T21351] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.961370][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.963181][T21351] CPU: 0 UID: 0 PID: 21351 Comm: syz.7.4319 Not tainted syzkaller #0 PREEMPT(full) [ 1062.963202][T21351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1062.963213][T21351] Call Trace: [ 1062.963219][T21351] [ 1062.963226][T21351] dump_stack_lvl+0x16c/0x1f0 [ 1062.963251][T21351] should_fail_ex+0x512/0x640 [ 1062.963273][T21351] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1062.963293][T21351] should_failslab+0xc2/0x120 [ 1062.963311][T21351] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1062.963327][T21351] ? __alloc_skb+0x2b2/0x380 [ 1062.963349][T21351] __alloc_skb+0x2b2/0x380 [ 1062.963366][T21351] ? __pfx___alloc_skb+0x10/0x10 [ 1062.963391][T21351] alloc_skb_with_frags+0xe0/0x860 [ 1062.963412][T21351] ? __might_fault+0xe3/0x190 [ 1062.963428][T21351] ? __might_fault+0x13b/0x190 [ 1062.963446][T21351] sock_alloc_send_pskb+0x7fb/0x990 [ 1062.963464][T21351] ? _copy_from_iter+0x15d/0x1720 [ 1062.963492][T21351] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1062.963510][T21351] ? find_held_lock+0x2b/0x80 [ 1062.963531][T21351] ? packet_cached_dev_get+0x14b/0x320 [ 1062.963554][T21351] packet_sendmsg+0x2054/0x5850 [ 1062.963579][T21351] ? kernel_text_address+0x8d/0x100 [ 1062.963602][T21351] ? sock_has_perm+0x259/0x2f0 [ 1062.963622][T21351] ? __pfx_sock_has_perm+0x10/0x10 [ 1062.963643][T21351] ? __pfx_packet_sendmsg+0x10/0x10 [ 1062.963672][T21351] ____sys_sendmsg+0xa95/0xc70 [ 1062.963696][T21351] ? copy_msghdr_from_user+0x10a/0x160 [ 1062.963715][T21351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.963767][T21351] ___sys_sendmsg+0x134/0x1d0 [ 1062.963788][T21351] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.963833][T21351] __sys_sendmsg+0x16d/0x220 [ 1062.963853][T21351] ? __pfx___sys_sendmsg+0x10/0x10 [ 1062.963886][T21351] do_syscall_64+0xcd/0x4e0 [ 1062.963908][T21351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.963925][T21351] RIP: 0033:0x7f67f898eba9 [ 1062.963939][T21351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.963954][T21351] RSP: 002b:00007f67f9783038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.963970][T21351] RAX: ffffffffffffffda RBX: 00007f67f8bd5fa0 RCX: 00007f67f898eba9 [ 1062.963981][T21351] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 1062.963990][T21351] RBP: 00007f67f9783090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.964000][T21351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.964009][T21351] R13: 00007f67f8bd6038 R14: 00007f67f8bd5fa0 R15: 00007ffcc696a8e8 [ 1062.964030][T21351] [ 1063.220101][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.228204][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.229932][T19256] Bluetooth: hci0: command 0x0c1a tx timeout [ 1063.315279][ T5967] usb 3-1: device descriptor read/64, error -71 [ 1063.355120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.358545][T19256] Bluetooth: hci1: command 0x0c1a tx timeout [ 1063.575236][ T5967] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1063.656715][T21363] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4322'. [ 1063.795268][ T5967] usb 3-1: device descriptor read/64, error -71 [ 1063.800568][T21365] loop6: detected capacity change from 0 to 63 [ 1063.818924][T20634] buffer_io_error: 663 callbacks suppressed [ 1063.818935][T20634] Buffer I/O error on dev loop6, logical block 0, async page read [ 1063.894882][T20634] Buffer I/O error on dev loop6, logical block 0, async page read [ 1063.929164][ T5967] usb usb3-port1: attempt power cycle [ 1063.935434][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 1063.972858][T21367] Buffer I/O error on dev loop6, logical block 0, async page read [ 1064.006801][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 1064.035481][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 1064.051036][T20634] Buffer I/O error on dev loop6, logical block 0, async page read [ 1064.061940][T20634] Buffer I/O error on dev loop6, logical block 0, async page read [ 1064.144156][T20634] Buffer I/O error on dev loop6, logical block 0, async page read [ 1064.160934][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 1064.295158][ T5967] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1064.316320][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.397605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.410471][ T5967] usb 3-1: device descriptor read/8, error -71 [ 1065.125059][ T5967] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1065.155761][ T5967] usb 3-1: device descriptor read/8, error -71 [ 1065.299713][ T5967] usb usb3-port1: unable to enumerate USB device [ 1065.435003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.484770][T19256] Bluetooth: hci1: command 0x0c1a tx timeout [ 1065.972944][T21381] overlayfs: failed to resolve './file0': -2 [ 1066.075615][ T5909] IPVS: starting estimator thread 0... [ 1066.099347][T21384] cgroup: release_agent respecified [ 1066.141380][ T30] audit: type=1400 audit(2000000241.283:892): avc: denied { listen } for pid=21386 comm="syz.0.4329" lport=39123 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1066.192106][ T30] audit: type=1400 audit(2000000241.333:893): avc: denied { accept } for pid=21386 comm="syz.0.4329" lport=39123 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1066.216596][T21385] IPVS: using max 44 ests per chain, 105600 per kthread [ 1066.230455][ T30] audit: type=1400 audit(2000000241.363:894): avc: denied { getopt } for pid=21386 comm="syz.0.4329" lport=39123 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1066.345012][T16019] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1066.474937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.514880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.523475][T19256] Bluetooth: hci1: command 0x0c1a tx timeout [ 1068.559680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.721917][ T3018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.731193][ T7047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.739342][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.795610][T21288] tipc: Disabling bearer [ 1068.958949][T21406] tipc: Started in network mode [ 1068.987920][T21406] tipc: Node identity , cluster identity 4711 [ 1068.997461][ T30] audit: type=1400 audit(2000000244.143:895): avc: denied { unmount } for pid=19254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1069.019866][T21406] tipc: Failed to obtain node identity [ 1069.026526][T21406] tipc: Enabling of bearer rejected, failed to enable media [ 1069.115704][T21414] kvm: apic: phys broadcast and lowest prio [ 1069.155395][T21420] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1069.425291][T21424] netlink: 'syz.6.4335': attribute type 10 has an invalid length. [ 1069.449293][T21424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.465946][T21424] bond0: (slave team0): Enslaving as an active interface with an up link [ 1069.594753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.808429][ T1347] bridge_slave_1: left allmulticast mode [ 1069.814102][ T1347] bridge_slave_1: left promiscuous mode [ 1069.840914][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.868054][ T1347] bridge_slave_0: left allmulticast mode [ 1069.896709][ T1347] bridge_slave_0: left promiscuous mode [ 1069.904048][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.996729][ T7047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.003898][T21432] fuse: Unknown parameter 'fowner<00000000000000000000' [ 1070.012445][ T30] audit: type=1400 audit(2000000245.153:896): avc: denied { mounton } for pid=21430 comm="syz.7.4339" path="/10/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1070.517550][T21441] FAULT_INJECTION: forcing a failure. [ 1070.517550][T21441] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.542618][T21441] CPU: 1 UID: 0 PID: 21441 Comm: syz.2.4343 Not tainted syzkaller #0 PREEMPT(full) [ 1070.542646][T21441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1070.542657][T21441] Call Trace: [ 1070.542663][T21441] [ 1070.542669][T21441] dump_stack_lvl+0x16c/0x1f0 [ 1070.542697][T21441] should_fail_ex+0x512/0x640 [ 1070.542719][T21441] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1070.542741][T21441] should_failslab+0xc2/0x120 [ 1070.542762][T21441] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1070.542779][T21441] ? alloc_empty_file+0x55/0x1e0 [ 1070.542806][T21441] alloc_empty_file+0x55/0x1e0 [ 1070.542831][T21441] path_openat+0xda/0x2cb0 [ 1070.542849][T21441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.542875][T21441] ? __pfx_path_openat+0x10/0x10 [ 1070.542901][T21441] do_filp_open+0x20b/0x470 [ 1070.542923][T21441] ? __pfx_do_filp_open+0x10/0x10 [ 1070.542968][T21441] ? alloc_fd+0x471/0x7d0 [ 1070.542994][T21441] do_sys_openat2+0x11b/0x1d0 [ 1070.543019][T21441] ? __pfx_do_sys_openat2+0x10/0x10 [ 1070.543046][T21441] ? __fget_files+0x20e/0x3c0 [ 1070.543070][T21441] __x64_sys_openat+0x174/0x210 [ 1070.543094][T21441] ? __pfx___x64_sys_openat+0x10/0x10 [ 1070.543115][T21441] ? ksys_write+0x1ac/0x250 [ 1070.543141][T21441] do_syscall_64+0xcd/0x4e0 [ 1070.543168][T21441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.543185][T21441] RIP: 0033:0x7fcf8cb8d510 [ 1070.543201][T21441] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1070.543218][T21441] RSP: 002b:00007fcf8dab1f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1070.543236][T21441] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcf8cb8d510 [ 1070.543248][T21441] RDX: 0000000000000002 RSI: 00007fcf8dab1fa0 RDI: 00000000ffffff9c [ 1070.543260][T21441] RBP: 00007fcf8dab1fa0 R08: 0000000000000000 R09: 00007fcf8dab1cd5 [ 1070.543271][T21441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1070.543281][T21441] R13: 00007fcf8cdd6038 R14: 00007fcf8cdd5fa0 R15: 00007ffdb3324de8 [ 1070.543305][T21441] [ 1070.748997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.882022][T21451] FAULT_INJECTION: forcing a failure. [ 1070.882022][T21451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.895452][T21451] CPU: 1 UID: 0 PID: 21451 Comm: syz.8.4346 Not tainted syzkaller #0 PREEMPT(full) [ 1070.895478][T21451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1070.895489][T21451] Call Trace: [ 1070.895496][T21451] [ 1070.895503][T21451] dump_stack_lvl+0x16c/0x1f0 [ 1070.895531][T21451] should_fail_ex+0x512/0x640 [ 1070.895557][T21451] _copy_from_user+0x2e/0xd0 [ 1070.895585][T21451] scsi_cdrom_send_packet+0x185/0x640 [ 1070.895608][T21451] ? __pfx_scsi_cdrom_send_packet+0x10/0x10 [ 1070.895640][T21451] ? avc_has_extended_perms+0x47c/0x1090 [ 1070.895666][T21451] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1070.895701][T21451] scsi_ioctl+0x145/0x18b0 [ 1070.895720][T21451] ? __pfx___might_resched+0x10/0x10 [ 1070.895744][T21451] ? __pfx_scsi_ioctl+0x10/0x10 [ 1070.895767][T21451] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 1070.895805][T21451] sg_ioctl+0xb98/0x2880 [ 1070.895826][T21451] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1070.895856][T21451] ? __pfx_sg_ioctl+0x10/0x10 [ 1070.895874][T21451] ? hook_file_ioctl_common+0x145/0x410 [ 1070.895900][T21451] ? selinux_file_ioctl+0x180/0x270 [ 1070.895923][T21451] ? selinux_file_ioctl+0xb4/0x270 [ 1070.895948][T21451] ? __pfx_sg_ioctl+0x10/0x10 [ 1070.895967][T21451] __x64_sys_ioctl+0x18b/0x210 [ 1070.895996][T21451] do_syscall_64+0xcd/0x4e0 [ 1070.896022][T21451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.896041][T21451] RIP: 0033:0x7fa0ead8eba9 [ 1070.896056][T21451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.896073][T21451] RSP: 002b:00007fa0e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.896091][T21451] RAX: ffffffffffffffda RBX: 00007fa0eafd5fa0 RCX: 00007fa0ead8eba9 [ 1070.896104][T21451] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 1070.896115][T21451] RBP: 00007fa0e8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.896126][T21451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.896137][T21451] R13: 00007fa0eafd6038 R14: 00007fa0eafd5fa0 R15: 00007ffdc8ea2ab8 [ 1070.896161][T21451] [ 1070.920310][T21449] ================================================================== [ 1071.122136][T21449] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.130714][T21449] Write of size 5120 at addr ffffc90000b1e000 by task vivid-000-vid-c/21449 [ 1071.139360][T21449] [ 1071.141666][T21449] CPU: 0 UID: 0 PID: 21449 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 1071.141684][T21449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1071.141693][T21449] Call Trace: [ 1071.141699][T21449] [ 1071.141705][T21449] dump_stack_lvl+0x116/0x1f0 [ 1071.141726][T21449] print_report+0xcd/0x630 [ 1071.141742][T21449] ? __virt_addr_valid+0x81/0x610 [ 1071.141764][T21449] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.141782][T21449] kasan_report+0xe0/0x110 [ 1071.141798][T21449] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.141819][T21449] kasan_check_range+0x100/0x1b0 [ 1071.141838][T21449] __asan_memcpy+0x3c/0x60 [ 1071.141860][T21449] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.141890][T21449] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 1071.141913][T21449] vivid_fillbuff+0x8d2/0x4250 [ 1071.141937][T21449] ? stack_trace_save+0x8e/0xc0 [ 1071.141957][T21449] ? __pfx_stack_trace_save+0x10/0x10 [ 1071.141985][T21449] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1071.142011][T21449] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 1071.142035][T21449] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.142054][T21449] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1071.142072][T21449] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1071.142093][T21449] vivid_thread_vid_cap+0x454/0xda0 [ 1071.142113][T21449] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1071.142132][T21449] ? do_raw_spin_lock+0x12c/0x2b0 [ 1071.142149][T21449] ? find_held_lock+0x2b/0x80 [ 1071.142167][T21449] ? rcu_is_watching+0x12/0xc0 [ 1071.142185][T21449] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1071.142202][T21449] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.142220][T21449] ? __kthread_parkme+0x19e/0x250 [ 1071.142242][T21449] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1071.142260][T21449] kthread+0x3c2/0x780 [ 1071.142274][T21449] ? __pfx_kthread+0x10/0x10 [ 1071.142289][T21449] ? rcu_is_watching+0x12/0xc0 [ 1071.142306][T21449] ? __pfx_kthread+0x10/0x10 [ 1071.142320][T21449] ret_from_fork+0x56a/0x730 [ 1071.142334][T21449] ? __pfx_kthread+0x10/0x10 [ 1071.142348][T21449] ret_from_fork_asm+0x1a/0x30 [ 1071.142371][T21449] [ 1071.142376][T21449] [ 1071.344453][T21449] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc90000b1e000 allocated at vb2_vmalloc_alloc+0x135/0x3f0 [ 1071.357733][T21449] The buggy address belongs to the physical page: [ 1071.364117][T21449] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880645c7dc0 pfn:0x645c7 [ 1071.374152][T21449] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1071.381244][T21449] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1071.389819][T21449] raw: ffff8880645c7dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 1071.398463][T21449] page dumped because: kasan: bad access detected [ 1071.404848][T21449] page_owner tracks the page as allocated [ 1071.410537][T21449] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 21447, tgid 21446 (syz.2.4344), ts 1070830608077, free_ts 1070830582872 [ 1071.430046][T21449] post_alloc_hook+0x1c0/0x230 [ 1071.434798][T21449] get_page_from_freelist+0x132b/0x38e0 [ 1071.440322][T21449] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1071.446193][T21449] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1071.451714][T21449] alloc_pages_bulk_mempolicy_noprof+0x244/0x1280 [ 1071.458112][T21449] __vmalloc_node_range_noprof+0x526/0x14b0 [ 1071.463987][T21449] vmalloc_user_noprof+0x9e/0xe0 [ 1071.468905][T21449] vb2_vmalloc_alloc+0x135/0x3f0 [ 1071.473831][T21449] __vb2_queue_alloc+0x8c9/0x1280 [ 1071.478840][T21449] vb2_core_reqbufs+0xa90/0xfe0 [ 1071.483671][T21449] __vb2_init_fileio+0x3f1/0x1100 [ 1071.488680][T21449] vb2_core_poll+0x5ec/0x700 [ 1071.493252][T21449] vb2_poll+0x33/0x150 [ 1071.497301][T21449] vb2_fop_poll+0x10f/0x2c0 [ 1071.501786][T21449] v4l2_poll+0x163/0x320 [ 1071.506005][T21449] do_sys_poll+0x559/0xdf0 [ 1071.510398][T21449] page last free pid 21447 tgid 21446 stack trace: [ 1071.516869][T21449] __free_frozen_pages+0x7d5/0x10f0 [ 1071.522051][T21449] kasan_populate_vmalloc+0x160/0x2d0 [ 1071.527401][T21449] alloc_vmap_area+0x960/0x29c0 [ 1071.532229][T21449] __get_vm_area_node+0x1ca/0x330 [ 1071.537233][T21449] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1071.543108][T21449] vmalloc_user_noprof+0x9e/0xe0 [ 1071.548025][T21449] vb2_vmalloc_alloc+0x135/0x3f0 [ 1071.552945][T21449] __vb2_queue_alloc+0x8c9/0x1280 [ 1071.557953][T21449] vb2_core_reqbufs+0xa90/0xfe0 [ 1071.562786][T21449] __vb2_init_fileio+0x3f1/0x1100 [ 1071.567794][T21449] vb2_core_poll+0x5ec/0x700 [ 1071.572369][T21449] vb2_poll+0x33/0x150 [ 1071.576419][T21449] vb2_fop_poll+0x10f/0x2c0 [ 1071.580906][T21449] v4l2_poll+0x163/0x320 [ 1071.585131][T21449] do_sys_poll+0x559/0xdf0 [ 1071.589538][T21449] __x64_sys_poll+0x1a6/0x450 [ 1071.594191][T21449] [ 1071.596488][T21449] Memory state around the buggy address: [ 1071.602090][T21449] ffffc90000b1ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.610127][T21449] ffffc90000b1ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.618163][T21449] >ffffc90000b1f000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1071.626197][T21449] ^ [ 1071.630237][T21449] ffffc90000b1f080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1071.638273][T21449] ffffc90000b1f100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1071.646308][T21449] ================================================================== [ 1071.716135][T21449] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1071.723356][T21449] CPU: 1 UID: 0 PID: 21449 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 1071.733144][T21449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1071.743180][T21449] Call Trace: [ 1071.746442][T21449] [ 1071.749353][T21449] dump_stack_lvl+0x3d/0x1f0 [ 1071.753933][T21449] vpanic+0x6e8/0x7a0 [ 1071.757904][T21449] ? __pfx_vpanic+0x10/0x10 [ 1071.762398][T21449] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.768012][T21449] panic+0xca/0xd0 [ 1071.771713][T21449] ? __pfx_panic+0x10/0x10 [ 1071.776108][T21449] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.781723][T21449] ? preempt_schedule_common+0x44/0xc0 [ 1071.787163][T21449] ? preempt_schedule_thunk+0x16/0x30 [ 1071.792520][T21449] ? check_panic_on_warn+0x1f/0xb0 [ 1071.797607][T21449] check_panic_on_warn+0xab/0xb0 [ 1071.802524][T21449] end_report+0x107/0x170 [ 1071.806833][T21449] kasan_report+0xee/0x110 [ 1071.811232][T21449] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.816848][T21449] kasan_check_range+0x100/0x1b0 [ 1071.821767][T21449] __asan_memcpy+0x3c/0x60 [ 1071.826171][T21449] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1071.831627][T21449] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 1071.837420][T21449] vivid_fillbuff+0x8d2/0x4250 [ 1071.842168][T21449] ? stack_trace_save+0x8e/0xc0 [ 1071.847003][T21449] ? __pfx_stack_trace_save+0x10/0x10 [ 1071.852366][T21449] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1071.857556][T21449] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 1071.863176][T21449] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.868359][T21449] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1071.874233][T21449] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1071.879937][T21449] vivid_thread_vid_cap+0x454/0xda0 [ 1071.885121][T21449] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1071.890821][T21449] ? do_raw_spin_lock+0x12c/0x2b0 [ 1071.895842][T21449] ? find_held_lock+0x2b/0x80 [ 1071.900503][T21449] ? rcu_is_watching+0x12/0xc0 [ 1071.905248][T21449] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1071.911034][T21449] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.916226][T21449] ? __kthread_parkme+0x19e/0x250 [ 1071.921262][T21449] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1071.926986][T21449] kthread+0x3c2/0x780 [ 1071.931043][T21449] ? __pfx_kthread+0x10/0x10 [ 1071.935610][T21449] ? rcu_is_watching+0x12/0xc0 [ 1071.940357][T21449] ? __pfx_kthread+0x10/0x10 [ 1071.944924][T21449] ret_from_fork+0x56a/0x730 [ 1071.949492][T21449] ? __pfx_kthread+0x10/0x10 [ 1071.954060][T21449] ret_from_fork_asm+0x1a/0x30 [ 1071.958808][T21449] [ 1071.962015][T21449] Kernel Offset: disabled [ 1071.966313][T21449] Rebooting in 86400 seconds..