last executing test programs: 8m3.420205755s ago: executing program 2 (id=288): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x23, 0x3, 0x1c, 0x20ec, 0x0, 0x2, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x10031, 0xffffffffffffffff, 0xe51d7000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}}, 0x801) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, 0x0}], 0x1, 0x40804) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r7, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) 8m0.052773848s ago: executing program 2 (id=299): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB="fcffffff00"/15, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x86b0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r4, 0x800000000000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) unshare(0x2c020400) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000004000000000000100000006000800ac1e000108000700e000000105000100000000000800020005000000cea72031c6d58d402c888cdd93ccc8ed39780587619cfdb97411baa1f4f59f9f3a26fb"], 0x34}}, 0x0) 7m58.892110964s ago: executing program 2 (id=301): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x8100) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x3) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) timerfd_create(0x9, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x58, 0x0, 0x303, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @random='oq5[xT'}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="3868c1b73444d7a7fff5e662bcbb78ff2b827dfa50213bf4"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x120, 0x0, 0x87}, {@in=@empty, 0x0, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0xfffffffffffffff}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 7m57.589392484s ago: executing program 2 (id=306): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x300) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000001400)=""/4108, 0x100c, 0x7) 7m56.828594364s ago: executing program 2 (id=307): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001dfc27bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280080003f6580200"], 0x3c}}, 0x24008080) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x81000007) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x3, 0xf0, 0xffffffffffffffff, &(0x7f00000002c0)='!', 0x1, 0x84, 0x0, 0x0, r4}]) dup3(r7, r5, 0x80000) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c1890e674dc71", @ANYRESHEX=r10, @ANYBLOB=',k']) 7m55.836575758s ago: executing program 2 (id=310): r0 = syz_open_dev$vim2m(&(0x7f0000000c80), 0xea, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000f00)={0x8a2a, 0x41564e57, 0x1, @stepwise={0x0, 0x40, 0xffffffff, 0xfffffffe, 0x3, 0x7fff}}) 7m55.429362425s ago: executing program 32 (id=310): r0 = syz_open_dev$vim2m(&(0x7f0000000c80), 0xea, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000f00)={0x8a2a, 0x41564e57, 0x1, @stepwise={0x0, 0x40, 0xffffffff, 0xfffffffe, 0x3, 0x7fff}}) 6m53.440635093s ago: executing program 4 (id=516): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0xffffffffffffff67, &(0x7f00000000c0)="b9ff0300600d698cff9614f086dd", 0x0, 0x8000e02, 0x60000000, 0xfffffffffffffe1d, 0x34, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x9b}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x9b}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000030101010000000000000000000000ecb8f7b8bf32e49299e67ea117fbfc91afea63a2a9"], 0x14}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000080), &(0x7f00000002c0)=@sha1={0x1, "bddc432b105780c0f278168c8a718aa6b042e04c"}, 0x15, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000002c0)={@loopback}, 0x14) (async) setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000002c0)={@loopback}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000180)=""/73, 0x49, 0x0) (async) pread64(r9, &(0x7f0000000180)=""/73, 0x49, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x560, 0x0, 0x1}]}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 6m52.867057194s ago: executing program 1 (id=521): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x20004011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0x8}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x400, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004071}, 0x800) r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffff8ad, 0x30313953, 0x1, @discrete={0xd, 0x10000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 6m52.784430705s ago: executing program 3 (id=522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844babeb89e14f04305", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="b9", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r4, 0xcb}, 0x8) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r5 = signalfd4(r0, &(0x7f00000000c0)={[0x7]}, 0x8, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x4222, 0x10001]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x37f8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1000}, 0x800) 6m52.742526251s ago: executing program 1 (id=523): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34cc"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d04001c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a5401300001d2300000009"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc", 0x3, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m52.257898188s ago: executing program 1 (id=525): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) 6m52.225240077s ago: executing program 4 (id=526): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (fail_nth: 23) chdir(&(0x7f0000000940)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2800200000a95c, 0xfffffffffffffffe, 0x4000000201, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x800000df}) 6m51.856682863s ago: executing program 4 (id=527): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}, {0x11c, 0xf, 0x9e, 0xffffffff}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000340), 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) accept4$unix(r8, 0x0, 0x0, 0x80800) 6m51.811468471s ago: executing program 3 (id=528): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x64, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x4, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "26a7c4"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0xfffffff6, 0x783, 0x1b4, 0x8}, [@call_mgmt={0x5}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x4, 0x9, 0x1, 0xff, 0xa5}, 0x117, &(0x7f0000000540)={0x5, 0xf, 0x117, 0x4, [@generic={0xb0, 0x10, 0xa, "4d08cb26dd35a1fe57721bb76a762a31e069498a2cc66fe066a585927939f3a7fdbd63e74fced3a4b1a115411abce124803d66e404b02ca487a7b661236d00ccac48301b337de04264365505c716ad8b155e863a2fc5d1a4c2312a606a1d83274914a548b8bbfa5ae672a6d71c1fa458f1e935adacbe55f65a67abe2efc084ab15e8b6b48ee13949d64aa34533fa1e33997482904ed2717a47bd6bfa954789e3d6c61a43fcc56269421ac42ab4"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xa, 0xf00, 0x7f, [0x3f30]}, @generic={0x48, 0x10, 0x2, "02b5d12db08513f0c141cb4289d989f607be7b3433a24271ce2e6a7fa328da6247ffb958a9442a5fb0f8db9d5456e83f97e47a5e7796e0c4d1c7d4ece708d3c7fa8f08105d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x78, 0x0, 0x9}]}, 0x1, [{0xeb, &(0x7f0000000680)=@string={0xeb, 0x3, "2eb1235c11b4ed31a3c481f4b37bc6eb727745d127493d88772926531c978173edfcf5b401c9a0520274a4354edaffa425e9b6b3208eeaa43383fbef5f7f1bbac9dda280ce7b9853851d4afdd24c80100dedaacf8ae52439d4257f629034b1a8bb2e736d10325c20ecd7973640e3db67df8ad1386b0e2896e110504c55b2e6fd24f32899cff33b251a77dad75c08861208149e8815cd7cffcf10ea08b79db53fbc317f2e87b08422111d7b1c85eeaf797092e68b48b4756ee0ac4819cfae0e60e7fafcd308691ed3e4ae3307373e0ca0551e7477c81b4fdaeec3dbc77be297b32367ccaaa273a73ba2"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x4, 0xf9, {0xf9, 0x31, "fc2032db6f7fe2e1945f79a66c50943a5e7a720ada445797c196e0350a8cb0711906b4af68112d788bdb3f301a4a4a0c49c3ceac5cf0cdd4cbb99750cc322202291d730f203761bb1280ee7e0abae87fce7e3ac1541d1d70f42bbae8bdaa106db58435ec09e6d30d82f7aca3017a8431819e12dd9d0b56676d677d9ff04a6c5b78864c6943ea67f0ee58c33b7c9d74d4a3a37b11e685fa00bca2b685350a122d1665d3b7c4b66360b8187489283ba439f49ae562fdd08e95f60354b13dac8ad973ffdf35a1f3f37c1b774462e052fcc638b16e0143e3715dab237c7aaa2d3e55f18faca0026d4c5a95dae6aec9530845a3af989aac18b4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000040)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0xc, "a7548e3b"}, @local=@item_012={0x2, 0x2, 0x8, "14df"}, @global=@item_4={0x3, 0x1, 0x5, "a1ca29c0"}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x1, "a63efe6f"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2800, 0x3, 0x1, {0x22, 0x1b3}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x89, "7e91a9ab7e122e7dda59d462839bac620c3a590033cebf03c7f51f9e63ded02bed0b8b5a1ae769f7c7494e8b6591055729bc3e596150e10b5c81c5ecb2372d84081cfbac1b534e5809e4f1f8917dbf4c225b6ba992571a2751d481bbc59dd81f76dd0fac43059e691d18fa6a0189081d7bb7ad0696e15d85917e3398c1f9560d423e77a4354b51d3b5"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0x77, "f8c9437fe0ec0e244f4c8ac26162437b06057b28595b9ca30c7dbe489a341f27aab70c54f819d056af717f766228cbad6e3e8e92320350752f749476be6e50540b7c569e5cb82ee47714e198b9b4c2821cbe5d76ffd4c4eb3072a10f0dc2a6856421f136165669d5aba05c80e797071abdc3a702e38480"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0) 6m50.945441196s ago: executing program 4 (id=529): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) 6m50.442798783s ago: executing program 5 (id=530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="2c1c66b66a2529eb0f4bc57bc9331cf7c4c7950b924a11ab2c7de8691e6d39df4312355f48364f1ce832dbff96def9ee9ff330624801e6af80f9766e643b445c96179ddbd4a5c72da5244f205fb430d45865e61c5ab31c68a6be240a315954795ee6efe38c5a42b1389deeb9480ddbfb477c7bbad94f8cbb9071661c463da6810479588b53158f3716747ef01e63a1b56576d2748052f253ec2caaf364ac7a337e34e00e5d0500b8d3eee03644e874116343104b305d25ae7967aad4", 0xbc}, {&(0x7f0000000140)="9e64e74d3110f2f44897020914c2b4932fd95925fedf9e81e5ebd114f1e46df23ad3cda7fdd930ec66af85310c54b94c2c3c05893e8b1d4bd4b9430bde54da2f22a48054cbbf60f77f9707147d4a6e7757a0e5f40a512a6837c5c6525d58be3558d62230f4ab8997914459", 0x6b}, {&(0x7f00000001c0)="9f28f72dd5bd408cba4c264e8046a6884c0e22dd70fac9a19094151f", 0x1c}], 0x3, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x60}, 0x8010) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000340)={'bridge0\x00', @ifru_data=&(0x7f0000000300)="cd2ae794c1faaf0bbefe16ffec42e6f848d79b2b70e4b44508ea631d3913e6dd"}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000400)) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000440)={r1}) msgget$private(0x0, 0x50) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000480)={0x101ff, 0x4, 0x80a0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000004c0)={0x2, 0x4e21, @multicast2}, 0x10) r6 = syz_open_dev$vcsu(&(0x7f0000000500), 0xa, 0x4000) read$eventfd(r6, &(0x7f0000000540), 0x8) sendmsg$AUDIT_USER(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xec, 0x3ed, 0x800, 0x70bd2b, 0x25dfdbff, "6de7d0df11e0c3a4e96b7e0b50b43509c63374e893c705b627eb7f93d3afa300fc8f98a0965b2c2515ac24d633b52b1254c0e5c67fe5b9545d841bf7c287828f1aadb191c35d62063df43d77d8343dbffab9606ccce392b766681bb5f178aef186783d7364da9388a8d0bcae38bb5d9db5b6d790afa2833839d27331a8be1bebeefb2177b5c51820cc500c96f5bfa591891e76a9f9ec0d5fc1a7d91acae215318bf5b3014acc351cffb0e45df7a59e2f8e606dd233333f2d0d95a1a519182c6f6016b7b387b519655c4be19f0322f59f801687fb01899e8b777867e3", [""]}, 0xec}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000740)=0x10) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000780)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000800)={0x2}) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x400, 0x81) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xbc, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "8a5961b390647ea9e7c71b9cccb6c4d3959acb10d4fee3165d0423d551195a8a9ca2582d6fd0dced985eaad48d459b17a6211c26fd396bd9d8dc322c4e21f0a61a2cf9fdb2a1233ed981057a637f9def4e26d4fabe39e76879b31301a0b5074db76306d03ddb2972202bc123d623475e6de699ea5ec51518cbfae2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000a00)=0xc7, 0x4) syz_io_uring_setup(0x5d9, &(0x7f0000000a40)={0x0, 0x100e, 0x20000, 0x2, 0xb7, 0x0, r6}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000b40), 0x0, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000b80)={0x4, 0xcb, "67c6922996d3aabcc2f1af6e0dd8679833d5f91bdb819236aa8ceaf7502bccc06b98ed1fd187e2dcb8eda2e04d6be6a8112a57596434f9117eaa5e888441b32be488c962ab6ac185ca3aa3d5c9b961dadf9b7636bc52f42f3f72875fa76df0e2a68365a10e23176acc66d72f56ddd4d0e917b1b5e09a801d346bcda840c4798ff82dfc86d748c28dd0af319acdb9ffd324926b6ed8621ca512a984696fbbdc143f727adc1397638cec007a8225af6146977e2830cda23fb19231cbe2b7fd88266d14a88a4a8895ff077fea"}) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$usbfs(&(0x7f0000000d80), 0xef, 0x400080) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000dc0)={0x5, {0x7, 0x40000, 0x9, 0x64a}, {0x3, 0x0, 0x1, 0xffc0}, {0x8, 0x3}}) ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, &(0x7f0000000e00)={0x3, 0x6, 0x1}) 6m50.304471079s ago: executing program 5 (id=531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(0x0) socket$kcm(0x22, 0x2, 0x21) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r3, 0x18000000000002a0, 0x17, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f086dd0f13268b326d400ec6", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) sendmsg$netlink(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 6m50.061348988s ago: executing program 4 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000055c0)=[{{&(0x7f00000004c0)=@llc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000740)=""/131, 0x83}], 0x4, &(0x7f0000000800)=""/91, 0x5b}, 0xdc2a}, {{&(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000940)=""/47, 0x2f}, 0x400}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a00)=""/154, 0x9a}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000001000)=""/222, 0xde}, {&(0x7f0000001100)=""/122, 0x7a}], 0x3, &(0x7f0000001180)=""/48, 0x30}}, {{&(0x7f00000011c0)=@x25, 0x80, &(0x7f0000001380)=[{&(0x7f0000001240)=""/111, 0x6f}, {&(0x7f00000012c0)=""/40, 0x28}, {&(0x7f0000005980)=""/75, 0x4b}], 0x3, &(0x7f00000013c0)=""/67, 0x43}, 0x1ff}, {{&(0x7f0000001440)=@alg, 0x80, &(0x7f0000000900)=[{&(0x7f00000014c0)=""/224, 0xe0}, {&(0x7f00000015c0)=""/223, 0xdf}, {&(0x7f0000005800)=""/230, 0xe6}, {&(0x7f0000005900)=""/71, 0x47}], 0x4, &(0x7f0000001700)=""/51, 0x33}, 0x1}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001740)=""/78, 0x4e}, {&(0x7f00000017c0)=""/89, 0x59}, {&(0x7f0000001840)=""/57, 0x39}, {&(0x7f0000001880)=""/234, 0xea}, {&(0x7f0000001980)=""/207, 0xcf}, {&(0x7f0000001a80)=""/154, 0x9a}], 0x6, &(0x7f0000001bc0)=""/76, 0x4c}, 0xfa}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/124, 0x7c}, {&(0x7f0000002cc0)=""/238, 0xee}, {&(0x7f0000002dc0)=""/52, 0x34}, {&(0x7f0000002e00)=""/230, 0xe6}, {&(0x7f0000002f00)=""/239, 0xef}], 0x6, &(0x7f0000003080)=""/204, 0xcc}, 0x5}, {{&(0x7f0000003180)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000005440)=[{&(0x7f0000003200)=""/42, 0x2a}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/197, 0xc5}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/164, 0xa4}, {&(0x7f0000005400)=""/24, 0x18}], 0x6, &(0x7f00000054c0)=""/243, 0xf3}, 0x5f}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000005a00)={0xe, 0x0, [{0xc0010015}, {0x40000399, 0x0, 0x9}, {0x229, 0x0, 0x7}, {0xcd, 0x0, 0x2}, {0xb39, 0x0, 0xd}, {0x9ce, 0x0, 0x7fffffff}, {0xbc5, 0x0, 0x8}, {0x230, 0x0, 0x6}, {0x0, 0x0, 0x9}, {0xcd7, 0x0, 0x3}, {0x93d, 0x0, 0x64d}, {0x846, 0x0, 0x8000000000000000}, {0x182, 0x0, 0x40}, {0xbae, 0x0, 0x9}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e1f, 0x2dc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c) getpeername(r6, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0xd, 0x2, 0xcbf5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000080), &(0x7f0000000540)=r7}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m47.677076213s ago: executing program 3 (id=534): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x401, 0x3fffffff, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x4, 0xdb7, 0x6, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0xfe, '\x00', 0x4, 0x0, 0x7fffffff, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x947, 0xe, 0x3, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x3c, 0x3, 0x7, 0x100}}]}}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004811}, 0x40080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 6m47.421009744s ago: executing program 5 (id=535): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r2 = io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x206d33, 0x10000, 0x2, 0x5e}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x7000000) 6m44.579921606s ago: executing program 1 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) ptrace$peekuser(0x3, r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x40010000) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000240)={r0, 0x1, 0x6}) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f00000002c0)=0x1) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x1, 0x80000001) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) writev(0xffffffffffffffff, 0x0, 0x0) 6m44.072576515s ago: executing program 3 (id=538): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x3, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCSMRU(r6, 0x40047452, 0x0) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000004c0)={@local, r3}, 0x14) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r11, 0x11, 0x0, 0x0, @void, @value=r9}, 0x20) (async) r12 = syz_open_procfs$userns(0x0, &(0x7f0000000500)) setns(r12, 0x80) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 6m43.830227635s ago: executing program 5 (id=539): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x200000, 0x11, 0x33}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x4c, 0x7) read$msr(r3, &(0x7f0000019640)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3]) syz_open_procfs(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = gettid() setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) accept4$rose(r6, 0x0, 0x0, 0x800) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900090a010400000000000000000700200008000e40000000000900020073797a31000000000900010073797a300000000008005e010deaf4f6f2991205400000003f08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a0000000000"], 0xc0}}, 0x0) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000100)={0xd80000000000000, 0x1000, 0x6, 0x12, 0x1f}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 6m43.829682624s ago: executing program 3 (id=540): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x2500, 0xb, 0x20}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @broadcast}, &(0x7f0000000380)=0x10, 0x800) fcntl$addseals(r0, 0x409, 0x8) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400403a00ff0000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000800fc010000000000000000000000000000fc0100000000000000000000000000003a00"/122], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 6m43.144806467s ago: executing program 4 (id=541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendmsg(r0, 0x0, 0x854) listen(r0, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80044100, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) r6 = add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) keyctl$clear(0x7, r6) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 6m37.384848389s ago: executing program 5 (id=542): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x3, 0x200}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x40) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r3 = dup2(r2, r2) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) write$tun(r3, &(0x7f0000000180)=ANY=[], 0x46) 6m37.245011676s ago: executing program 3 (id=543): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)=0x7f) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff07000000000000000000008500000036000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = shmget(0x2, 0xc00000, 0x360, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_RMID(r6, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}, 0x0) dup2(r0, r1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 6m37.238303819s ago: executing program 1 (id=544): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_io_uring_setup(0x812, 0x0, &(0x7f0000000440), 0x0) r2 = syz_io_uring_setup(0x6d8a, &(0x7f0000000480)={0x0, 0x37b6, 0x10100, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r8, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r10 = accept(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) 6m35.431482411s ago: executing program 1 (id=546): keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e65932064656661756c7420747275737465643a73797a203030303030303030307b6a0e000000000000303300581d36ad722e7b31b59847b0e1f65a8e6dcc6633a5731914f5256e3b3b7a1c09dc49dfd3f741e381fbeda6c3b8e65938b8267f9de49ea060f2ac6df5b9bf228db233867ac707ac5d73ec19"], 0x2d, 0xfffffffffffffff9) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) io_uring_setup(0xf0c, &(0x7f000000c480)={0x0, 0xc46e, 0x8, 0x3, 0x3}) io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x1af}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6m35.425076423s ago: executing program 5 (id=547): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) (rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4000814) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0xa58f}, @cpuid={0x14, 0x18, {0x5, 0x98}}, @cpuid={0x14, 0x18, {0xaf, 0x2}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @wrmsr={0x1e, 0x20, {0x839, 0x2}}, @wrmsr={0x1e, 0x20, {0x867, 0x80}}, @rdmsr={0x32, 0x18, {0xdbd0d2665fe7fc6c}}, @rdmsr={0x32, 0x18, {0x22e}}, @rdmsr={0x32, 0x18, {0x8f7}}, @wr_crn={0x46, 0x20, {0x2}}, @code={0xa, 0x4d, {"42c3b9830500000f32b9d2080000b8789dfb9dba000000000f30264b0fc72ef2410f1c461766ba2100ed36420f017d1666ba6100ecc148f64e0f01cf"}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x56, {"66460f3a62ea03b927030000b89d000000ba000000000f300fc7373e66420f6970f20f00d6b8010000000f01d964640f01f8c4027d5894300088000066b807018ee00f2293"}}, @rdmsr={0x32, 0x18, {0xacf}}, @code={0xa, 0x72, {"c4c2c592045bc74424005b000000c74424020f280000ff1c24440f20c0350c000000440f22c048b8a000c0fe000000000f23c80f21f8350c0040000f23f866b8fb008ec06467430f01cb400f9db3000000800fdf54ac000f01c966b84e000f00d0"}}, @uexit={0x0, 0x18, 0x65b}, @rdmsr={0x32, 0x18, {0xa56}}, @code={0xa, 0x63, {"f047814c70fa00200000460f793b0f232d66b839000f00d0f08370da0c0f239f66baf80cb874102884ef66bafc0c66b8411c66ef660f38205e62f30fc7b10900000066baf80cb80eee0286ef66bafc0c66ed"}}, @cpuid={0x14, 0x18, {0x0, 0x47a3}}, @wr_crn={0x46, 0x20, {0x3, 0x80000000}}, @rdmsr={0x32, 0x18, {0x8da}}], 0x330}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000540)={0x2, 0x0, [{}, {}]}) (async) r4 = syz_open_dev$vbi(&(0x7f00000005c0), 0x1, 0x2) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000600)=0xbb) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '[%)\''}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async, rerun: 64) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000780)=0x176) (rerun: 64) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x361280, 0x0) ioctl$TUNSETGROUP(r7, 0x400454ce, 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x8) symlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0\x00') (async) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000980)) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f00000009c0)) (async) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r9, 0x10, 0x8000, 0x8001, 0x2, {{0x21, 0x4, 0x3, 0x7, 0x84, 0x67, 0x0, 0xb, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x12, 0xffffffffffffffff, [{0x7, 0xc, "dd3f7d8dbab9ddef6a2c"}]}, @timestamp={0x44, 0x24, 0x9d, 0x0, 0x4, [0x3b2b8529, 0x7, 0x2, 0x9, 0x3, 0x80000001, 0x3, 0x9]}, @end, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x8c, 0x3, 0x0, [{@rand_addr=0x64010101, 0x5}, {@local, 0x3}, {@multicast2, 0xfffff987}, {@remote, 0x9}, {@remote, 0xfffff2dd}]}, @timestamp={0x44, 0x8, 0x33, 0x0, 0x5, [0xfffffff7]}]}}}}}) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000c80)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000d40)={&(0x7f0000000bc0), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r10, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_LAPIC(r13, 0x8400ae8e, &(0x7f0000000d80)) (async) getpeername(r7, &(0x7f0000001180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001200)=0x80) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r14, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001280)=""/110, 0x6e}) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4014}, 0x20000005) 6m25.788723334s ago: executing program 33 (id=541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendmsg(r0, 0x0, 0x854) listen(r0, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80044100, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) r6 = add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) keyctl$clear(0x7, r6) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 6m17.845163175s ago: executing program 34 (id=546): keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e65932064656661756c7420747275737465643a73797a203030303030303030307b6a0e000000000000303300581d36ad722e7b31b59847b0e1f65a8e6dcc6633a5731914f5256e3b3b7a1c09dc49dfd3f741e381fbeda6c3b8e65938b8267f9de49ea060f2ac6df5b9bf228db233867ac707ac5d73ec19"], 0x2d, 0xfffffffffffffff9) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) io_uring_setup(0xf0c, &(0x7f000000c480)={0x0, 0xc46e, 0x8, 0x3, 0x3}) io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x1af}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6m17.403719181s ago: executing program 35 (id=547): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) (rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4000814) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0xa58f}, @cpuid={0x14, 0x18, {0x5, 0x98}}, @cpuid={0x14, 0x18, {0xaf, 0x2}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @wrmsr={0x1e, 0x20, {0x839, 0x2}}, @wrmsr={0x1e, 0x20, {0x867, 0x80}}, @rdmsr={0x32, 0x18, {0xdbd0d2665fe7fc6c}}, @rdmsr={0x32, 0x18, {0x22e}}, @rdmsr={0x32, 0x18, {0x8f7}}, @wr_crn={0x46, 0x20, {0x2}}, @code={0xa, 0x4d, {"42c3b9830500000f32b9d2080000b8789dfb9dba000000000f30264b0fc72ef2410f1c461766ba2100ed36420f017d1666ba6100ecc148f64e0f01cf"}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x56, {"66460f3a62ea03b927030000b89d000000ba000000000f300fc7373e66420f6970f20f00d6b8010000000f01d964640f01f8c4027d5894300088000066b807018ee00f2293"}}, @rdmsr={0x32, 0x18, {0xacf}}, @code={0xa, 0x72, {"c4c2c592045bc74424005b000000c74424020f280000ff1c24440f20c0350c000000440f22c048b8a000c0fe000000000f23c80f21f8350c0040000f23f866b8fb008ec06467430f01cb400f9db3000000800fdf54ac000f01c966b84e000f00d0"}}, @uexit={0x0, 0x18, 0x65b}, @rdmsr={0x32, 0x18, {0xa56}}, @code={0xa, 0x63, {"f047814c70fa00200000460f793b0f232d66b839000f00d0f08370da0c0f239f66baf80cb874102884ef66bafc0c66b8411c66ef660f38205e62f30fc7b10900000066baf80cb80eee0286ef66bafc0c66ed"}}, @cpuid={0x14, 0x18, {0x0, 0x47a3}}, @wr_crn={0x46, 0x20, {0x3, 0x80000000}}, @rdmsr={0x32, 0x18, {0x8da}}], 0x330}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000540)={0x2, 0x0, [{}, {}]}) (async) r4 = syz_open_dev$vbi(&(0x7f00000005c0), 0x1, 0x2) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000600)=0xbb) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '[%)\''}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async, rerun: 64) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000780)=0x176) (rerun: 64) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x361280, 0x0) ioctl$TUNSETGROUP(r7, 0x400454ce, 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x8) symlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0\x00') (async) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000980)) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f00000009c0)) (async) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r9, 0x10, 0x8000, 0x8001, 0x2, {{0x21, 0x4, 0x3, 0x7, 0x84, 0x67, 0x0, 0xb, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x12, 0xffffffffffffffff, [{0x7, 0xc, "dd3f7d8dbab9ddef6a2c"}]}, @timestamp={0x44, 0x24, 0x9d, 0x0, 0x4, [0x3b2b8529, 0x7, 0x2, 0x9, 0x3, 0x80000001, 0x3, 0x9]}, @end, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x8c, 0x3, 0x0, [{@rand_addr=0x64010101, 0x5}, {@local, 0x3}, {@multicast2, 0xfffff987}, {@remote, 0x9}, {@remote, 0xfffff2dd}]}, @timestamp={0x44, 0x8, 0x33, 0x0, 0x5, [0xfffffff7]}]}}}}}) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000c80)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000d40)={&(0x7f0000000bc0), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r10, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_LAPIC(r13, 0x8400ae8e, &(0x7f0000000d80)) (async) getpeername(r7, &(0x7f0000001180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001200)=0x80) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r14, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001280)=""/110, 0x6e}) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4014}, 0x20000005) 6m16.652497595s ago: executing program 36 (id=543): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)=0x7f) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff07000000000000000000008500000036000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = shmget(0x2, 0xc00000, 0x360, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_RMID(r6, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}, 0x0) dup2(r0, r1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 10.319494948s ago: executing program 8 (id=1829): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x18041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @loopback, 0x3fffeff}, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, r7, 0x6}}, 0xffffff50) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r7, 0xb6}}, 0x10) 9.937095527s ago: executing program 9 (id=1830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000400)=0xfffffffffffffc8b) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000440)='@[{\x00', &(0x7f0000000480)='./bus\x00', 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x2080fb, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x778f}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 9.024375966s ago: executing program 9 (id=1834): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x204c03, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x204c03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000000)={0x0, 0xe, 0x1f97f0b8, 0x3, 0x1ff}) (async) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000000)={0x0, 0xe, 0x1f97f0b8, 0x3, 0x1ff}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef66bafc0cb000ee0f30f3400f09660f38803f8f23c00f21f835020002000f23f8c40279134e9ac4c17b110d010000000f01c5", 0x4c}], 0x1, 0x15, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef66bafc0cb000ee0f30f3400f09660f38803f8f23c00f21f835020002000f23f8c40279134e9ac4c17b110d010000000f01c5", 0x4c}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.650650321s ago: executing program 9 (id=1838): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000003c0)={0x0, 0xffffff16, &(0x7f0000000380)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0xfffffffd, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}}, 0x400) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)={0x14, r5, 0x715, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x228e660f298b4052}, 0x40000) 8.281695615s ago: executing program 8 (id=1839): socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x1) r0 = syz_io_uring_setup(0x114, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0x3e8}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000018, 0x10, r0, 0x180000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='io_uring_req_failed\x00', r3, 0x0, 0xffffffffffff3bac}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) 8.206932805s ago: executing program 6 (id=1841): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000440)='./file1\x00', 0x0, 0x86) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0089364, 0x0) tgkill(0x0, 0x0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="00019c7d94446cc3cb333700000008000300", @ANYRES32, @ANYBLOB="0c0099000008000058000000080022015d010000080057000b00000008009f0004000000080022015e0100000800270003000000050019010c00000008005700f89c0000080026006c0900000800a100cf08000008002600a014000008002700010000000500180122000000050019010d000000080026009e09000008005700b803000008002201dc0200000800270000000000080022018f02000008002600b409000008002201e0020000080026006c0900000800a100feffffff050019010900000008009f0006000000080022015f00000008002201440000"], 0xf8}, 0x1, 0x0, 0x0, 0x4080}, 0x240488e0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001100), 0x100a, 0xffffffffffffffff, 0xb40387b7739c1054, 0xd88d02a0}, 0x38) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/19, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) syz_genetlink_get_family_id$wireguard(0x0, r0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 7.499160603s ago: executing program 8 (id=1844): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000008) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7d) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 6.50134718s ago: executing program 9 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000480)=""/226, 0x12000, 0x0, 0x8, 0x3}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x1508}}, 0x800) r4 = syz_open_dev$mouse(&(0x7f00000001c0), 0x401, 0x200000) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000300)={&(0x7f00005cc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2}) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept4(r2, 0x0, 0x0, 0x800) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000130a01080000000000dc00000100fffe"], 0x14}}, 0x40000c0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) 5.79114773s ago: executing program 6 (id=1850): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0) fcntl$lock(r1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000002d80)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, &(0x7f00000000c0)={0x0, 0x31, 0x59, {0x59, 0x23, "b5c88dc6dc79256f7b55e85dd4eed8eafa7f2d431053b97251bc3a8e7829ec5c6a973e157331875de232aafd9b12fd2351e9c02d00000b71b431912acecae9ceaf7ecce72054bcf008b758ff7d8c789b2b7911f6e8ca2d"}}, &(0x7f0000000300)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "1f77a349b7ec328302415ded44ef62a9c825c20cddb191f543560448a24f3c17f7b49413dec0cf4dd445e6bfd5304a1584bc658ce46e74c7f8e934d623374c6ba9d3795b13604a6f4fec2efd0e985a53e9a712adf6768d2b20efbea64935ae9947707c34ffe1281add"}}, &(0x7f0000000140), &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x8e9}}}}, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x40, 0x15, 0x52, "97e67db0df6367ae606a9482ac45b8350f9a28321a82fb9e473fb70bfa67d673516cd613f0eafdc6911fe8e9d614a35b70b726d216e6669426d52c953fcb7d27f4f442aeaa3dd0129fb37e07659f7992c891"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x1, 0x9e, "ec88211e5c8c5a4ea9165d0f7e0d4e778d9d0c7e6d8d2b814af2184bfba25353e6f25bacfec6677f486b8662e73b5ac4421c5cd29ca3f1a7d2afbc607592cff903588ed5acc53625cbf48cb81980a557906f67a332f597f0f4fd705b53b25e0fb00036f493a6b0cb9974fc29864dc5026b9324ed4ff73f37d6b9f7387cfa451ec7ee1aecd4618b8f9e2ec101e248b5064ba599b0e06d1333fdb5642f8acc"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000a00)={0x0, 0x4, 0x0, [0x8, 0x2, 0xc, 0xf0, 0x10001], [0x101, 0x3, 0x100000001, 0xfffffffffffffffa, 0x7f, 0xeb8, 0x4, 0x8487, 0x1000000000000000, 0x0, 0x9, 0x8, 0x0, 0x9, 0x0, 0x2, 0x5, 0x200, 0x3, 0xbe73, 0x3, 0x9, 0x3, 0x10, 0x3, 0x3, 0x5, 0x7, 0x6289, 0x8, 0x8000, 0x101, 0x7, 0x200, 0x1, 0xdee, 0x80000001, 0x2, 0xf, 0xfce9, 0x3, 0xe, 0x8, 0xa, 0x0, 0x8, 0x92, 0xfc, 0x12e, 0x8000000000000000, 0xac4, 0x7ff, 0x1, 0xfffffffffffffada, 0x9, 0x2f, 0x4, 0x5, 0xff, 0x3, 0x3, 0x4, 0x0, 0x8, 0x2, 0x2, 0x9, 0x80000001, 0xe7d, 0x101, 0x4, 0x0, 0x6, 0x6, 0x1, 0x7, 0x3, 0x8c2, 0x400, 0x9, 0x0, 0x1, 0x97, 0x8, 0x415, 0x9a5b, 0xfffffffffffffffc, 0x1, 0x4, 0xe717, 0x6, 0x776, 0x5, 0x0, 0xc, 0xd4e, 0x7, 0x2, 0xffffffffffffffff, 0x7, 0x6, 0x4, 0x4, 0x4ba5, 0x5, 0x3, 0x7, 0x8f, 0x200, 0x7, 0x5, 0xcd2, 0x4, 0x1000, 0x3ff, 0x3, 0xffffffff00000001, 0x400, 0xfabb, 0x0, 0x7]}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000e40)={0x1, 0x8, @start={r4, 0x0, "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", "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"}, [0x4, 0x6, 0x8, 0x1ff, 0x6, 0xde5, 0x165df458, 0x9, 0x2, 0x8, 0x0, 0x10001, 0x5, 0x2, 0x3, 0x80, 0x1f6, 0x1, 0x8, 0x3, 0x1266, 0x7, 0x5da, 0x7, 0x1, 0x4, 0x80, 0x3, 0x2, 0xe4, 0x3, 0xffffffffffffffff, 0x10001, 0x5, 0x0, 0x1, 0xb7, 0x200, 0x8, 0xffffffffffffff76, 0x6, 0x3, 0x8, 0x3, 0x7, 0xffffffffffff0001, 0xc6a, 0x0, 0x9, 0x3, 0x8000000000000001, 0x100000000, 0x1, 0x2, 0x8000000000000000, 0x2, 0xfffffffffffff000, 0xfffffffffffffff5, 0x10, 0xfffffffffffffffc, 0xcf, 0x7fff, 0x7ff, 0x9]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x0, 0xfffffffc}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x64, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.441904271s ago: executing program 7 (id=1851): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x2, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x427f, 0x4) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x80) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="001008000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.092661583s ago: executing program 9 (id=1852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xca6, &(0x7f0000000480)={0x0, 0x55b8, 0x200, 0x5, 0x9c3}, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xb, &(0x7f0000000140)={0xa, 0x58}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000000000001d00", @ANYRES32=0x0, @ANYBLOB="7b03000000000000500012800b00010067656e6576650000400002800800010002000000050003000f00000005000a0001000000040006"], 0x70}}, 0x40880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_io_uring_setup(0x21cb, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_usb_connect(0x5, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810804008100ffffff02974662fd93ce4509d4585634c9a4f5156a51ce555d9a9bb98e08c97ccaac62a980f4925537dd7a29ad018f388cc9311afe77d4df32964173a74d01e745b0843c74f4776df89de5b184e16bb95fbb7bde91f1c536db0c32042a44cf7fb0e7ccd0abdf7a821aa34b5209e8717f8ddb75e47501ba1e7a4aa69346c992093a378868bcee3cdd09"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) 4.227536594s ago: executing program 8 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xce200104}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc495}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa4a9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xae}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffc01}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000090}, 0xc814) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r9, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r9) shutdown(r8, 0x0) close(r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x100488c0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x400, 0x4) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3.483797219s ago: executing program 8 (id=1859): r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f0000000900)={0x0, 0x2c, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40002120) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x4c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff3b}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)={r5, r4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.884487433s ago: executing program 6 (id=1860): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000100)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r2, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendmsg$sock(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="8ec0", 0x2}], 0x1}, 0x80) landlock_create_ruleset(&(0x7f0000000000)={0x422, 0x4, 0x5}, 0x18, 0x3) 2.752811806s ago: executing program 6 (id=1861): socket$inet(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000058c0)={0xc0, 0x0, 0x18, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0xfffffffffffffcd1, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x200}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4c0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xefc}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad", @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) recvmmsg(r3, &(0x7f00000057c0)=[{{&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/217, 0xd9}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x4, &(0x7f0000000800)=""/90, 0x5a}, 0xfc}, {{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000980)=""/64, 0x40}, {&(0x7f00000009c0)=""/197, 0xc5}, {&(0x7f0000000b00)=""/41, 0x29}, {&(0x7f0000000b40)=""/56, 0x38}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/207, 0xcf}], 0x8, &(0x7f0000003f00)=""/191, 0xbf}, 0xffff}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000003fc0)=""/210, 0xd2}, {&(0x7f0000000b80)=""/49, 0x31}, {&(0x7f00000040c0)=""/168, 0xa8}, {&(0x7f0000004180)=""/217, 0xd9}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/184, 0xb8}, {&(0x7f0000005340)=""/160, 0xa0}, {&(0x7f0000005400)=""/166, 0xa6}, {&(0x7f0000000d40)}, {&(0x7f00000054c0)=""/148, 0x94}], 0xa, &(0x7f0000006100)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000005640)=@xdp, 0x80, &(0x7f0000005740)=[{&(0x7f0000007100)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/76, 0x4c}], 0x2, &(0x7f0000005780)}}], 0x4, 0x100, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880cc00088034000780080005007c6610430800060004000000080006009700000008000500c6a13c50080006005700000008000500bf2081642c000780080006006800000008000500"], 0xf8}}, 0x0) 2.545293593s ago: executing program 0 (id=1862): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x401064d1, &(0x7f0000000240)={0x0, 0x0}) 2.502800378s ago: executing program 0 (id=1863): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.432753939s ago: executing program 0 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 2.432280592s ago: executing program 0 (id=1865): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8480, 0xa0) getdents(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7b981661d33dc03a, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x4004) 2.415426507s ago: executing program 0 (id=1866): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b0000000000000000030000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.262383027s ago: executing program 7 (id=1867): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x69, 0x3, 0x8, 0xa, 0xffffff80, 0x8100}) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) keyctl$link(0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, r5, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000006c0)='source?\xcd\xf0\x00\x06\xa0\xd4\x9a\x8d\x96\xa3Yk\xd3&\x98&T\x19 |\x8cj\xa9r\xa6a\xed\xbc\xbd_@\xf5\t\x8a\xba\x97\x96>|G8m\xfd\x00m0d\xa7\xb1]\x94XM\xc3\xa7\xfb\xd1A\x9b\xa9\xa3\xf4\xe6\x90\xd9\xb0\fL\x11\xc5\xe6\x9a\xdd\x06\xd2\xba\x9ci\x8d\xfe\x91\xeb\xe2\xd3\xeb\xebU\xe7\xc8\xe9\xbd:\xde\xae\xf1\x95\x95\xe2\x06$\x80\xf1', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x8b\x88\xeb\xa3\x01\x8c\xf8\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x44302, 0x0) ptrace$pokeuser(0x6, r4, 0x4, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 1.92605117s ago: executing program 0 (id=1868): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c010000160001040400000000b5ddb3939134f81e00000007e0626b6f21caa4ffffffff000000000000000000000000fffe0000000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414260000000000000000000000000000000033000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f0000000000000000010000000000000000000000000000000000000003000000000000000100000000000000000000000000000000000000000000000000000000000004000000000000000008000020ffffffff0c0015"], 0x10c}, 0x1, 0x0, 0x0, 0x42001}, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040022ebffff0200"}}}}}, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x4, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202064250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000180)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) r6 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0xf687, 0x2, 0x0, 0x3bd}) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0}, 0x94) 1.897257668s ago: executing program 6 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xce200104}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc495}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa4a9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xae}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffc01}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000090}, 0xc814) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r9, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r9) shutdown(r8, 0x0) close(r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x100488c0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x400, 0x4) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.884449085s ago: executing program 7 (id=1870): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r2, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x1000000000000183, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f0000000980)=""/220, 0xdc}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x50009405, &(0x7f0000001440)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x38, r5}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) 1.752787746s ago: executing program 9 (id=1871): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x0, 0x1a1) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r4, 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000240)='./file0\x00', 0x8, 0x0) write$binfmt_script(r4, &(0x7f0000001b00), 0xfffffd9d) write$dsp(r4, &(0x7f0000000200), 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={[{'lock'}]}) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x20, 0xb, 0x5, {0x5, 0x31, "a9387a"}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000500)={0x34, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r1, r1, r4, r4], 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0xfffffffe, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0400000, 0x3, 0x20000032, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) 1.68323827s ago: executing program 6 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f00000003c0), 0x11f1, 0x0, 0xbe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x29, 0x7, 0x0) r3 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x8b, 0x61, 0xfb, 0x10, 0xac8, 0xc301, 0xf37b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x3, 0x0, 0xf5, 0xee, 0xdd, 0x2}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180e320000003221b5eb5dbef356e37558eac0ffd235a3c99de425fb0a8377e7caa0615d3a99ed5b19a8d5ae6d3a0a4007edf9843e"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x2}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x87, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 902.651367ms ago: executing program 7 (id=1873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'batadv_slave_1\x00', {0x6}, 0x9}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x16c1, @private2, 0x80000000}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8908040400", 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 392.758742ms ago: executing program 8 (id=1874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8]) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x0, 0x11, 0xf3, "e038301d40a7851a55f6bbc563b6794aaf6247298cd6cf6cc2e26640a89fbfe7dba0b466c45ed0a81f666d3db2b1daed790074b84ddd23518796178c588f44f74ab880ebcd77fa8ac8be17388f4fe38e8c8c7db981ebc5bf3d8051887dc33668f339fad8dac98536a9e1048003d7cea4f7a863938c6075b52c3b1fa5260a8eee66b6b715ff98a85d10435627122f08746d6104aaf7f24193dcc2b9049b8fd429186a1eac43b3b1c2b4eb0a64f49f52298b29fd522b238729c3c1e629691df64daf6dee4504d99898b70f95973ca877dfb5c150b2a4d76f736481e4bf20c36278a6609448c50b1d7c5e53247df1e06da1f0d185"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x7}}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) 33.206804ms ago: executing program 7 (id=1875): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 0s ago: executing program 7 (id=1876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tgkill(0x0, 0x0, 0x1a) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_usb_connect(0x5, 0x35, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) kernel console output (not intermixed with test programs): LSA: mixer_oss: invalid OSS volume '' [ 395.867891][T10268] FAULT_INJECTION: forcing a failure. [ 395.867891][T10268] name failslab, interval 1, probability 0, space 0, times 0 [ 395.880723][T10268] CPU: 0 UID: 0 PID: 10268 Comm: syz.6.934 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 395.880748][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.880758][T10268] Call Trace: [ 395.880764][T10268] [ 395.880771][T10268] dump_stack_lvl+0x16c/0x1f0 [ 395.880794][T10268] should_fail_ex+0x512/0x640 [ 395.880814][T10268] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 395.880843][T10268] should_failslab+0xc2/0x120 [ 395.880864][T10268] __kmalloc_cache_noprof+0x6a/0x3e0 [ 395.880891][T10268] ? __request_region+0x5c/0xf0 [ 395.880920][T10268] __request_region+0x5c/0xf0 [ 395.880948][T10268] comedi_request_region+0x6d/0x1c0 [ 395.880969][T10268] das16m1_attach+0x7c/0xc10 [ 395.880994][T10268] comedi_device_attach+0x3b0/0x900 [ 395.881020][T10268] do_devconfig_ioctl+0x1b1/0x710 [ 395.881042][T10268] ? __mutex_lock+0x1c4/0x10b0 [ 395.881064][T10268] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 395.881103][T10268] ? find_held_lock+0x2b/0x80 [ 395.881129][T10268] comedi_unlocked_ioctl+0x165d/0x2f00 [ 395.881162][T10268] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 395.881194][T10268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.881217][T10268] ? do_vfs_ioctl+0x128/0x14f0 [ 395.881244][T10268] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 395.881269][T10268] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 395.881305][T10268] ? hook_file_ioctl_common+0x145/0x410 [ 395.881331][T10268] ? selinux_file_ioctl+0x180/0x270 [ 395.881354][T10268] ? selinux_file_ioctl+0xb4/0x270 [ 395.881379][T10268] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 395.881412][T10268] __x64_sys_ioctl+0x18b/0x210 [ 395.881440][T10268] do_syscall_64+0xcd/0x4c0 [ 395.881461][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.881479][T10268] RIP: 0033:0x7f95f338ebe9 [ 395.881494][T10268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.881511][T10268] RSP: 002b:00007f95f4193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.881529][T10268] RAX: ffffffffffffffda RBX: 00007f95f35b6180 RCX: 00007f95f338ebe9 [ 395.881540][T10268] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008 [ 395.881551][T10268] RBP: 00007f95f4193090 R08: 0000000000000000 R09: 0000000000000000 [ 395.881562][T10268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.881573][T10268] R13: 00007f95f35b6218 R14: 00007f95f35b6180 R15: 00007ffcba4a6cd8 [ 395.881597][T10268] [ 395.881638][T10268] comedi comedi3: das16m1: I/O port conflict (0x104f27,16) [ 396.737423][ T30] audit: type=1400 audit(1755298784.335:759): avc: denied { ioctl } for pid=10270 comm="syz.9.935" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 396.930344][ T5933] vhci_hcd: vhci_device speed not set [ 397.348723][T10287] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 397.369923][T10287] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 397.396185][T10286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.848251][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.943'. [ 397.879927][ T30] audit: type=1400 audit(1755298785.475:760): avc: denied { execheap } for pid=10273 comm="syz.8.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 397.916837][T10297] FAULT_INJECTION: forcing a failure. [ 397.916837][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 397.937772][T10297] CPU: 1 UID: 0 PID: 10297 Comm: syz.9.943 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 397.937798][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.937809][T10297] Call Trace: [ 397.937815][T10297] [ 397.937821][T10297] dump_stack_lvl+0x16c/0x1f0 [ 397.937845][T10297] should_fail_ex+0x512/0x640 [ 397.937865][T10297] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 397.937887][T10297] should_failslab+0xc2/0x120 [ 397.937908][T10297] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 397.937927][T10297] ? __alloc_skb+0x2b2/0x380 [ 397.937958][T10297] __alloc_skb+0x2b2/0x380 [ 397.937985][T10297] ? __pfx___alloc_skb+0x10/0x10 [ 397.938012][T10297] ? genl_rcv_msg+0x4b0/0x800 [ 397.938033][T10297] ? genl_rcv_msg+0x4bb/0x800 [ 397.938061][T10297] netlink_ack+0x15d/0xb80 [ 397.938089][T10297] netlink_rcv_skb+0x332/0x420 [ 397.938109][T10297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.938132][T10297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.938163][T10297] ? netlink_deliver_tap+0x1ae/0xd30 [ 397.938194][T10297] genl_rcv+0x28/0x40 [ 397.938213][T10297] netlink_unicast+0x5aa/0x870 [ 397.938236][T10297] ? __pfx_netlink_unicast+0x10/0x10 [ 397.938256][T10297] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 397.938283][T10297] netlink_sendmsg+0x8d1/0xdd0 [ 397.938307][T10297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.938336][T10297] ____sys_sendmsg+0xa95/0xc70 [ 397.938361][T10297] ? copy_msghdr_from_user+0x10a/0x160 [ 397.938378][T10297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.938413][T10297] ___sys_sendmsg+0x134/0x1d0 [ 397.938432][T10297] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.938471][T10297] ? __mutex_unlock_slowpath+0x100/0x800 [ 397.938495][T10297] __sys_sendmsg+0x16d/0x220 [ 397.938513][T10297] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.938547][T10297] do_syscall_64+0xcd/0x4c0 [ 397.938568][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.938585][T10297] RIP: 0033:0x7f811718ebe9 [ 397.938599][T10297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.938614][T10297] RSP: 002b:00007f8117f2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.938630][T10297] RAX: ffffffffffffffda RBX: 00007f81173b5fa0 RCX: 00007f811718ebe9 [ 397.938641][T10297] RDX: 00000000240088c0 RSI: 0000200000002080 RDI: 0000000000000004 [ 397.938651][T10297] RBP: 00007f8117f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 397.938661][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.938672][T10297] R13: 00007f81173b6038 R14: 00007f81173b5fa0 R15: 00007fffd2034698 [ 397.938693][T10297] [ 398.666498][T10309] netlink: 'syz.6.947': attribute type 11 has an invalid length. [ 399.006670][T10311] binder: 10310:10311 ioctl c0306201 200000000080 returned -14 [ 399.053042][T10311] binder: 10310:10311 ioctl 89e0 2000000000c0 returned -22 [ 399.320156][ T30] audit: type=1326 audit(1755298786.885:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 399.431295][ T30] audit: type=1326 audit(1755298786.885:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 399.662185][ T30] audit: type=1326 audit(1755298786.895:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 399.920126][ T30] audit: type=1326 audit(1755298786.895:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 400.381061][ T30] audit: type=1326 audit(1755298786.895:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 400.522460][ T30] audit: type=1326 audit(1755298786.895:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 400.560918][ T30] audit: type=1326 audit(1755298786.895:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 401.137069][ T30] audit: type=1326 audit(1755298786.895:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 401.160356][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.553638][T10342] netlink: 'syz.0.955': attribute type 21 has an invalid length. [ 401.649790][T10342] netlink: 164 bytes leftover after parsing attributes in process `syz.0.955'. [ 401.760197][ T30] kauditd_printk_skb: 240 callbacks suppressed [ 401.760208][ T30] audit: type=1326 audit(1755298789.355:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 401.830810][ T30] audit: type=1326 audit(1755298789.355:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 401.875150][T10349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10349 comm=syz.6.958 [ 401.913311][ T30] audit: type=1326 audit(1755298789.355:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 401.984902][ T30] audit: type=1326 audit(1755298789.355:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 402.004271][T10355] netlink: 104 bytes leftover after parsing attributes in process `syz.6.958'. [ 402.008208][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.027140][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.6.958'. [ 402.273501][ T30] audit: type=1326 audit(1755298789.355:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 402.300321][ T30] audit: type=1326 audit(1755298789.355:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 402.760695][ T30] audit: type=1326 audit(1755298789.355:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 402.855067][ T30] audit: type=1326 audit(1755298789.355:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 402.878894][ T30] audit: type=1326 audit(1755298789.355:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 402.970700][ T30] audit: type=1326 audit(1755298789.355:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.7.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb389b2add9 code=0x7ffc0000 [ 405.265481][T10390] binder: BINDER_SET_CONTEXT_MGR already set [ 405.271615][T10390] binder: 10388:10390 ioctl 4018620d 200000000040 returned -16 [ 405.284344][T10390] binder: 10388:10390 ioctl c0286405 200000003a80 returned -22 [ 406.152127][T10406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10406 comm=syz.9.973 [ 406.472855][T10408] netlink: 104 bytes leftover after parsing attributes in process `syz.9.973'. [ 406.507735][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.9.973'. [ 407.739891][T10437] binder: BINDER_SET_CONTEXT_MGR already set [ 407.748532][T10437] binder: 10435:10437 ioctl 4018620d 200000000040 returned -16 [ 407.800364][T10437] binder: 10435:10437 ioctl c0286405 200000003a80 returned -22 [ 408.605281][T10452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.562603][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 413.562619][ T30] audit: type=1326 audit(1755298801.165:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10475 comm="syz.8.992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ff638ebe9 code=0x0 [ 414.880383][T10494] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 414.894941][T10494] Error validating options; rc = [-22] [ 415.854019][T10509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10509 comm=syz.8.1000 [ 415.874143][T10511] NILFS (loop7): device size too small [ 416.020169][T10512] netlink: 'syz.7.1002': attribute type 2 has an invalid length. [ 416.237268][T10513] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1002'. [ 416.247122][T10513] netlink: 'syz.7.1002': attribute type 6 has an invalid length. [ 417.229631][T10520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1005'. [ 418.007481][ T30] audit: type=1400 audit(1755298805.135:1079): avc: denied { bind } for pid=10522 comm="syz.7.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 418.341526][T10538] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1013'. [ 418.459112][T10545] netlink: 'syz.9.1011': attribute type 13 has an invalid length. [ 418.748472][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.755813][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.889947][T10545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.910623][T10545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.390518][ T1164] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.439092][ T1164] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.468460][ T1164] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.501991][ T1164] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.552002][ T30] audit: type=1400 audit(1755298807.155:1080): avc: denied { ioctl } for pid=10560 comm="syz.9.1018" path="socket:[33974]" dev="sockfs" ino=33974 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 419.963389][T10563] syzkaller0: entered promiscuous mode [ 419.969044][T10563] syzkaller0: entered allmulticast mode [ 420.052224][ T30] audit: type=1326 audit(1755298807.645:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.129246][ T30] audit: type=1326 audit(1755298807.645:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.245669][ T30] audit: type=1326 audit(1755298807.645:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.466377][ T30] audit: type=1326 audit(1755298807.645:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.630440][ T30] audit: type=1326 audit(1755298807.645:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.761033][ T30] audit: type=1326 audit(1755298807.645:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.814431][ T30] audit: type=1326 audit(1755298807.645:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.862993][ T30] audit: type=1326 audit(1755298807.645:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 420.892000][ T30] audit: type=1326 audit(1755298807.645:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2878ebe9 code=0x7fc00000 [ 421.119794][T10581] FAULT_INJECTION: forcing a failure. [ 421.119794][T10581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.168086][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz.6.1023 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 421.168120][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.168130][T10581] Call Trace: [ 421.168137][T10581] [ 421.168144][T10581] dump_stack_lvl+0x16c/0x1f0 [ 421.168167][T10581] should_fail_ex+0x512/0x640 [ 421.168190][T10581] _copy_to_user+0x32/0xd0 [ 421.168215][T10581] simple_read_from_buffer+0xcb/0x170 [ 421.168235][T10581] proc_fail_nth_read+0x197/0x240 [ 421.168256][T10581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.168278][T10581] ? rw_verify_area+0xcf/0x6c0 [ 421.168303][T10581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.168322][T10581] vfs_read+0x1e1/0xcf0 [ 421.168341][T10581] ? __pfx___mutex_lock+0x10/0x10 [ 421.168360][T10581] ? __pfx_vfs_read+0x10/0x10 [ 421.168383][T10581] ? __fget_files+0x20e/0x3c0 [ 421.168409][T10581] ksys_read+0x12a/0x250 [ 421.168426][T10581] ? __pfx_ksys_read+0x10/0x10 [ 421.168450][T10581] do_syscall_64+0xcd/0x4c0 [ 421.168470][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.168488][T10581] RIP: 0033:0x7f95f338d5fc [ 421.168501][T10581] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.168517][T10581] RSP: 002b:00007f95f41d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.168534][T10581] RAX: ffffffffffffffda RBX: 00007f95f35b5fa0 RCX: 00007f95f338d5fc [ 421.168545][T10581] RDX: 000000000000000f RSI: 00007f95f41d50a0 RDI: 0000000000000007 [ 421.168555][T10581] RBP: 00007f95f41d5090 R08: 0000000000000000 R09: 0000000000000000 [ 421.168565][T10581] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 421.168573][T10581] R13: 00007f95f35b6038 R14: 00007f95f35b5fa0 R15: 00007ffcba4a6cd8 [ 421.168598][T10581] [ 421.353739][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.564686][ T5932] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 421.751709][ T5932] usb 10-1: Using ep0 maxpacket: 16 [ 421.768106][ T5932] usb 10-1: config 0 has an invalid interface number: 127 but max is 0 [ 421.777961][ T5932] usb 10-1: config 0 has no interface number 0 [ 421.800173][ T5932] usb 10-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=c1.03 [ 421.814031][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.885181][ T5932] usb 10-1: Product: syz [ 421.885335][ T5861] Bluetooth: hci6: unexpected Set CIG Parameters response data [ 421.921031][ T5861] Bluetooth: hci6: unexpected event for opcode 0x2062 [ 422.097502][ T5932] usb 10-1: Manufacturer: syz [ 422.107616][ T5932] usb 10-1: SerialNumber: syz [ 422.162984][ T5932] usb 10-1: config 0 descriptor?? [ 422.170845][ T5932] cypress_m8 10-1:0.127: Nokia CA-42 V2 Adapter converter detected [ 422.184874][ T5932] nokiaca42v2 ttyUSB0: required endpoint is missing [ 423.276422][ T8416] usb 10-1: USB disconnect, device number 9 [ 423.288728][ T8416] cypress_m8 10-1:0.127: device disconnected [ 424.386455][T10605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.420696][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10607 comm=syz.8.1029 [ 424.510637][T10608] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1029'. [ 424.519761][T10608] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1029'. [ 425.060186][ T5905] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 425.200293][ T5905] usb 10-1: device descriptor read/64, error -71 [ 425.806405][ T5905] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 425.923336][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1035'. [ 425.960103][ T5905] usb 10-1: device descriptor read/64, error -71 [ 426.000439][ T5861] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 426.012789][ T5861] Bluetooth: hci6: Injecting HCI hardware error event [ 426.021254][ T5860] Bluetooth: hci6: hardware error 0x00 [ 426.082993][ T5905] usb usb10-port1: attempt power cycle [ 426.618112][T10071] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 426.639333][T10071] Bluetooth: (null): Invalid header checksum [ 426.646021][T10071] Bluetooth: (null): Invalid header checksum [ 426.652978][T10071] Bluetooth: (null): Invalid header checksum [ 427.080534][ T5905] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 427.100531][ T5905] usb 10-1: device descriptor read/8, error -71 [ 427.433552][ T5905] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 427.567502][ T5905] usb 10-1: device descriptor read/8, error -71 [ 427.690441][ T5905] usb usb10-port1: unable to enumerate USB device [ 428.305367][ T5860] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 429.860094][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 429.860109][ T30] audit: type=1400 audit(1755298817.425:1149): avc: denied { map } for pid=10682 comm="syz.0.1051" path="socket:[33368]" dev="sockfs" ino=33368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.889335][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.101837][ T30] audit: type=1400 audit(1755298817.425:1150): avc: denied { read } for pid=10682 comm="syz.0.1051" path="socket:[33368]" dev="sockfs" ino=33368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.125104][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.472611][ T30] audit: type=1400 audit(1755298817.585:1151): avc: denied { write } for pid=10682 comm="syz.0.1051" path="socket:[34181]" dev="sockfs" ino=34181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.497266][ T30] audit: type=1400 audit(1755298817.685:1152): avc: denied { shutdown } for pid=10682 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 431.862614][ T5932] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 432.185078][T10720] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 432.220094][ T5932] usb 10-1: Using ep0 maxpacket: 32 [ 432.248838][ T5932] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 22, changing to 7 [ 432.270151][ T5932] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25184, setting to 1024 [ 432.435016][ T5932] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 432.595877][ T5932] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.701028][ T30] audit: type=1400 audit(1755298820.305:1153): avc: denied { listen } for pid=10725 comm="syz.6.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 432.728267][ T5932] usb 10-1: config 0 descriptor?? [ 432.758359][ T5932] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 433.445123][ T5932] usb 10-1: USB disconnect, device number 14 [ 434.668308][T10756] binder: 10755:10756 ioctl c0286405 200000003a80 returned -22 [ 435.087822][ T30] audit: type=1400 audit(1755298822.685:1154): avc: denied { accept } for pid=10762 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 435.298411][T10766] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1072'. [ 435.406528][T10773] FAULT_INJECTION: forcing a failure. [ 435.406528][T10773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.446226][T10773] CPU: 0 UID: 0 PID: 10773 Comm: syz.6.1074 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 435.446252][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.446262][T10773] Call Trace: [ 435.446268][T10773] [ 435.446274][T10773] dump_stack_lvl+0x16c/0x1f0 [ 435.446293][T10773] should_fail_ex+0x512/0x640 [ 435.446309][T10773] _copy_from_user+0x2e/0xd0 [ 435.446324][T10773] copy_msghdr_from_user+0x98/0x160 [ 435.446336][T10773] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 435.446354][T10773] ___sys_sendmsg+0xfe/0x1d0 [ 435.446365][T10773] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.446388][T10773] ? __mutex_unlock_slowpath+0x100/0x800 [ 435.446405][T10773] __sys_sendmsg+0x16d/0x220 [ 435.446416][T10773] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.446435][T10773] do_syscall_64+0xcd/0x4c0 [ 435.446449][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.446460][T10773] RIP: 0033:0x7f95f338ebe9 [ 435.446470][T10773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.446480][T10773] RSP: 002b:00007f95f41d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.446491][T10773] RAX: ffffffffffffffda RBX: 00007f95f35b5fa0 RCX: 00007f95f338ebe9 [ 435.446498][T10773] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 435.446505][T10773] RBP: 00007f95f41d5090 R08: 0000000000000000 R09: 0000000000000000 [ 435.446511][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.446517][T10773] R13: 00007f95f35b6038 R14: 00007f95f35b5fa0 R15: 00007ffcba4a6cd8 [ 435.446531][T10773] [ 436.038730][T10786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10786 comm=syz.6.1079 [ 436.106214][T10783] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 436.139805][T10783] batman_adv: batadv0: Adding interface: ip6gretap1 [ 436.146515][T10783] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.172685][T10783] batman_adv: batadv0: Interface activated: ip6gretap1 [ 436.259240][T10788] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1079'. [ 436.268437][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1079'. [ 437.129792][T10806] syz.6.1085: attempt to access beyond end of device [ 437.129792][T10806] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 437.143243][T10806] gfs2: error -5 reading superblock [ 438.618464][T10823] binder: 10822:10823 ioctl c0286405 200000003a80 returned -22 [ 438.922461][ T30] audit: type=1400 audit(1755298826.485:1155): avc: denied { setopt } for pid=10820 comm="syz.6.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.275252][T10829] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1091'. [ 439.538499][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.816772][T10866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10866 comm=syz.9.1103 [ 441.898571][T10867] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1103'. [ 441.927141][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1103'. [ 444.168332][T10893] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1110'. [ 444.307861][T10898] syz.6.1112: attempt to access beyond end of device [ 444.307861][T10898] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 444.322438][T10898] gfs2: error -5 reading superblock [ 445.934104][T10917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10917 comm=syz.0.1119 [ 446.017051][T10919] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1119'. [ 446.027898][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'. [ 446.428536][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1123'. [ 446.536909][T10932] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 446.550880][T10932] Error validating options; rc = [-22] [ 447.905620][T10950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10950 comm=syz.0.1127 [ 448.146698][T10952] FAULT_INJECTION: forcing a failure. [ 448.146698][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.160068][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.8.1129 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 448.160093][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.160103][T10952] Call Trace: [ 448.160109][T10952] [ 448.160116][T10952] dump_stack_lvl+0x16c/0x1f0 [ 448.160139][T10952] should_fail_ex+0x512/0x640 [ 448.160162][T10952] _copy_from_user+0x2e/0xd0 [ 448.160185][T10952] copy_msghdr_from_user+0x98/0x160 [ 448.160205][T10952] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 448.160221][T10952] ? trace_sched_exit_tp+0xd1/0x120 [ 448.160253][T10952] ___sys_sendmsg+0xfe/0x1d0 [ 448.160273][T10952] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.160321][T10952] __sys_sendmsg+0x16d/0x220 [ 448.160340][T10952] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.160374][T10952] do_syscall_64+0xcd/0x4c0 [ 448.160395][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.160414][T10952] RIP: 0033:0x7f9ff638ebe9 [ 448.160429][T10952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.160446][T10952] RSP: 002b:00007f9ff45b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.160463][T10952] RAX: ffffffffffffffda RBX: 00007f9ff65b6180 RCX: 00007f9ff638ebe9 [ 448.160475][T10952] RDX: 0000000020000880 RSI: 0000200000000300 RDI: 0000000000000004 [ 448.160486][T10952] RBP: 00007f9ff45b4090 R08: 0000000000000000 R09: 0000000000000000 [ 448.160496][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.160507][T10952] R13: 00007f9ff65b6218 R14: 00007f9ff65b6180 R15: 00007ffd0dd13b18 [ 448.160531][T10952] [ 448.899598][T10964] netlink: 'syz.8.1134': attribute type 10 has an invalid length. [ 449.253242][T10964] team0: Port device netdevsim0 added [ 449.461226][T10972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10972 comm=syz.7.1136 [ 449.610839][T10973] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1136'. [ 449.623162][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1136'. [ 449.791654][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1139'. [ 451.170626][T10999] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1144'. [ 452.004601][T11007] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 453.171760][T11023] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1150'. [ 453.863577][T11028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11028 comm=syz.6.1152 [ 454.024202][T11029] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1152'. [ 454.073625][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1152'. [ 454.299788][T11032] bridge_slave_0: left allmulticast mode [ 454.320166][T11032] bridge_slave_0: left promiscuous mode [ 454.336533][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.421808][T11032] bridge_slave_1: left allmulticast mode [ 454.431968][T11032] bridge_slave_1: left promiscuous mode [ 454.469250][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.599286][T11032] bond0: (slave bond_slave_0): Releasing backup interface [ 454.630707][T11032] bond0: (slave bond_slave_1): Releasing backup interface [ 454.889000][T11032] team0: Port device team_slave_0 removed [ 455.118738][T11046] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1157'. [ 455.135641][T11032] team0: Port device team_slave_1 removed [ 455.144059][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.154551][T11032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.167633][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.178462][T11032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.190401][ T43] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 455.206826][T11032] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 455.227015][T11032] batman_adv: batadv0: Removing interface: ip6gretap1 [ 455.412683][ T43] usb 10-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 455.464217][ T43] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 456.223982][T11056] syz.8.1158 (11056): drop_caches: 2 [ 456.279207][ T43] usb 10-1: New USB device found, idVendor=0b94, idProduct=1320, bcdDevice= 0.00 [ 456.288729][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.301932][ T43] usb 10-1: config 0 descriptor?? [ 456.578151][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.768932][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.120128][ T30] audit: type=1400 audit(1755298844.715:1156): avc: denied { read } for pid=11063 comm="syz.6.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 458.288308][ T43] usb 10-1: string descriptor 0 read error: -71 [ 458.341240][ T43] usb 10-1: USB disconnect, device number 15 [ 459.598357][T11098] : entered promiscuous mode [ 460.036088][T11110] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1175'. [ 460.208517][ T30] audit: type=1400 audit(1755298847.805:1157): avc: denied { read write } for pid=11105 comm="syz.8.1174" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 460.265517][ T30] audit: type=1400 audit(1755298847.805:1158): avc: denied { open } for pid=11105 comm="syz.8.1174" path="/123/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 461.270394][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 461.270453][ T5860] Bluetooth: hci3: Malformed LE Event: 0x0d [ 462.146931][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1185'. [ 462.325921][T11152] netlink: 308 bytes leftover after parsing attributes in process `syz.8.1186'. [ 464.481653][T11173] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1190'. [ 464.651781][ T30] audit: type=1400 audit(1755298852.255:1159): avc: denied { setopt } for pid=11177 comm="syz.7.1193" lport=43095 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 465.029349][T11181] syz.0.1194: attempt to access beyond end of device [ 465.029349][T11181] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 465.044292][T11181] gfs2: error -5 reading superblock [ 465.550673][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 465.550706][ T5860] Bluetooth: hci3: Malformed LE Event: 0x0d [ 466.805747][T11222] syz.8.1202: attempt to access beyond end of device [ 466.805747][T11222] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 466.819062][T11222] gfs2: error -5 reading superblock [ 469.766818][T11257] overlayfs: failed to resolve './file0': -2 [ 469.814336][ T30] audit: type=1400 audit(1755298857.405:1160): avc: denied { mount } for pid=11252 comm="syz.8.1214" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 469.844322][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 469.974418][ T30] audit: type=1400 audit(1755298857.405:1161): avc: denied { remount } for pid=11252 comm="syz.8.1214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 470.178356][ T30] audit: type=1400 audit(1755298857.625:1162): avc: denied { write } for pid=11252 comm="syz.8.1214" lport=54158 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 472.520220][ T30] audit: type=1400 audit(1755298860.085:1163): avc: denied { unmount } for pid=8234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 474.374724][T11291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.641036][T11291] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 474.704122][T11291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 474.750110][T11291] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 474.816551][ T30] audit: type=1400 audit(1755298862.415:1164): avc: denied { ioctl } for pid=11310 comm="syz.8.1232" path="socket:[36973]" dev="sockfs" ino=36973 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 474.830332][T11291] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 475.015688][T11291] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 475.034831][T11291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 475.048496][T11291] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 476.135458][ T30] audit: type=1400 audit(1755298863.735:1165): avc: denied { write } for pid=11330 comm="syz.6.1238" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 476.211400][ T30] audit: type=1400 audit(1755298863.815:1166): avc: denied { listen } for pid=11333 comm="syz.8.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 476.246369][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.266419][T11334] bond0: (slave rose0): Enslaving as an active interface with an up link [ 477.833122][ T30] audit: type=1400 audit(1755298865.375:1167): avc: denied { write } for pid=11343 comm="syz.8.1240" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 480.314590][ T30] audit: type=1400 audit(1755298867.905:1168): avc: denied { setattr } for pid=11397 comm="syz.6.1251" name="NETLINK" dev="sockfs" ino=38060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 480.401721][ T30] audit: type=1400 audit(1755298867.905:1169): avc: denied { map } for pid=11397 comm="syz.6.1251" path="socket:[38064]" dev="sockfs" ino=38064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.795737][T11418] syz.6.1253: attempt to access beyond end of device [ 480.795737][T11418] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 480.817015][T11418] gfs2: error -5 reading superblock [ 481.590098][ T43] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 481.733904][ T43] usb 10-1: device descriptor read/64, error -71 [ 482.390327][ T43] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 482.399299][ T30] audit: type=1400 audit(1755298869.995:1170): avc: denied { mount } for pid=11447 comm="syz.6.1263" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 482.406708][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.440423][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.459303][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.489974][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.514937][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.590219][ T43] usb 10-1: device descriptor read/64, error -71 [ 482.607058][T11458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.698375][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.712568][ T43] usb usb10-port1: attempt power cycle [ 482.822692][ T5905] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 482.835953][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.858423][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.898601][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.923361][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1265'. [ 482.923543][ T5859] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 482.966219][ T5859] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 483.004270][ T5905] usb 7-1: config 0 has no interfaces? [ 483.020893][ T5905] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 483.049964][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.080184][ T43] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 483.081836][ T5905] usb 7-1: config 0 descriptor?? [ 483.143972][ T43] usb 10-1: device descriptor read/8, error -71 [ 483.329394][ T30] audit: type=1400 audit(1755298870.925:1171): avc: denied { read write } for pid=11447 comm="syz.6.1263" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 483.349121][ T5905] usb 7-1: USB disconnect, device number 17 [ 483.357748][ T30] audit: type=1400 audit(1755298870.925:1172): avc: denied { open } for pid=11447 comm="syz.6.1263" path="/142/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 483.410222][ T43] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 483.440486][ T43] usb 10-1: device descriptor read/8, error -71 [ 483.551395][ T43] usb usb10-port1: unable to enumerate USB device [ 483.767424][T11475] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 483.851810][T11477] FAULT_INJECTION: forcing a failure. [ 483.851810][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 483.868917][T11477] CPU: 1 UID: 0 PID: 11477 Comm: syz.7.1269 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 483.868943][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.868953][T11477] Call Trace: [ 483.868959][T11477] [ 483.868966][T11477] dump_stack_lvl+0x16c/0x1f0 [ 483.868989][T11477] should_fail_ex+0x512/0x640 [ 483.869007][T11477] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 483.869029][T11477] should_failslab+0xc2/0x120 [ 483.869054][T11477] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 483.869072][T11477] ? __alloc_skb+0x2b2/0x380 [ 483.869103][T11477] __alloc_skb+0x2b2/0x380 [ 483.869128][T11477] ? __pfx___alloc_skb+0x10/0x10 [ 483.869157][T11477] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 483.869181][T11477] netlink_alloc_large_skb+0x69/0x130 [ 483.869201][T11477] netlink_sendmsg+0x6a1/0xdd0 [ 483.869224][T11477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.869253][T11477] ____sys_sendmsg+0xa95/0xc70 [ 483.869276][T11477] ? copy_msghdr_from_user+0x10a/0x160 [ 483.869293][T11477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.869327][T11477] ___sys_sendmsg+0x134/0x1d0 [ 483.869347][T11477] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.869386][T11477] ? __mutex_unlock_slowpath+0x100/0x800 [ 483.869413][T11477] __sys_sendmsg+0x16d/0x220 [ 483.869431][T11477] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.869464][T11477] do_syscall_64+0xcd/0x4c0 [ 483.869485][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.869503][T11477] RIP: 0033:0x7fb389b8ebe9 [ 483.869517][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.869535][T11477] RSP: 002b:00007fb387dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.869554][T11477] RAX: ffffffffffffffda RBX: 00007fb389db5fa0 RCX: 00007fb389b8ebe9 [ 483.869565][T11477] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 483.869576][T11477] RBP: 00007fb387dee090 R08: 0000000000000000 R09: 0000000000000000 [ 483.869586][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.869597][T11477] R13: 00007fb389db6038 R14: 00007fb389db5fa0 R15: 00007ffcd4230298 [ 483.869621][T11477] [ 484.118442][ T30] audit: type=1400 audit(1755298871.715:1173): avc: denied { unmount } for pid=8235 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 485.970066][ T5905] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 486.130148][ T5905] usb 10-1: Using ep0 maxpacket: 32 [ 486.142773][ T5905] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 486.154173][ T5905] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 486.168057][ T5905] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 486.184528][ T5905] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 486.198834][ T5905] usb 10-1: config 0 interface 0 has no altsetting 0 [ 486.214303][ T5905] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 486.225708][ T5905] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 486.235265][ T5905] usb 10-1: Product: syz [ 486.242620][ T5905] usb 10-1: Manufacturer: syz [ 486.248796][ T5905] usb 10-1: SerialNumber: syz [ 486.258412][ T5905] usb 10-1: config 0 descriptor?? [ 486.272073][ T5905] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 486.287535][ T5905] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 486.936079][ T5905] usb 10-1: USB disconnect, device number 20 [ 486.946887][ T5905] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 488.564417][T11541] sd 0:0:1:0: PR command failed: 1026 [ 488.569952][T11541] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 488.576843][T11541] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 488.637482][ T30] audit: type=1400 audit(1755298876.145:1174): avc: denied { read } for pid=11535 comm="syz.9.1284" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 488.822390][ T30] audit: type=1400 audit(1755298876.155:1175): avc: denied { open } for pid=11535 comm="syz.9.1284" path="/135/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 488.846102][ T30] audit: type=1400 audit(1755298876.165:1176): avc: denied { ioctl } for pid=11535 comm="syz.9.1284" path="/135/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 489.420076][ T5980] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 489.572041][ T5980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.583314][ T5980] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.592492][ T5980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.607722][ T5980] usb 10-1: config 0 descriptor?? [ 490.023800][ T5980] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 490.037575][ T5980] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0007/input/input20 [ 490.163328][ T5980] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 490.415056][T11564] block device autoloading is deprecated and will be removed. [ 490.424070][T11564] syz.6.1292: attempt to access beyond end of device [ 490.424070][T11564] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 490.717751][T11572] syz.7.1294: attempt to access beyond end of device [ 490.717751][T11572] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 490.731064][T11572] gfs2: error -5 reading superblock [ 490.964163][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.976777][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.242702][ T30] audit: type=1400 audit(1755298878.835:1177): avc: denied { read } for pid=11574 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 491.597141][ T5932] usb 10-1: USB disconnect, device number 21 [ 492.157142][ T30] audit: type=1400 audit(1755298879.755:1178): avc: denied { unmount } for pid=8238 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 492.785767][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1301'. [ 494.042028][T11619] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1306'. [ 494.057057][T11619] netlink: 'syz.8.1306': attribute type 9 has an invalid length. [ 494.065273][T11619] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1306'. [ 494.240343][T11618] netlink: 'syz.9.1307': attribute type 20 has an invalid length. [ 494.275724][T11618] dvmrp17: entered allmulticast mode [ 494.282801][T11618] dvmrp17: left allmulticast mode [ 494.352123][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1306'. [ 494.570079][ T9] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 494.764489][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 494.780910][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 494.819127][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.842785][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.114875][T11625] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.134854][T11625] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.197455][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.278903][ T5932] usb 7-1: USB disconnect, device number 18 [ 497.806199][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1317'. [ 497.810414][T11672] syz.8.1318: attempt to access beyond end of device [ 497.810414][T11672] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 497.828814][T11672] gfs2: error -5 reading superblock [ 497.960123][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1317'. [ 498.377922][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1321'. [ 498.387690][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1321'. [ 498.656609][T11684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11684 comm=syz.6.1320 [ 498.782365][T11687] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1320'. [ 499.048741][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1320'. [ 499.131750][T11693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.316474][T11702] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1323'. [ 499.342174][ T30] audit: type=1400 audit(1755298886.935:1179): avc: denied { name_connect } for pid=11690 comm="syz.9.1323" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 499.927760][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1329'. [ 500.972604][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.651051][T11788] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1348'. [ 504.917373][T11793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 506.090323][ T5963] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 506.198055][ T5932] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 506.326016][ T5963] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 506.496965][ T5963] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 506.527758][ T5963] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.551340][ T5963] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.608335][T11801] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 506.619918][T11801] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 506.673587][ T5963] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.684655][ T5932] usb 7-1: Using ep0 maxpacket: 8 [ 506.769946][T11818] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 506.779488][T11818] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 506.832534][ T5932] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 506.845998][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 506.860291][ T5932] usb 7-1: Product: syz [ 506.879479][ T5932] usb 7-1: Manufacturer: syz [ 506.886150][ T5932] usb 7-1: SerialNumber: syz [ 506.896480][ T5932] usb 7-1: config 0 descriptor?? [ 508.821294][ T5932] usb 10-1: USB disconnect, device number 22 [ 509.862635][ T43] usb 7-1: USB disconnect, device number 19 [ 512.116037][T11878] FAULT_INJECTION: forcing a failure. [ 512.116037][T11878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.159584][T11878] CPU: 0 UID: 0 PID: 11878 Comm: syz.8.1372 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 512.159609][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.159626][T11878] Call Trace: [ 512.159632][T11878] [ 512.159639][T11878] dump_stack_lvl+0x16c/0x1f0 [ 512.159663][T11878] should_fail_ex+0x512/0x640 [ 512.159687][T11878] _copy_to_user+0x32/0xd0 [ 512.159712][T11878] simple_read_from_buffer+0xcb/0x170 [ 512.159733][T11878] proc_fail_nth_read+0x197/0x240 [ 512.159755][T11878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.159777][T11878] ? rw_verify_area+0xcf/0x6c0 [ 512.159803][T11878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.159827][T11878] vfs_read+0x1e1/0xcf0 [ 512.159848][T11878] ? __pfx___mutex_lock+0x10/0x10 [ 512.159868][T11878] ? __pfx_vfs_read+0x10/0x10 [ 512.159893][T11878] ? __fget_files+0x20e/0x3c0 [ 512.159920][T11878] ksys_read+0x12a/0x250 [ 512.159937][T11878] ? __pfx_ksys_read+0x10/0x10 [ 512.159955][T11878] ? fput+0x9b/0xd0 [ 512.159981][T11878] do_syscall_64+0xcd/0x4c0 [ 512.160002][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.160020][T11878] RIP: 0033:0x7f9ff638d5fc [ 512.160035][T11878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.160052][T11878] RSP: 002b:00007f9ff45f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.160070][T11878] RAX: ffffffffffffffda RBX: 00007f9ff65b5fa0 RCX: 00007f9ff638d5fc [ 512.160082][T11878] RDX: 000000000000000f RSI: 00007f9ff45f60a0 RDI: 0000000000000004 [ 512.160093][T11878] RBP: 00007f9ff45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 512.160103][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.160114][T11878] R13: 00007f9ff65b6038 R14: 00007f9ff65b5fa0 R15: 00007ffd0dd13b18 [ 512.160139][T11878] [ 512.910535][T11887] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 516.661234][ T8416] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 516.786027][T11930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11930 comm=syz.8.1386 [ 516.850144][ T8416] usb 10-1: device descriptor read/64, error -71 [ 516.857269][T11931] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1386'. [ 516.870645][T11931] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1386'. [ 517.244315][ T8416] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 517.640193][ T8416] usb 10-1: device descriptor read/64, error -71 [ 517.696464][T11944] FAULT_INJECTION: forcing a failure. [ 517.696464][T11944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.733407][T11944] CPU: 1 UID: 0 PID: 11944 Comm: syz.6.1391 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 517.733433][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.733444][T11944] Call Trace: [ 517.733450][T11944] [ 517.733458][T11944] dump_stack_lvl+0x16c/0x1f0 [ 517.733480][T11944] should_fail_ex+0x512/0x640 [ 517.733504][T11944] _copy_from_user+0x2e/0xd0 [ 517.733528][T11944] copy_msghdr_from_user+0x98/0x160 [ 517.733547][T11944] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 517.733578][T11944] ___sys_sendmsg+0xfe/0x1d0 [ 517.733598][T11944] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.733637][T11944] ? __mutex_unlock_slowpath+0x100/0x800 [ 517.733665][T11944] __sys_sendmsg+0x16d/0x220 [ 517.733683][T11944] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.733718][T11944] do_syscall_64+0xcd/0x4c0 [ 517.733739][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.733757][T11944] RIP: 0033:0x7f95f338ebe9 [ 517.733772][T11944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.733796][T11944] RSP: 002b:00007f95f41d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.733814][T11944] RAX: ffffffffffffffda RBX: 00007f95f35b5fa0 RCX: 00007f95f338ebe9 [ 517.733826][T11944] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 517.733837][T11944] RBP: 00007f95f41d5090 R08: 0000000000000000 R09: 0000000000000000 [ 517.733848][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.733858][T11944] R13: 00007f95f35b6038 R14: 00007f95f35b5fa0 R15: 00007ffcba4a6cd8 [ 517.733882][T11944] [ 517.903355][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.921021][ T8416] usb usb10-port1: attempt power cycle [ 518.310081][ T8416] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 518.373502][ T8416] usb 10-1: device descriptor read/8, error -71 [ 521.130350][ T5963] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 521.324364][ T5963] usb 10-1: Using ep0 maxpacket: 8 [ 521.340367][ T5963] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 521.349559][ T5963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.378918][ T5963] usb 10-1: Product: syz [ 521.389682][ T5963] usb 10-1: Manufacturer: syz [ 521.398012][ T5963] usb 10-1: SerialNumber: syz [ 521.455630][ T5963] usb 10-1: config 0 descriptor?? [ 521.922374][ T5963] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 521.958173][T11975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.966787][T11975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.522283][ T5963] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 522.562243][ T5963] usb 10-1: USB disconnect, device number 27 [ 523.240099][ T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 523.335165][ T30] audit: type=1326 audit(1755298910.925:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 523.366205][T12024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 523.442999][ T30] audit: type=1326 audit(1755298910.925:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 523.500484][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 523.535645][ T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 523.567140][ T43] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 523.577454][ T43] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 523.590653][ T30] audit: type=1326 audit(1755298910.925:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 523.591876][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.625385][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 523.633924][ T43] usb 7-1: SerialNumber: syz [ 523.649963][T12017] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 523.681053][ T30] audit: type=1326 audit(1755298910.925:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 524.232796][ T30] audit: type=1326 audit(1755298910.925:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 524.257056][ T30] audit: type=1326 audit(1755298910.925:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 524.284289][ T30] audit: type=1326 audit(2000000000.000:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 524.308295][ T30] audit: type=1326 audit(2000000000.000:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 524.332140][ T30] audit: type=1326 audit(2000000000.000:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 524.356152][ T30] audit: type=1326 audit(2000000000.000:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.9.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f811718ebe9 code=0x7ffc0000 [ 525.603083][T12042] syz.7.1418: attempt to access beyond end of device [ 525.603083][T12042] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 525.629317][T12042] syz.7.1418: attempt to access beyond end of device [ 525.629317][T12042] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 525.659537][T12042] Mount JFS Failure: -5 [ 527.115244][ T43] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 527.236719][ T43] usb 7-1: USB disconnect, device number 20 [ 528.100416][ T43] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 528.151150][T12068] binder: BINDER_SET_CONTEXT_MGR already set [ 528.158879][T12068] binder: 12067:12068 ioctl 4018620d 200000000040 returned -16 [ 528.189764][T12068] binder: 12067:12068 ioctl c0286405 200000003a80 returned -22 [ 528.312753][ T43] usb 7-1: device descriptor read/64, error -71 [ 528.550226][ T43] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 528.770121][ T43] usb 7-1: device descriptor read/64, error -71 [ 529.100070][ T43] usb usb7-port1: attempt power cycle [ 529.433990][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 529.434009][ T30] audit: type=1400 audit(2000000006.100:1239): avc: denied { connect } for pid=12084 comm="syz.7.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 529.469439][ T30] audit: type=1400 audit(2000000006.100:1240): avc: denied { read } for pid=12084 comm="syz.7.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 529.644769][ T30] audit: type=1326 audit(2000000006.310:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 529.671304][ T30] audit: type=1326 audit(2000000006.310:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 529.694836][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.706796][ T43] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 529.708057][ T30] audit: type=1326 audit(2000000006.330:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 529.739303][ T30] audit: type=1326 audit(2000000006.330:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 529.762775][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.769415][ T30] audit: type=1326 audit(2000000006.330:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 529.797486][ T43] usb 7-1: device descriptor read/8, error -71 [ 529.797696][ T30] audit: type=1326 audit(2000000006.340:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 529.827109][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.897290][ T30] audit: type=1326 audit(2000000006.340:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 529.944503][ T30] audit: type=1326 audit(2000000006.340:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb389b8ebe9 code=0x7ffc0000 [ 530.755679][T12109] netlink: 'syz.0.1437': attribute type 6 has an invalid length. [ 530.764150][T12109] netlink: 'syz.0.1437': attribute type 6 has an invalid length. [ 532.860322][ T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 533.235633][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 533.258668][T12142] ceph: No mds server is up or the cluster is laggy [ 533.268779][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 533.390049][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 533.397643][ T43] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 533.407372][ T43] usb 7-1: config 0 has no interface number 0 [ 533.413761][ T43] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.425130][ T43] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 533.437219][ T43] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.448978][ T43] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 533.462884][ T43] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 533.471997][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.500028][ T43] usb 7-1: config 0 descriptor?? [ 534.459184][ T43] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 534.781432][ T43] usb 7-1: USB disconnect, device number 25 [ 534.803794][ T43] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 534.829357][T12158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12158 comm=syz.9.1450 [ 534.848558][T12158] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1450'. [ 534.863923][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1450'. [ 534.934620][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 534.934634][ T30] audit: type=1400 audit(2000000011.600:1267): avc: denied { setopt } for pid=12161 comm="syz.7.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 535.664497][T12173] overlay: Unknown parameter 'smackfsroot' [ 535.697401][T12173] sg_write: process 630 (syz.6.1456) changed security contexts after opening file descriptor, this is not allowed. [ 536.151186][ T30] audit: type=1400 audit(2000000012.820:1268): avc: denied { listen } for pid=12177 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 536.180908][ T30] audit: type=1400 audit(2000000012.850:1269): avc: denied { accept } for pid=12177 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 536.662897][ T30] audit: type=1400 audit(2000000013.190:1270): avc: denied { write } for pid=12177 comm="syz.0.1458" dev="sockfs" ino=39787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 536.711976][ T30] audit: type=1400 audit(2000000013.200:1271): avc: denied { setattr } for pid=12177 comm="syz.0.1458" name="AX25" dev="sockfs" ino=39787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 536.753283][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1462'. [ 536.878812][ T30] audit: type=1400 audit(2000000013.540:1272): avc: denied { connect } for pid=12202 comm="syz.6.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 537.141224][ T5905] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 537.324221][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.335682][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.351862][ T5905] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 537.362439][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.374327][ T5905] usb 10-1: config 0 descriptor?? [ 537.789406][ T5905] hid_parser_main: 5 callbacks suppressed [ 537.789427][ T5905] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 537.804505][ T5905] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 537.821827][ T5905] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 537.829327][ T5905] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 537.839382][ T5905] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 537.858118][ T5905] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 537.867807][ T5905] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 537.884341][ T5905] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 537.960249][ T5980] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 538.008065][ T5905] steelseries 0003:1038:12B6.0008: hid_hw_raw_request() failed with -71 [ 538.026174][ T5905] usb 10-1: USB disconnect, device number 28 [ 538.129369][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.200150][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.210452][ T5980] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.295704][ T5980] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.310074][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.339468][ T5980] usb 7-1: config 0 descriptor?? [ 539.188800][ T5980] usbhid 7-1:0.0: can't add hid device: -71 [ 539.199433][ T5980] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 539.236213][ T5980] usb 7-1: USB disconnect, device number 26 [ 540.026803][T12233] syzkaller1: entered promiscuous mode [ 540.032401][T12233] syzkaller1: entered allmulticast mode [ 540.186023][T12232] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1474'. [ 540.198780][T12237] overlayfs: failed to resolve './file1': -2 [ 540.480322][ T5932] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 540.550564][T12232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12232 comm=syz.9.1474 [ 540.801960][ T5932] usb 7-1: config index 0 descriptor too short (expected 57198, got 36) [ 540.814327][ T5932] usb 7-1: config 101 has an invalid descriptor of length 187, skipping remainder of the config [ 540.944296][T12246] tipc: Enabled bearer , priority 0 [ 540.961516][T12246] wg1: mtu less than device minimum [ 541.037524][ T5932] usb 7-1: config 101 has no interfaces? [ 541.071878][ T5932] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.109871][ T5932] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 541.119629][ T5932] usb 7-1: Manufacturer: syz [ 541.136983][T12245] tipc: Disabling bearer [ 541.924384][T12264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12264 comm=syz.0.1483 [ 543.652478][ T5932] usb 7-1: USB disconnect, device number 27 [ 543.752583][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1490'. [ 543.981989][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1488'. [ 545.146594][T12305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12305 comm=syz.8.1497 [ 547.273491][T12325] Unsupported ieee802154 address type: 0 [ 547.349051][T12333] FAULT_INJECTION: forcing a failure. [ 547.349051][T12333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.369098][T12333] CPU: 0 UID: 0 PID: 12333 Comm: syz.7.1502 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 547.369125][T12333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.369136][T12333] Call Trace: [ 547.369143][T12333] [ 547.369150][T12333] dump_stack_lvl+0x16c/0x1f0 [ 547.369174][T12333] should_fail_ex+0x512/0x640 [ 547.369198][T12333] _copy_from_user+0x2e/0xd0 [ 547.369222][T12333] do_sock_getsockopt+0x3ca/0x440 [ 547.369246][T12333] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 547.369266][T12333] ? __fget_files+0x204/0x3c0 [ 547.369298][T12333] __sys_getsockopt+0x12f/0x260 [ 547.369321][T12333] __x64_sys_getsockopt+0xbd/0x160 [ 547.369337][T12333] ? do_syscall_64+0x91/0x4c0 [ 547.369356][T12333] ? lockdep_hardirqs_on+0x7c/0x110 [ 547.369373][T12333] do_syscall_64+0xcd/0x4c0 [ 547.369394][T12333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.369412][T12333] RIP: 0033:0x7fb389b8ebe9 [ 547.369427][T12333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.369448][T12333] RSP: 002b:00007fb387dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 547.369469][T12333] RAX: ffffffffffffffda RBX: 00007fb389db5fa0 RCX: 00007fb389b8ebe9 [ 547.369480][T12333] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000005 [ 547.369491][T12333] RBP: 00007fb387dee090 R08: 0000200000000100 R09: 0000000000000000 [ 547.369502][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.369513][T12333] R13: 00007fb389db6038 R14: 00007fb389db5fa0 R15: 00007ffcd4230298 [ 547.369538][T12333] [ 547.532353][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.150887][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1506'. [ 548.175302][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1506'. [ 548.293106][T12354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12354 comm=syz.8.1509 [ 549.035359][T12363] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1509'. [ 549.047033][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1509'. [ 549.904495][T12373] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 552.781775][T12414] netlink: 308 bytes leftover after parsing attributes in process `syz.7.1524'. [ 559.299681][T12502] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1548'. [ 559.310095][T12502] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1548'. [ 559.322025][T12502] netlink: 'syz.7.1548': attribute type 5 has an invalid length. [ 559.340177][T12502] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1548'. [ 560.275065][T12511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12511 comm=syz.8.1551 [ 560.380815][T12514] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1551'. [ 560.440623][T12514] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1551'. [ 560.542491][T12521] syz.6.1555: attempt to access beyond end of device [ 560.542491][T12521] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 560.555894][T12521] gfs2: error -5 reading superblock [ 560.788700][ T30] audit: type=1400 audit(2000000037.440:1273): avc: denied { map } for pid=12515 comm="syz.9.1553" path="socket:[41672]" dev="sockfs" ino=41672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 560.832066][T12519] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1554'. [ 562.405070][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.855502][T12548] gretap1: entered promiscuous mode [ 564.130938][T12564] FAULT_INJECTION: forcing a failure. [ 564.130938][T12564] name failslab, interval 1, probability 0, space 0, times 0 [ 564.188919][T12564] CPU: 0 UID: 0 PID: 12564 Comm: syz.8.1566 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 564.188951][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.188962][T12564] Call Trace: [ 564.188968][T12564] [ 564.188975][T12564] dump_stack_lvl+0x16c/0x1f0 [ 564.188999][T12564] should_fail_ex+0x512/0x640 [ 564.189018][T12564] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 564.189040][T12564] should_failslab+0xc2/0x120 [ 564.189060][T12564] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 564.189079][T12564] ? __alloc_skb+0x2b2/0x380 [ 564.189110][T12564] __alloc_skb+0x2b2/0x380 [ 564.189136][T12564] ? __pfx___alloc_skb+0x10/0x10 [ 564.189163][T12564] ? genl_rcv_msg+0x4b0/0x800 [ 564.189183][T12564] ? genl_rcv_msg+0x4bb/0x800 [ 564.189212][T12564] netlink_ack+0x15d/0xb80 [ 564.189240][T12564] netlink_rcv_skb+0x332/0x420 [ 564.189259][T12564] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.189282][T12564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.189318][T12564] ? netlink_deliver_tap+0x1ae/0xd30 [ 564.189340][T12564] genl_rcv+0x28/0x40 [ 564.189359][T12564] netlink_unicast+0x5aa/0x870 [ 564.189382][T12564] ? __pfx_netlink_unicast+0x10/0x10 [ 564.189403][T12564] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 564.189429][T12564] netlink_sendmsg+0x8d1/0xdd0 [ 564.189453][T12564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.189483][T12564] ____sys_sendmsg+0xa95/0xc70 [ 564.189506][T12564] ? copy_msghdr_from_user+0x10a/0x160 [ 564.189525][T12564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.189559][T12564] ___sys_sendmsg+0x134/0x1d0 [ 564.189579][T12564] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.189627][T12564] ? __mutex_unlock_slowpath+0x100/0x800 [ 564.189655][T12564] __sys_sendmsg+0x16d/0x220 [ 564.189674][T12564] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.189709][T12564] do_syscall_64+0xcd/0x4c0 [ 564.189729][T12564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.189747][T12564] RIP: 0033:0x7f9ff638ebe9 [ 564.189762][T12564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.189778][T12564] RSP: 002b:00007f9ff45f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.189796][T12564] RAX: ffffffffffffffda RBX: 00007f9ff65b5fa0 RCX: 00007f9ff638ebe9 [ 564.189807][T12564] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 564.189817][T12564] RBP: 00007f9ff45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 564.189828][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.189838][T12564] R13: 00007f9ff65b6038 R14: 00007f9ff65b5fa0 R15: 00007ffd0dd13b18 [ 564.189863][T12564] [ 564.582051][T12567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12567 comm=syz.0.1567 [ 564.628996][T12570] binder: 12568:12570 ioctl c0286405 200000003a80 returned -22 [ 564.664316][T12571] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1569'. [ 564.713096][T12572] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1567'. [ 564.749269][T12572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1567'. [ 564.950910][T12583] netlink: 'syz.9.1574': attribute type 58 has an invalid length. [ 564.975751][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1574'. [ 565.311911][T12596] netlink: 'wÞ£ÿ': attribute type 322 has an invalid length. [ 565.379304][ T30] audit: type=1804 audit(2000000042.040:1274): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm=77DEA305FF07 name="/newroot/193/file0" dev="tmpfs" ino=1049 res=1 errno=0 [ 565.433198][ T30] audit: type=1800 audit(2000000042.040:1275): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm=77DEA305FF07 name="file0" dev="tmpfs" ino=1049 res=0 errno=0 [ 565.958719][ T30] audit: type=1400 audit(2000000042.500:1276): avc: denied { ioctl } for pid=12600 comm="syz.0.1582" path="socket:[42722]" dev="sockfs" ino=42722 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 565.962288][T12605] binder: BINDER_SET_CONTEXT_MGR already set [ 566.003253][T12605] binder: 12603:12605 ioctl 4018620d 200000000040 returned -16 [ 566.035740][T12605] binder: 12603:12605 ioctl c0286405 200000003a80 returned -22 [ 566.265558][T12617] syz.6.1587: attempt to access beyond end of device [ 566.265558][T12617] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 566.280675][T12617] gfs2: error -5 reading superblock [ 566.300268][ T5980] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 566.852174][ T5980] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 566.887122][ T5980] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 567.013658][ T5980] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 567.022819][ T5980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.075757][T12609] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 567.084132][T12609] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 567.102786][ T5980] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.489305][T12646] binder: 12645:12646 ioctl c0286405 200000003a80 returned -22 [ 569.435767][ T5905] usb 10-1: USB disconnect, device number 29 [ 570.021704][ T5932] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 570.203042][ T5932] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 570.235712][ T5932] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 570.537371][ T5932] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.564377][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.665481][T12659] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 570.675742][T12659] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 570.723264][ T5932] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.916370][T12676] SELinux: failed to load policy [ 573.859154][ T9] usb 7-1: USB disconnect, device number 28 [ 574.847899][T12717] syz.7.1610: attempt to access beyond end of device [ 574.847899][T12717] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 574.861494][T12717] gfs2: error -5 reading superblock [ 576.693947][T12741] netlink: 'syz.6.1618': attribute type 6 has an invalid length. [ 576.709875][T12743] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1619'. [ 576.958311][T12747] loop4: detected capacity change from 0 to 7 [ 577.128566][T12747] Dev loop4: unable to read RDB block 7 [ 577.135083][T12747] loop4: unable to read partition table [ 577.143043][T12747] loop4: partition table beyond EOD, truncated [ 577.149363][T12747] loop_reread_partitions: partition scan of loop4 (Êô«xÝ—ŸÑà– ) failed (rc=-5) [ 577.375033][ T30] audit: type=1400 audit(2000000054.000:1277): avc: denied { accept } for pid=12749 comm="syz.8.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 578.127636][ T30] audit: type=1400 audit(2000000054.790:1278): avc: denied { read } for pid=12766 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 578.227255][ T30] audit: type=1400 audit(2000000054.890:1279): avc: denied { connect } for pid=12769 comm="syz.7.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 578.519113][ T30] audit: type=1400 audit(2000000055.180:1280): avc: denied { getopt } for pid=12769 comm="syz.7.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 579.920606][ T5905] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 580.081877][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.102830][ T5905] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 580.117081][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.157137][ T5905] usb 10-1: config 0 descriptor?? [ 580.998588][ T5905] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 581.012325][ T5905] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0009/input/input21 [ 581.155323][ T5905] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 581.325116][T12801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.333884][T12801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.813284][ T5932] usb 10-1: USB disconnect, device number 30 [ 583.860100][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 583.881057][T12825] netlink: 'syz.0.1639': attribute type 15 has an invalid length. [ 584.041696][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1641'. [ 584.149894][ T30] audit: type=1400 audit(2000000060.770:1281): avc: denied { map } for pid=12821 comm="syz.6.1641" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 584.279086][T12825] vxlan2: entered promiscuous mode [ 584.362177][ T30] audit: type=1400 audit(2000000060.770:1282): avc: denied { execute } for pid=12821 comm="syz.6.1641" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 584.657098][T12839] binder: 12835:12839 ioctl c0286405 200000003a80 returned -22 [ 584.664898][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 584.900386][ T5932] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 584.923172][T12848] Bluetooth: MGMT ver 1.23 [ 585.142218][ T5932] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 585.164747][ T5932] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 585.176518][ T5932] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.198088][ T5932] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.209428][ T30] audit: type=1400 audit(2000000061.870:1283): avc: denied { getopt } for pid=12852 comm="syz.6.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 585.251145][T12840] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 585.258381][T12840] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 585.358167][ T5932] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.616609][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1653'. [ 586.678455][T12874] trusted_key: syz.0.1654 sent an empty control message without MSG_MORE. [ 587.981830][T12895] FAULT_INJECTION: forcing a failure. [ 587.981830][T12895] name failslab, interval 1, probability 0, space 0, times 0 [ 588.016908][T12895] CPU: 0 UID: 0 PID: 12895 Comm: syz.0.1661 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 588.016933][T12895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.016943][T12895] Call Trace: [ 588.016949][T12895] [ 588.016956][T12895] dump_stack_lvl+0x16c/0x1f0 [ 588.016978][T12895] should_fail_ex+0x512/0x640 [ 588.017001][T12895] should_failslab+0xc2/0x120 [ 588.017022][T12895] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 588.017042][T12895] ? skb_clone+0x190/0x3f0 [ 588.017064][T12895] skb_clone+0x190/0x3f0 [ 588.017083][T12895] netlink_deliver_tap+0xabd/0xd30 [ 588.017106][T12895] netlink_unicast+0x71f/0x870 [ 588.017130][T12895] ? __pfx_netlink_unicast+0x10/0x10 [ 588.017147][T12895] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 588.017177][T12895] netlink_ack+0x696/0xb80 [ 588.017204][T12895] netlink_rcv_skb+0x332/0x420 [ 588.017223][T12895] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.017244][T12895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.017273][T12895] ? netlink_deliver_tap+0x1ae/0xd30 [ 588.017297][T12895] netlink_unicast+0x5aa/0x870 [ 588.017320][T12895] ? __pfx_netlink_unicast+0x10/0x10 [ 588.017340][T12895] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 588.017367][T12895] netlink_sendmsg+0x8d1/0xdd0 [ 588.017391][T12895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.017420][T12895] ____sys_sendmsg+0xa95/0xc70 [ 588.017445][T12895] ? copy_msghdr_from_user+0x10a/0x160 [ 588.017463][T12895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.017498][T12895] ___sys_sendmsg+0x134/0x1d0 [ 588.017518][T12895] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.017560][T12895] ? __mutex_unlock_slowpath+0x100/0x800 [ 588.017587][T12895] __sys_sendmsg+0x16d/0x220 [ 588.017605][T12895] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.017640][T12895] do_syscall_64+0xcd/0x4c0 [ 588.017661][T12895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.017679][T12895] RIP: 0033:0x7fbf2878ebe9 [ 588.017694][T12895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.017710][T12895] RSP: 002b:00007fbf2953c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.017727][T12895] RAX: ffffffffffffffda RBX: 00007fbf289b5fa0 RCX: 00007fbf2878ebe9 [ 588.017739][T12895] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 588.017749][T12895] RBP: 00007fbf2953c090 R08: 0000000000000000 R09: 0000000000000000 [ 588.017760][T12895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.017770][T12895] R13: 00007fbf289b6038 R14: 00007fbf289b5fa0 R15: 00007ffecdbaa4f8 [ 588.017795][T12895] [ 588.294166][ T5932] usb 10-1: USB disconnect, device number 31 [ 588.583424][T12905] netlink: 308 bytes leftover after parsing attributes in process `syz.7.1663'. [ 589.740409][ T5932] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 589.919202][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.934902][ T5932] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 589.940566][ T8416] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 589.951151][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.998763][ T5932] usb 7-1: config 0 descriptor?? [ 590.149356][ T8416] usb 10-1: Using ep0 maxpacket: 32 [ 590.177003][ T8416] usb 10-1: config 0 interface 0 has no altsetting 0 [ 590.262463][ T8416] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 590.278702][ T30] audit: type=1400 audit(2000000066.910:1284): avc: denied { setopt } for pid=12925 comm="syz.8.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 590.302093][ T8416] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.430738][ T8416] usb 10-1: Product: syz [ 590.435003][ T8416] usb 10-1: Manufacturer: syz [ 590.466114][ T8416] usb 10-1: SerialNumber: syz [ 590.487204][ T5932] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 590.487261][ T8416] usb 10-1: config 0 descriptor?? [ 590.546488][ T5932] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000A/input/input22 [ 590.785586][ T5932] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 590.969837][ T8416] gs_usb 10-1:0.0: Configuring for 122 interfaces [ 590.979224][ T8416] gs_usb 10-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 591.103875][ T8416] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -22 [ 591.173092][ T30] audit: type=1400 audit(2000000067.840:1285): avc: denied { getopt } for pid=12915 comm="syz.9.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 591.263335][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.273340][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.302309][ T5905] usb 7-1: USB disconnect, device number 29 [ 591.364366][ T8416] usb 10-1: USB disconnect, device number 32 [ 592.666897][T12956] FAULT_INJECTION: forcing a failure. [ 592.666897][T12956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.687449][T12956] CPU: 1 UID: 0 PID: 12956 Comm: syz.9.1682 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 592.687474][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.687485][T12956] Call Trace: [ 592.687491][T12956] [ 592.687498][T12956] dump_stack_lvl+0x16c/0x1f0 [ 592.687521][T12956] should_fail_ex+0x512/0x640 [ 592.687545][T12956] _copy_from_user+0x2e/0xd0 [ 592.687576][T12956] kstrtouint_from_user+0xd6/0x1d0 [ 592.687593][T12956] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 592.687609][T12956] ? __lock_acquire+0xb97/0x1ce0 [ 592.687648][T12956] proc_fail_nth_write+0x83/0x220 [ 592.687670][T12956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 592.687697][T12956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 592.687716][T12956] vfs_write+0x29d/0x11d0 [ 592.687738][T12956] ? __pfx___mutex_lock+0x10/0x10 [ 592.687757][T12956] ? __pfx_vfs_write+0x10/0x10 [ 592.687782][T12956] ? __fget_files+0x20e/0x3c0 [ 592.687809][T12956] ksys_write+0x12a/0x250 [ 592.687827][T12956] ? __pfx_ksys_write+0x10/0x10 [ 592.687852][T12956] do_syscall_64+0xcd/0x4c0 [ 592.687874][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.687891][T12956] RIP: 0033:0x7f811718d69f [ 592.687905][T12956] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 592.687922][T12956] RSP: 002b:00007f8117f2e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 592.687938][T12956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f811718d69f [ 592.687950][T12956] RDX: 0000000000000001 RSI: 00007f8117f2e0a0 RDI: 0000000000000004 [ 592.687960][T12956] RBP: 00007f8117f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 592.687970][T12956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 592.687981][T12956] R13: 00007f81173b6038 R14: 00007f81173b5fa0 R15: 00007fffd2034698 [ 592.688006][T12956] [ 592.865711][T12952] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1680'. [ 593.688782][T12972] ptrace attach of "./syz-executor exec"[8234] was attempted by "./syz-executor exec"[12972] [ 593.816791][ T30] audit: type=1800 audit(2000000070.240:1286): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1687" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 595.220729][ T5905] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 595.440372][ T5905] usb 10-1: Using ep0 maxpacket: 16 [ 595.446793][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.458519][ T5905] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 595.468074][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.481946][ T5905] usb 10-1: config 0 descriptor?? [ 596.010907][ T5905] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 596.480600][ T5932] usb 10-1: USB disconnect, device number 33 [ 597.224133][ T30] audit: type=1400 audit(2000000073.890:1287): avc: denied { listen } for pid=13014 comm="syz.6.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 598.160681][ T8416] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 598.343161][ T8416] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 598.567287][ T8416] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 598.593753][ T8416] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 599.557650][ T8416] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.825689][T13024] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 599.890853][T13024] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 599.988243][ T8416] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.544332][ T8416] usb 10-1: USB disconnect, device number 34 [ 603.095452][T13077] netlink: 308 bytes leftover after parsing attributes in process `syz.9.1717'. [ 604.779160][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1726'. [ 604.789599][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1726'. [ 604.999604][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 606.697392][ T30] audit: type=1400 audit(2000000083.360:1288): avc: denied { mounton } for pid=13133 comm="syz.9.1735" path="/proc/766/task" dev="proc" ino=44029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 606.720054][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.833132][ T3554] Bluetooth: hci0: Frame reassembly failed (-84) [ 607.558058][T13149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13149 comm=syz.6.1739 [ 607.642478][T13150] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1739'. [ 607.651634][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1739'. [ 608.730180][ T5860] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 608.940028][ T5963] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 609.103434][ T5963] usb 7-1: Using ep0 maxpacket: 16 [ 609.134321][ T5963] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.176487][ T5963] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.218463][ T5963] usb 7-1: config 0 interface 0 has no altsetting 0 [ 609.275547][ T5963] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 609.343195][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.421675][ T5963] usb 7-1: config 0 descriptor?? [ 610.091275][ T5963] cougar 0003:060B:500A.000C: unexpected long global item [ 610.098934][ T5963] cougar 0003:060B:500A.000C: parse failed [ 610.109850][ T5963] cougar 0003:060B:500A.000C: probe with driver cougar failed with error -22 [ 610.189852][ T5905] usb 7-1: USB disconnect, device number 30 [ 610.280281][T13189] 9pnet_fd: Insufficient options for proto=fd [ 610.800698][ T5963] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 610.832080][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1754'. [ 610.960722][ T5963] usb 10-1: Using ep0 maxpacket: 16 [ 610.971453][ T5963] usb 10-1: unable to get BOS descriptor or descriptor too short [ 610.987320][ T5963] usb 10-1: config 3 has an invalid interface number: 22 but max is 0 [ 610.997066][ T5963] usb 10-1: config 3 has no interface number 0 [ 611.006252][ T5963] usb 10-1: config 3 interface 22 has no altsetting 0 [ 611.015982][ T5963] usb 10-1: New USB device found, idVendor=093a, idProduct=2608, bcdDevice=c2.57 [ 611.095633][ T5963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.120863][ T5963] usb 10-1: Product: syz [ 611.125263][ T5963] usb 10-1: Manufacturer: syz [ 611.134403][ T5963] usb 10-1: SerialNumber: syz [ 611.315864][T13206] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1759'. [ 611.358003][ T5963] gspca_main: pac7311-2.14.0 probing 093a:2608 [ 611.372293][ T5963] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 611.387941][ T5963] pac7311 10-1:3.22: probe with driver pac7311 failed with error -71 [ 611.400368][ T5963] usb 10-1: USB disconnect, device number 35 [ 611.536064][T13210] netlink: 'syz.0.1760': attribute type 12 has an invalid length. [ 612.883197][T13224] syz.6.1764: attempt to access beyond end of device [ 612.883197][T13224] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 612.897946][T13224] gfs2: error -5 reading superblock [ 613.256654][T13234] FAULT_INJECTION: forcing a failure. [ 613.256654][T13234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.270421][T13234] CPU: 0 UID: 0 PID: 13234 Comm: syz.7.1767 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 613.270445][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.270457][T13234] Call Trace: [ 613.270463][T13234] [ 613.270471][T13234] dump_stack_lvl+0x16c/0x1f0 [ 613.270493][T13234] should_fail_ex+0x512/0x640 [ 613.270516][T13234] _copy_from_user+0x2e/0xd0 [ 613.270540][T13234] ucma_listen+0x81/0x220 [ 613.270565][T13234] ? __pfx_ucma_listen+0x10/0x10 [ 613.270591][T13234] ? __pfx_ucma_listen+0x10/0x10 [ 613.270610][T13234] ucma_write+0x1fb/0x330 [ 613.270628][T13234] ? __pfx_ucma_write+0x10/0x10 [ 613.270646][T13234] ? bpf_lsm_file_permission+0x9/0x10 [ 613.270669][T13234] ? security_file_permission+0x71/0x210 [ 613.270696][T13234] ? rw_verify_area+0xcf/0x6c0 [ 613.270723][T13234] ? __pfx_ucma_write+0x10/0x10 [ 613.270741][T13234] vfs_write+0x29d/0x11d0 [ 613.270765][T13234] ? __pfx_vfs_write+0x10/0x10 [ 613.270781][T13234] ? find_held_lock+0x2b/0x80 [ 613.270803][T13234] ? __fget_files+0x204/0x3c0 [ 613.270827][T13234] ? __fget_files+0x20e/0x3c0 [ 613.270853][T13234] ksys_write+0x1f8/0x250 [ 613.270870][T13234] ? __pfx_ksys_write+0x10/0x10 [ 613.270896][T13234] do_syscall_64+0xcd/0x4c0 [ 613.270918][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.270937][T13234] RIP: 0033:0x7fb389b8ebe9 [ 613.270951][T13234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.270968][T13234] RSP: 002b:00007fb387dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 613.270986][T13234] RAX: ffffffffffffffda RBX: 00007fb389db6180 RCX: 00007fb389b8ebe9 [ 613.270998][T13234] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 613.271009][T13234] RBP: 00007fb387dac090 R08: 0000000000000000 R09: 0000000000000000 [ 613.271020][T13234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.271030][T13234] R13: 00007fb389db6218 R14: 00007fb389db6180 R15: 00007ffcd4230298 [ 613.271055][T13234] [ 613.900261][T13240] FAULT_INJECTION: forcing a failure. [ 613.900261][T13240] name failslab, interval 1, probability 0, space 0, times 0 [ 613.913115][T13240] CPU: 1 UID: 0 PID: 13240 Comm: syz.8.1770 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 613.913140][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.913150][T13240] Call Trace: [ 613.913156][T13240] [ 613.913163][T13240] dump_stack_lvl+0x16c/0x1f0 [ 613.913186][T13240] should_fail_ex+0x512/0x640 [ 613.913204][T13240] ? fs_reclaim_acquire+0xae/0x150 [ 613.913230][T13240] ? tomoyo_encode2+0x100/0x3e0 [ 613.913253][T13240] should_failslab+0xc2/0x120 [ 613.913273][T13240] __kmalloc_noprof+0xd2/0x510 [ 613.913295][T13240] tomoyo_encode2+0x100/0x3e0 [ 613.913322][T13240] tomoyo_encode+0x29/0x50 [ 613.913348][T13240] tomoyo_realpath_from_path+0x18f/0x6e0 [ 613.913376][T13240] ? tomoyo_profile+0x47/0x60 [ 613.913396][T13240] tomoyo_path_perm+0x274/0x460 [ 613.913415][T13240] ? tomoyo_path_perm+0x260/0x460 [ 613.913438][T13240] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 613.913486][T13240] ? __mutex_unlock_slowpath+0x163/0x800 [ 613.913506][T13240] ? hook_file_truncate+0xc7/0x250 [ 613.913537][T13240] security_file_truncate+0x84/0x1e0 [ 613.913565][T13240] do_ftruncate+0x218/0x970 [ 613.913586][T13240] ? __pfx_do_ftruncate+0x10/0x10 [ 613.913613][T13240] do_sys_ftruncate+0x61/0xb0 [ 613.913632][T13240] __x64_sys_ftruncate+0x58/0x80 [ 613.913651][T13240] do_syscall_64+0xcd/0x4c0 [ 613.913672][T13240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.913690][T13240] RIP: 0033:0x7f9ff638ebe9 [ 613.913704][T13240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.913721][T13240] RSP: 002b:00007f9ff45d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 613.913738][T13240] RAX: ffffffffffffffda RBX: 00007f9ff65b6090 RCX: 00007f9ff638ebe9 [ 613.913750][T13240] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 613.913760][T13240] RBP: 00007f9ff45d5090 R08: 0000000000000000 R09: 0000000000000000 [ 613.913771][T13240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.913781][T13240] R13: 00007f9ff65b6128 R14: 00007f9ff65b6090 R15: 00007ffd0dd13b18 [ 613.913806][T13240] [ 613.913909][T13240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 614.587575][T13245] binder: 13244:13245 ioctl c0286405 200000003a80 returned -22 [ 614.648912][T13252] FAULT_INJECTION: forcing a failure. [ 614.648912][T13252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.662585][T13252] CPU: 0 UID: 0 PID: 13252 Comm: syz.9.1769 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 614.662600][T13252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.662607][T13252] Call Trace: [ 614.662611][T13252] [ 614.662616][T13252] dump_stack_lvl+0x16c/0x1f0 [ 614.662630][T13252] should_fail_ex+0x512/0x640 [ 614.662645][T13252] _copy_to_user+0x32/0xd0 [ 614.662661][T13252] simple_read_from_buffer+0xcb/0x170 [ 614.662673][T13252] proc_fail_nth_read+0x197/0x240 [ 614.662687][T13252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 614.662700][T13252] ? rw_verify_area+0xcf/0x6c0 [ 614.662718][T13252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 614.662730][T13252] vfs_read+0x1e1/0xcf0 [ 614.662743][T13252] ? __pfx___mutex_lock+0x10/0x10 [ 614.662755][T13252] ? __pfx_vfs_read+0x10/0x10 [ 614.662769][T13252] ? __fget_files+0x20e/0x3c0 [ 614.662786][T13252] ksys_read+0x12a/0x250 [ 614.662796][T13252] ? __pfx_ksys_read+0x10/0x10 [ 614.662811][T13252] do_syscall_64+0xcd/0x4c0 [ 614.662824][T13252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.662835][T13252] RIP: 0033:0x7f811718d5fc [ 614.662844][T13252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 614.662855][T13252] RSP: 002b:00007f81153d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 614.662865][T13252] RAX: ffffffffffffffda RBX: 00007f81173b6180 RCX: 00007f811718d5fc [ 614.662872][T13252] RDX: 000000000000000f RSI: 00007f81153d50a0 RDI: 0000000000000007 [ 614.662879][T13252] RBP: 00007f81153d5090 R08: 0000000000000000 R09: 0000000000000000 [ 614.662885][T13252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.662892][T13252] R13: 00007f81173b6218 R14: 00007f81173b6180 R15: 00007fffd2034698 [ 614.662905][T13252] [ 615.809754][T13267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 616.272299][T13276] random: crng reseeded on system resumption [ 616.319927][ T30] audit: type=1400 audit(2000000092.980:1289): avc: denied { write } for pid=13268 comm="syz.6.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 616.596136][T13282] overlay: filesystem on ./bus not supported as upperdir [ 616.762625][T13288] 9pnet_fd: Insufficient options for proto=fd [ 616.988737][T13276] fuse: Bad value for 'fd' [ 617.071980][T13295] binder: 13294:13295 ioctl c0286405 200000003a80 returned -22 [ 619.481690][T13325] binder: 13318:13325 ioctl c0286405 200000003a80 returned -22 [ 619.578350][ T30] audit: type=1400 audit(2000000096.240:1290): avc: denied { setattr } for pid=13320 comm="syz.7.1794" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 621.284177][ T30] audit: type=1400 audit(2000000097.950:1291): avc: denied { connect } for pid=13345 comm="syz.0.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 621.456091][ T3580] tipc: Subscription rejected, illegal request [ 621.496777][T13356] serio: Serial port ptm0 [ 621.496938][T13355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13355 comm=syz.6.1804 [ 621.563545][T13352] xt_socket: unknown flags 0xe4 [ 621.598346][T13359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13359 comm=syz.7.1805 [ 621.657133][T13361] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1804'. [ 621.679625][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1804'. [ 621.745648][T13364] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1805'. [ 621.763089][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1805'. [ 622.357484][ T30] audit: type=1400 audit(2000000099.020:1292): avc: denied { map } for pid=13366 comm="syz.0.1807" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 622.397448][ T30] audit: type=1400 audit(2000000099.020:1293): avc: denied { execute } for pid=13366 comm="syz.0.1807" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 622.592716][T13376] netlink: 'syz.7.1811': attribute type 12 has an invalid length. [ 622.630685][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 622.698390][T13380] sp0: Synchronizing with TNC [ 622.739384][ T30] audit: type=1400 audit(2000000099.400:1294): avc: denied { mounton } for pid=13379 comm="syz.0.1813" path="/393/file0" dev="tmpfs" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 622.784136][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.806292][ T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 622.856923][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.894759][ T9] usb 7-1: config 0 descriptor?? [ 622.916869][T13388] syz.7.1815: attempt to access beyond end of device [ 622.916869][T13388] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 622.966954][T13388] gfs2: error -5 reading superblock [ 623.339013][ T9] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 623.384955][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000D/input/input24 [ 623.506737][ T9] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 623.506807][T13379] [U] è [ 624.074857][ T30] audit: type=1400 audit(2000000100.740:1295): avc: denied { getopt } for pid=13395 comm="syz.7.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 624.133645][ T5963] usb 7-1: USB disconnect, device number 31 [ 624.987297][T13418] FAULT_INJECTION: forcing a failure. [ 624.987297][T13418] name failslab, interval 1, probability 0, space 0, times 0 [ 625.001668][T13418] CPU: 0 UID: 0 PID: 13418 Comm: syz.7.1822 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 625.001693][T13418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.001704][T13418] Call Trace: [ 625.001710][T13418] [ 625.001717][T13418] dump_stack_lvl+0x16c/0x1f0 [ 625.001741][T13418] should_fail_ex+0x512/0x640 [ 625.001766][T13418] should_failslab+0xc2/0x120 [ 625.001788][T13418] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 625.001809][T13418] ? skb_clone+0x190/0x3f0 [ 625.001831][T13418] skb_clone+0x190/0x3f0 [ 625.001851][T13418] netlink_deliver_tap+0xabd/0xd30 [ 625.001877][T13418] netlink_unicast+0x71f/0x870 [ 625.001902][T13418] ? __pfx_netlink_unicast+0x10/0x10 [ 625.001920][T13418] ? __pfx_tc_get_qdisc+0x10/0x10 [ 625.001954][T13418] netlink_ack+0x696/0xb80 [ 625.001982][T13418] netlink_rcv_skb+0x332/0x420 [ 625.002002][T13418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 625.002025][T13418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.002055][T13418] ? netlink_deliver_tap+0x1ae/0xd30 [ 625.002080][T13418] netlink_unicast+0x5aa/0x870 [ 625.002104][T13418] ? __pfx_netlink_unicast+0x10/0x10 [ 625.002124][T13418] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 625.002152][T13418] netlink_sendmsg+0x8d1/0xdd0 [ 625.002177][T13418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.002208][T13418] ____sys_sendmsg+0xa95/0xc70 [ 625.002232][T13418] ? copy_msghdr_from_user+0x10a/0x160 [ 625.002252][T13418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.002288][T13418] ___sys_sendmsg+0x134/0x1d0 [ 625.002308][T13418] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.002350][T13418] ? __mutex_unlock_slowpath+0x100/0x800 [ 625.002384][T13418] __sys_sendmsg+0x16d/0x220 [ 625.002404][T13418] ? __pfx___sys_sendmsg+0x10/0x10 [ 625.002444][T13418] do_syscall_64+0xcd/0x4c0 [ 625.002466][T13418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.002485][T13418] RIP: 0033:0x7fb389b8ebe9 [ 625.002500][T13418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.002517][T13418] RSP: 002b:00007fb387dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.002535][T13418] RAX: ffffffffffffffda RBX: 00007fb389db6090 RCX: 00007fb389b8ebe9 [ 625.002547][T13418] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 625.002557][T13418] RBP: 00007fb387dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 625.002568][T13418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.002578][T13418] R13: 00007fb389db6128 R14: 00007fb389db6090 R15: 00007ffcd4230298 [ 625.002603][T13418] [ 625.508118][ T30] audit: type=1400 audit(2000000101.930:1296): avc: denied { listen } for pid=13414 comm="syz.7.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 626.144144][T13427] syz.7.1826: attempt to access beyond end of device [ 626.144144][T13427] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 626.158820][T13427] gfs2: error -5 reading superblock [ 626.212443][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1827'. [ 626.620174][ T30] audit: type=1400 audit(2000000103.260:1297): avc: denied { remount } for pid=13433 comm="syz.9.1830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 627.064512][T13440] usb usb8: usbfs: process 13440 (syz.7.1831) did not claim interface 0 before use [ 627.154395][T13442] delete_channel: no stack [ 627.574211][T13450] block device autoloading is deprecated and will be removed. [ 628.517325][T13473] syz.0.1843: attempt to access beyond end of device [ 628.517325][T13473] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 628.532196][T13473] gfs2: error -5 reading superblock [ 628.706925][T13475] input: syz0 as /devices/virtual/input/input25 [ 628.784656][T13477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13477 comm=syz.6.1841 [ 629.802432][T13489] netlink: 'syz.9.1847': attribute type 2 has an invalid length. [ 630.980127][ T5932] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 631.151561][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.168712][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.188365][ T5932] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 631.201792][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.215692][T13513] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1852'. [ 631.227775][ T5932] usb 7-1: config 0 descriptor?? [ 631.861573][ T8416] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 632.070026][ T8416] usb 10-1: Using ep0 maxpacket: 8 [ 632.623738][ T8416] usb 10-1: unable to get BOS descriptor or descriptor too short [ 632.638410][ T5932] usbhid 7-1:0.0: can't add hid device: -71 [ 632.638583][ T8416] usb 10-1: config 4 has an invalid interface descriptor of length 8, skipping [ 632.654408][ T5932] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 632.677544][ T8416] usb 10-1: config 4 descriptor has 1 excess byte, ignoring [ 632.685569][ T5932] usb 7-1: USB disconnect, device number 32 [ 632.685733][ T8416] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 632.705369][ T8416] usb 10-1: string descriptor 0 read error: -22 [ 632.716955][ T8416] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 632.728511][ T8416] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.739691][T13525] netlink: 308 bytes leftover after parsing attributes in process `syz.8.1856'. [ 633.525303][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.6.1861 [ 633.607355][T13542] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1861'. [ 633.617802][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1861'. [ 633.869661][T13552] netlink: 'syz.0.1866': attribute type 1 has an invalid length. [ 633.888534][T13552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.914491][T13552] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 633.930823][T13552] vlan2: entered allmulticast mode [ 633.935950][T13552] veth1: entered allmulticast mode [ 633.942122][T13552] veth1: entered promiscuous mode [ 633.947721][T13552] veth1: left promiscuous mode [ 633.954964][T13552] bond3: (slave vlan2): making interface the new active one [ 633.962931][T13552] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 633.987446][T13552] veth1: entered promiscuous mode [ 633.996425][T13552] vlan2: entered promiscuous mode [ 634.017048][T13552] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 634.348309][ T8416] usb 10-1: USB disconnect, device number 36 [ 634.426504][T13558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1868'. [ 634.544014][T13562] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1869'. [ 635.350590][ T8416] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 635.500888][ T8416] usb 10-1: Using ep0 maxpacket: 16 [ 635.513607][ T8416] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.540703][ T8416] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.551875][ T8416] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 635.565339][ T8416] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 635.574673][ T8416] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.590900][ T8416] usb 10-1: config 0 descriptor?? [ 636.001727][ T30] audit: type=1400 audit(2000000112.670:1298): avc: denied { write } for pid=13564 comm="syz.9.1871" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 636.011089][T13566] random: crng reseeded on system resumption [ 636.025587][ T30] audit: type=1400 audit(2000000112.670:1299): avc: denied { ioctl } for pid=13564 comm="syz.9.1871" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 636.071015][ T8416] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 636.111043][ T8416] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 636.122906][ T8416] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 636.280798][ T5963] usb 10-1: USB disconnect, device number 37 [ 636.281763][ T5905] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 636.293738][ T5963] ------------[ cut here ]------------ [ 636.303429][ T5963] workqueue: work disable count underflowed [ 636.309360][ T5963] WARNING: CPU: 1 PID: 5963 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 636.318303][ T5963] Modules linked in: [ 636.322337][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: kworker/1:5 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 636.334402][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.344441][ T5963] Workqueue: usb_hub_wq hub_event [ 636.349474][ T5963] RIP: 0010:enable_work+0x2f8/0x340 [ 636.354659][ T5963] Code: 89 ee e8 2b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 5b 38 00 c6 05 ca 4f 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 b2 9e 00 e9 aa fe ff ff [ 636.374250][ T5963] RSP: 0018:ffffc9000441f3c0 EFLAGS: 00010086 [ 636.380303][ T5963] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900196c0000 [ 636.388263][ T5963] RDX: 0000000000100000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 636.396214][ T5963] RBP: ffff88802668f738 R08: 0000000000000001 R09: 0000000000000000 [ 636.404170][ T5963] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000883e79 [ 636.412146][ T5963] R13: 0000000000000000 R14: ffff88802668f698 R15: ffff88802668f730 [ 636.420104][ T5963] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 636.429022][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.435588][ T5963] CR2: 0000000000000000 CR3: 0000000047663000 CR4: 00000000003526f0 [ 636.443558][ T5963] Call Trace: [ 636.446817][ T5963] [ 636.449730][ T5963] ? __pfx_enable_work+0x10/0x10 [ 636.454671][ T5963] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 636.460469][ T5963] __cancel_work_sync+0xe7/0x130 [ 636.465391][ T5963] thermal_zone_device_unregister+0x28e/0x4d0 [ 636.471442][ T5963] ? __pfx_shield_remove+0x10/0x10 [ 636.476539][ T5963] power_supply_unregister+0x10a/0x150 [ 636.481985][ T5963] shield_remove+0x75/0x130 [ 636.486471][ T5963] ? __pfx_shield_remove+0x10/0x10 [ 636.491564][ T5963] hid_device_remove+0xce/0x260 [ 636.496393][ T5963] ? __pfx_hid_device_remove+0x10/0x10 [ 636.501831][ T5963] device_remove+0xc8/0x170 [ 636.506319][ T5963] device_release_driver_internal+0x44b/0x620 [ 636.512375][ T5963] bus_remove_device+0x22f/0x420 [ 636.517305][ T5963] device_del+0x396/0x9f0 [ 636.521704][ T5963] ? __pfx_device_del+0x10/0x10 [ 636.526544][ T5963] ? do_raw_spin_lock+0x12c/0x2b0 [ 636.531556][ T5963] hid_destroy_device+0x19c/0x240 [ 636.536571][ T5963] usbhid_disconnect+0xa0/0xe0 [ 636.541322][ T5963] usb_unbind_interface+0x1dd/0x9e0 [ 636.546511][ T5963] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 636.552128][ T5963] ? __pfx_usb_unbind_interface+0x10/0x10 [ 636.557832][ T5963] device_remove+0x125/0x170 [ 636.562404][ T5963] device_release_driver_internal+0x44b/0x620 [ 636.568459][ T5963] bus_remove_device+0x22f/0x420 [ 636.573391][ T5963] device_del+0x396/0x9f0 [ 636.577706][ T5963] ? __pfx_device_del+0x10/0x10 [ 636.582538][ T5963] ? kobject_put+0x210/0x5a0 [ 636.587115][ T5963] usb_disable_device+0x355/0x7d0 [ 636.592129][ T5963] usb_disconnect+0x2e1/0x9c0 [ 636.596794][ T5963] hub_event+0x1c81/0x4fe0 [ 636.601210][ T5963] ? __lock_acquire+0xb97/0x1ce0 [ 636.606140][ T5963] ? __pfx_hub_event+0x10/0x10 [ 636.610887][ T5963] ? interval_tree_iter_first+0x70/0x250 [ 636.616513][ T5963] ? rcu_is_watching+0x12/0xc0 [ 636.621268][ T5963] process_one_work+0x9cc/0x1b70 [ 636.626199][ T5963] ? __pfx_process_one_work+0x10/0x10 [ 636.631561][ T5963] ? assign_work+0x1a0/0x250 [ 636.636137][ T5963] worker_thread+0x6c8/0xf10 [ 636.640717][ T5963] ? __kthread_parkme+0x19e/0x250 [ 636.645730][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 636.650822][ T5963] kthread+0x3c5/0x780 [ 636.654872][ T5963] ? __pfx_kthread+0x10/0x10 [ 636.659442][ T5963] ? rcu_is_watching+0x12/0xc0 [ 636.664199][ T5963] ? __pfx_kthread+0x10/0x10 [ 636.668786][ T5963] ret_from_fork+0x5d7/0x6f0 [ 636.673357][ T5963] ? __pfx_kthread+0x10/0x10 [ 636.677930][ T5963] ret_from_fork_asm+0x1a/0x30 [ 636.682689][ T5963] [ 636.685708][ T5963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 636.692967][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: kworker/1:5 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 636.705010][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.715046][ T5963] Workqueue: usb_hub_wq hub_event [ 636.720063][ T5963] Call Trace: [ 636.723326][ T5963] [ 636.726255][ T5963] dump_stack_lvl+0x3d/0x1f0 [ 636.730829][ T5963] vpanic+0x6e8/0x7a0 [ 636.734803][ T5963] ? __pfx_vpanic+0x10/0x10 [ 636.739301][ T5963] ? enable_work+0x2f8/0x340 [ 636.743874][ T5963] panic+0xca/0xd0 [ 636.747583][ T5963] ? __pfx_panic+0x10/0x10 [ 636.751994][ T5963] check_panic_on_warn+0xab/0xb0 [ 636.756910][ T5963] __warn+0xf6/0x3c0 [ 636.760784][ T5963] ? __pfx_vprintk_emit+0x10/0x10 [ 636.765792][ T5963] ? enable_work+0x2f8/0x340 [ 636.770373][ T5963] report_bug+0x3c3/0x580 [ 636.774701][ T5963] ? enable_work+0x2f8/0x340 [ 636.779279][ T5963] handle_bug+0x184/0x210 [ 636.783593][ T5963] exc_invalid_op+0x17/0x50 [ 636.788080][ T5963] asm_exc_invalid_op+0x1a/0x20 [ 636.792913][ T5963] RIP: 0010:enable_work+0x2f8/0x340 [ 636.798095][ T5963] Code: 89 ee e8 2b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 5b 38 00 c6 05 ca 4f 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 b2 9e 00 e9 aa fe ff ff [ 636.817684][ T5963] RSP: 0018:ffffc9000441f3c0 EFLAGS: 00010086 [ 636.823736][ T5963] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900196c0000 [ 636.831687][ T5963] RDX: 0000000000100000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 636.839661][ T5963] RBP: ffff88802668f738 R08: 0000000000000001 R09: 0000000000000000 [ 636.847611][ T5963] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000883e79 [ 636.855562][ T5963] R13: 0000000000000000 R14: ffff88802668f698 R15: ffff88802668f730 [ 636.863520][ T5963] ? __warn_printk+0x1a5/0x350 [ 636.868280][ T5963] ? __pfx_enable_work+0x10/0x10 [ 636.873204][ T5963] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 636.879001][ T5963] __cancel_work_sync+0xe7/0x130 [ 636.883926][ T5963] thermal_zone_device_unregister+0x28e/0x4d0 [ 636.889982][ T5963] ? __pfx_shield_remove+0x10/0x10 [ 636.895082][ T5963] power_supply_unregister+0x10a/0x150 [ 636.900523][ T5963] shield_remove+0x75/0x130 [ 636.905007][ T5963] ? __pfx_shield_remove+0x10/0x10 [ 636.910099][ T5963] hid_device_remove+0xce/0x260 [ 636.914934][ T5963] ? __pfx_hid_device_remove+0x10/0x10 [ 636.920375][ T5963] device_remove+0xc8/0x170 [ 636.924866][ T5963] device_release_driver_internal+0x44b/0x620 [ 636.930918][ T5963] bus_remove_device+0x22f/0x420 [ 636.935848][ T5963] device_del+0x396/0x9f0 [ 636.940166][ T5963] ? __pfx_device_del+0x10/0x10 [ 636.945003][ T5963] ? do_raw_spin_lock+0x12c/0x2b0 [ 636.950017][ T5963] hid_destroy_device+0x19c/0x240 [ 636.955039][ T5963] usbhid_disconnect+0xa0/0xe0 [ 636.959785][ T5963] usb_unbind_interface+0x1dd/0x9e0 [ 636.964973][ T5963] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 636.970586][ T5963] ? __pfx_usb_unbind_interface+0x10/0x10 [ 636.976291][ T5963] device_remove+0x125/0x170 [ 636.980862][ T5963] device_release_driver_internal+0x44b/0x620 [ 636.986916][ T5963] bus_remove_device+0x22f/0x420 [ 636.991843][ T5963] device_del+0x396/0x9f0 [ 636.996156][ T5963] ? __pfx_device_del+0x10/0x10 [ 637.000985][ T5963] ? kobject_put+0x210/0x5a0 [ 637.005561][ T5963] usb_disable_device+0x355/0x7d0 [ 637.010575][ T5963] usb_disconnect+0x2e1/0x9c0 [ 637.015242][ T5963] hub_event+0x1c81/0x4fe0 [ 637.019655][ T5963] ? __lock_acquire+0xb97/0x1ce0 [ 637.024582][ T5963] ? __pfx_hub_event+0x10/0x10 [ 637.029327][ T5963] ? interval_tree_iter_first+0x70/0x250 [ 637.034952][ T5963] ? rcu_is_watching+0x12/0xc0 [ 637.039702][ T5963] process_one_work+0x9cc/0x1b70 [ 637.044631][ T5963] ? __pfx_process_one_work+0x10/0x10 [ 637.049993][ T5963] ? assign_work+0x1a0/0x250 [ 637.054572][ T5963] worker_thread+0x6c8/0xf10 [ 637.059149][ T5963] ? __kthread_parkme+0x19e/0x250 [ 637.064159][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 637.069251][ T5963] kthread+0x3c5/0x780 [ 637.073301][ T5963] ? __pfx_kthread+0x10/0x10 [ 637.077872][ T5963] ? rcu_is_watching+0x12/0xc0 [ 637.082617][ T5963] ? __pfx_kthread+0x10/0x10 [ 637.087187][ T5963] ret_from_fork+0x5d7/0x6f0 [ 637.091758][ T5963] ? __pfx_kthread+0x10/0x10 [ 637.096329][ T5963] ret_from_fork_asm+0x1a/0x30 [ 637.101087][ T5963] [ 637.104265][ T5963] Kernel Offset: disabled [ 637.108566][ T5963] Rebooting in 86400 seconds..