last executing test programs: 3m37.506194743s ago: executing program 1 (id=2950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) (fail_nth: 1) 3m37.165254611s ago: executing program 1 (id=2951): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040480) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000880)='./file0\x00', 0xa3) (async) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = io_uring_setup(0x4c7f, &(0x7f0000000300)={0x0, 0x117c, 0x2, 0x3, 0x1d9}) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f00000004c0)={&(0x7f0000000480)={&(0x7f0000000380)="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", 0xff, 0x1, 0x50fc1adc, 0x2}, 0x1}, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8001, 0xbd7f, 0x1}}]}) (async) r4 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4, 0x4}) (async) write$eventfd(r4, &(0x7f0000000080)=0x430f, 0x8) write$UHID_INPUT(r0, 0x0, 0x0) (async) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x1d1) recvmmsg(r5, &(0x7f0000005a40)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}, 0xfffff45b}, {{&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000002680)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/88, 0x58}, 0x8000}], 0x2, 0x40000340, 0x0) (async) r6 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) (async) fchdir(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d1e, &(0x7f0000000000)) add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000100)='&', 0x1, 0xffffffffffffffff) (async) syz_usb_connect(0x2, 0x680, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0xbc, 0x32, 0x39, 0x10, 0x148f, 0x9021, 0x4d3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66e, 0x2, 0xfd, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xca, 0x1, 0x8, 0x8d, 0xb6, 0x30, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0xe7, 0x1, {0x22, 0xf2f}}], [{{0x9, 0x5, 0x9, 0x8, 0x10, 0x2, 0x4, 0x2}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0xfd, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xcb8b}, @generic={0xfd, 0x24, "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"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x0, 0xca, 0x4, 0x2, [@generic={0xe, 0x10, "aeba93662266bb49e253d06c"}, @generic={0xdf, 0xb, "aea9e257e1bdc523651636ce9f72bfe562ff906fb5282c91f1f5754f7aa64f0d23e38bf7a95550f561c4a119c0bb90300aa7092eb6ba4543d48a6e7a06e1ba5baffe155125bcea339f70c8d58738b120e1a2cd3dbe7f0d33d025705b53cd1a0091a13078b038bbd7687047a27df9d9e269bc374417312048d65d134f680a1652cc2c96cdc5e98472c5552a69bd96bb2b47644ae1ef954b0bb264b5ed76269f4f8e7854563a1cfe1b8e7021ce3d28cf8b6e4d030a0934d77071b289ea3d32b9e9f31707c35ccf0ac73d69007b22f539ad9fcbde99c6ca1f3425a23f59ed"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x48, 0x7, 0x63, [@generic={0xd7, 0x22, "d85fccc22822abf328200f88b4e14ce816385cd39d47104c1cf5029a595142e6f365cde1a284131b41bc063f6e1fe49c6d3d01519baaeb31694fd2d01f111d8eb3fe101a7292e8feba67693c61cce964f193235f65168e972cbe6a2d706b6c633a98700daa277e5acd4928922ee063419dae9711abf588204b8e2545a2530ae95dd5b42c271936969b3b1f4dca0bfc1b80963943af706d50a05115755bb865f8d731db59c5893499bce0f67405ed20ef7454e90d132cb33d703dd75763ea56f5fe6e39f395a49099a35aeda3c72164e724a29a2fb8"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xd, 0x40, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x5, 0x6, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xc, 0x6, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xfff}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x80, 0x85, 0x2, [@generic={0x27, 0x2d, "9aa2201851f6eb1e631c30b805b335aa0c84f8a602c132b7429976e5060a0101c920dc02b3"}, @generic={0x16, 0x30, "4bbd5a54b6a9ad1753a7938ea802871646459706"}]}}]}}, {{0x9, 0x4, 0x24, 0x4b, 0x7, 0x8, 0x6, 0x50, 0x13, [@generic={0x46, 0x22, "df77ae495ebdba15ad9272c4f16c8486be9fdfadf3ff6a221e77c2bdb3102c5bbc048d276c513bcce3263b10d6e96ed08a3f5fb7592adb0d3af25ea064d8ba83b4b5c3a1"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d363"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffec4, 0x9, 0x4, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xb, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x8, 0xa79, [0xc65e, 0x0, 0x6bfd, 0x2, 0xb]}, @dmm={0x7, 0x24, 0x14, 0x203d, 0x52}]}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x5, 0x0, 0x81}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x4, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xef, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x4, 0x2, 0x2, [@generic={0xe6, 0x6, "df27d0ca02323ad19273256e17438c7518a7d4ae9e24e76c267e985d93e5db3091a01f0097a9c3c07061ef567ebd71310661152202254231741f619992f07a1e451b86274e0dbaa56ced1e8492b52f01355840b2b9bead002262de33b1f7f8caa2f41d132d9495191111668dfa2280235abd330213f27c1cbd35beb18e146044bcef06bbd920d3ddbede95320f1842cebecc94cc510698f4ac374663a9d0779c713686d6ac8245438d7c08dc9ca7ca6c2484b7e76cc502c151ce179f102d06208771d40ae81bf15dbf00060a0c0ed155cd9fc1eda70e55efb51a1a4fe79c596e74ab4cd4"}, @generic={0x36, 0x22, "9a93af940933673cabf550690843980201a88354542e08885dceaa911c700f8dfe09da989ad54fea049619893c2adc15c8398d55"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0xff, 0x1, 0xd, [@generic={0xa6, 0x7, "78ad8906e42c46016b5697fd377c8b2fab4dd5debd913c3b28b7e116917830b5d726801fd346b69e06757d6c2d81a5cc955ef704dd3c8dc7cdb9351f60d27f097361b091821d34d116170275ff159faee9c191490f07db3aeb465fc1bea85cd33320dde44f514993cbe30091ad495b3dea2a35c734bcad4ed39e92126f87fab6e4b3c3a7af2426b40bbe8ce9557bae21febb23db8eafabd487d20fd8f490783cdf2eb510"}, @generic={0x25, 0x11, "cfd3decf966ef8e5e20e59dfe58208b5b4b58b704ca00153de7f789091c8526ff65f0a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xd, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xfa, 0xe790}]}}, {{0x9, 0x5, 0x83, 0x13, 0x200, 0x9, 0x9, 0x2, [@generic={0x31, 0x22, "5a6192479e6a0df4a10ba1634f583e660f30a4818dcc6d534678103d337b9eff1d6ebfcbbfb267d1d4dc1af43eb0de"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x7f, 0xce, 0xc4}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x6, 0x2, 0x56, 0x10, 0x6c}, 0xd7, &(0x7f0000000540)={0x5, 0xf, 0xd7, 0x4, [@ptm_cap={0x3}, @generic={0xbd, 0x10, 0x1, "9cb06e60541f0af4f1ef8a0f9053233157c050642afc9a8732ec90cffd1f24bb6d7c9db471f93996c30a3364e3b0494dbed580e66b6968bd2abedcfa460e31fdcdab19257035ec76726fda309c68e2bdbc3aefe2c14538db6ae19da6bfaf286ee18b159dfe493ddb30f10904ebe1fb6aa2f711547a6e0248593659dc0a5fc014afc6ceacff81c04bf413d8ce52a2cea6ef3b9d8cbbd32cdaa24b10d7b54c65ea5db590959e74a3e63287a51b93b9fab32e4b3f17cc93f0cb9a7d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x9, 0xb26e}, @wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x6, 0x5, 0x2, 0xb}]}, 0x3, [{0x61, &(0x7f0000000640)=@string={0x61, 0x3, "057d2ae05e55b32ceb0d4a935f537fb412a8f08606e90f751dc618cd7d39bb65dbf5402fb5e0dd67dbc93c436e484dd000beaa654b7093418fa78fa9ec42bec396cc55738a3572dbb609be7d9d5b72d6a0fa4f3da178305e1dcff2b0aa5fb4"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x9b, &(0x7f0000000700)=@string={0x9b, 0x3, "cfe070481f2f48853569acef804950ac7be540b01ad16324f438f9727a9f96bf7bd02814dfffa40d5e2ba6e7286765311c4a17a6dbc17504ffb974a69aba28463ebbb643819a5c3b4062b48e344dc2d9a09882aaf2ea7700c0557b2e0ad450dca84ff311d6c5fcd5e01256a69fac00c586c73365578c1d3694cd6d3b43eaae90a28ef2eb812c13f9bde585a18a8d6ed8a1340343cb1062d2a9"}}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaa6dde655713786dd60ff00f500130600fe8000000000000000000000000000aafe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c200009078fffd1e1220d6a0000001000500"/28], 0x0) 3m33.90171408s ago: executing program 1 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 3m33.489015634s ago: executing program 1 (id=2970): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x290}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m33.127048385s ago: executing program 1 (id=2971): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r0, 0x8, 0x4) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) 3m32.809370693s ago: executing program 1 (id=2972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b8", 0xa5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000002900000043000000020000000000215e"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000140e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000120000000000000002000000010000000000000000000000ff"], 0xb8}}, 0x4004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m17.19679403s ago: executing program 32 (id=2972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b8", 0xa5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000002900000043000000020000000000215e"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000140e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000120000000000000002000000010000000000000000000000ff"], 0xb8}}, 0x4004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.957465141s ago: executing program 0 (id=3646): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000573000/0x1000)=nil, 0x1000, 0x1000008, 0x40010, 0xffffffffffffffff, 0x0) socket(0xf, 0x1, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280080001006774700020000280050005000100000014000100ff0100"], 0x4c}}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) 10.120072221s ago: executing program 2 (id=3661): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="0a8d8d37fc0441b361dbbab739b7ea9f1860822d177ea57db3319c75ffba0d7d95e2e7ffe8e0ab75e04ce1bf", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r4, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) eventfd(0x3) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6b) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[], 0xfdef) sendmmsg$inet(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x4004}, 0x50) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x2e) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={0x0, r9}}, 0x20) 8.715287718s ago: executing program 5 (id=3663): r0 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r6 = fanotify_init(0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="88", 0x8}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a8, 0x11c8, 0xc8, 0x8, 0x11c8, 0x5803, 0x12d8, 0x2e8, 0x2e8, 0x12d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0x16, 0xc, 0x2, 0x4b}, 0x0, 0x1198, 0x11c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5a, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xff, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0xe}, {0xffffffffffffffff, 0x0, 0x1}, 0xffffff68, 0x225}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3d5, 0x1c, 0xffffff95, 'netbios-ns\x00', 'syz1\x00', {0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408) 8.565687962s ago: executing program 0 (id=3664): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000001300)={0x44, &(0x7f0000001080)=ANY=[@ANYBLOB="8973d6d4e13404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x44080) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000300)={'wlan0\x00'}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) 7.553937435s ago: executing program 5 (id=3666): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1", 0xa0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000002900000043000000020000000000215e"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000140e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000120000000000000002000000010000000000000000000000ff"], 0xb8}}, 0x4004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.350121464s ago: executing program 4 (id=3667): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b", 0x6f}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee67", 0x6c}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa", 0x2d}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b068543b988682aaf6c00ba59923b259ebe9680c", 0xdf}], 0x5, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b968820a7b5b7fa5e05f0f2c62ddc49c67c2acb", 0x7f}], 0x2}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.013293133s ago: executing program 4 (id=3668): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115", 0xc1}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec6", 0xa4}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d", 0x8a}], 0x6, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0xfe3}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}], 0x48}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.957792344s ago: executing program 2 (id=3669): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036", 0xc2}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b068543b988682aaf6c00ba59923b259eb", 0xdc}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec62dffdbafb6", 0xa9}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d", 0x8a}], 0x6, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cdf4af97ed8c04f82a8a3b6bcec4eec48c2bd26688d2dfddff", 0xf8}, {&(0x7f0000000d40)="6af118351b2776a2d3525c5f4d7d1103d5d9ab595e516eea9d608d34b09b177f7054e74349a3d6157be1b300dc6c58ab781ab4accbe2aa3169693042c761ea0c193666e4373d7b8ec4f2e36176da156c728696ccdb3dede7b6915fe44e21f74dbebc602610838e539c6a3a7c8cefe2f69cce79f76376f57de01c5517a88714ac6c", 0x81}, {&(0x7f0000000e00)}, {0x0}, {&(0x7f0000000f80)}], 0x5, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0xfe3}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.825289209s ago: executing program 5 (id=3670): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x100}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_disconnect(r1) 6.667589581s ago: executing program 2 (id=3671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.659397941s ago: executing program 4 (id=3672): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c00000014007d0028bd7000fbdbdf2500000000000000000000000000000001ac1414bb0000000000000000000000004e200cc84e200800020080005e000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="bb6b6e00000000000c0015005c0735000b00000008001f000400000028001a00e00000aa020000000000da9260af00000000000000ac1414aa00"/68], 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x10000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(r10, 0x0, 0x0) 5.644551073s ago: executing program 4 (id=3673): r0 = syz_open_dev$video4linux(0x0, 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x301, 0x0, 0x101c, 0x800221e, 0xffffeff6, 0x20780}) 5.602265635s ago: executing program 2 (id=3674): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x6, 0x5, {0x7, 0x25, 0x1, 0x1, 0xb, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x56, 0x4, 0xb0, {0x7, 0x25, 0x1, 0x0, 0x9, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="050f050008"]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.413481799s ago: executing program 4 (id=3676): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b", 0x6f}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa", 0x2d}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b068543b988682aaf6c00ba59923b259ebe9680c", 0xdf}], 0x5, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b968820a7b5b7fa5e05f0f2c62ddc49c67c2acb2ce8544611c3ccea83ced512ac810cca79c6", 0x91}], 0x2}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.37126519s ago: executing program 5 (id=3677): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x97) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=r1]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r2, &(0x7f0000000240)={0x5d31, 0xeb4}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) 5.111707387s ago: executing program 5 (id=3678): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b068543b988682aaf6c00ba59923b259eb", 0xdc}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e97", 0x94}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d", 0x8a}], 0x6, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cdf4af97ed8c04f82a8a3b6bcec4eec48c2bd26688d2dfddff", 0xf8}, {&(0x7f0000000d40)="6af118351b2776a2d3525c5f4d7d1103d5d9ab595e516eea9d608d34b09b177f7054e74349a3d6157be1b300dc6c58ab781ab4accbe2aa3169693042c761ea0c193666e4373d7b8ec4f2e36176da156c728696ccdb3dede7b6915fe44e21f74dbebc602610838e539c6a3a7c8cefe2f69cce79f76376f57de01c5517a88714ac6c", 0x81}, {0x0}, {0x0}, {&(0x7f0000000f80)}], 0x5, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0xfe3}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.983637769s ago: executing program 4 (id=3680): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x6, 0x2, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x83e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x800, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0xb, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x7, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x4], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x5, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x2000000e, 0x53, 0x133, 0x6]}, 0x45c) r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r8, 0x0, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r3, @ANYBLOB="03737a86022a981efb8309e2e28affffac5a890f779d951228988466072eb43981f135ae0c0fec50364af231a314fb2638aa43d7e02a708d4e93e9b8ce2af68520eb49f7d4e027e5c4991095807a0fabc46c8cf1c3b279f61615bce0981f3a41a1921d10874bf95015eaa728d1e276021a1346101b1bcaed63fb8a3b4354ce52bccc697e58a126da05fd3f2dfd9881a7b85ede73ce3d460b"], 0x54}}, 0x4000) 4.432147284s ago: executing program 5 (id=3681): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b", 0xaa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000002900000043000000020000000000215e"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000140e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000120000000000000002000000010000000000000000000000ff"], 0xb8}}, 0x4004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.358260941s ago: executing program 0 (id=3682): r0 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r6 = fanotify_init(0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="88", 0x8}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 3.655365945s ago: executing program 3 (id=3683): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2d41, 0x1b8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.540159172s ago: executing program 3 (id=3684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.396761556s ago: executing program 0 (id=3685): r0 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r6 = fanotify_init(0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="88", 0x8}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a8, 0x11c8, 0xc8, 0x8, 0x11c8, 0x5803, 0x12d8, 0x2e8, 0x2e8, 0x12d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0x16, 0xc, 0x2, 0x4b}, 0x0, 0x1198, 0x11c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5a, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xff, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0xe}, {0xffffffffffffffff, 0x0, 0x1}, 0xffffff68, 0x225}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3d5, 0x1c, 0xffffff95, 'netbios-ns\x00', 'syz1\x00', {0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408) 2.090721925s ago: executing program 0 (id=3686): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x6, 0x2, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x83e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x800, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0xb, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x7, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x4], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x5, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x2000000e, 0x53, 0x133, 0x6]}, 0x45c) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r7, 0x0, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) 2.06638s ago: executing program 3 (id=3687): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x100}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_disconnect(r1) 1.1652567s ago: executing program 2 (id=3688): r0 = socket(0x11, 0x80a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 1.0995735s ago: executing program 3 (id=3689): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40044) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000080)=0x3) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 893.65067ms ago: executing program 0 (id=3690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="0a8d8d37fc0441b361dbbab739b7ea9f1860822d177ea57db3319c75ffba0d7d95e2e7ffe8e0ab75e04ce1bf", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r4, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) eventfd(0x3) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6b) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000010000000000000c04ef0000005f5f61007bc0bb79fa87dbff447e4e85fc09eb16a236863fc0d7bfebcd04977ffe25fbbf26ca949c8badcbefcfb5547c19e1749af501255e4211504f82d716ab858745b5393601c01552a1bdf6e3916b1168ee9cbafaee326a3af73ca1626f2d464ba5260175ec67a0894e1e84e2330070e6073513d2c0e368666f8a985fe305c0a46932918ba1c9f7065aa298b0c44bffa25cba706879a17c0b75997fbb5cefcea5f8f5a46b07a7312927c14390a24b9be803d2093cd22860a1048bfe"], &(0x7f00000006c0)=""/220, 0x29, 0xdc, 0x0, 0xa}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r8, 0x40, 0x4004}, 0x50) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x2e) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={0x0, r10}}, 0x20) 880.052489ms ago: executing program 3 (id=3691): socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r1) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="0000ee2d717fb4553ba3890d5fab224b0d4dfa251866e2270609bd8d1a9d08bff36656969610534f9729708c04280e668ea980d3bea9faf2ee4a9402b30f7ea7119965f1fa9881ba1cf345a8d037b17b701b5a4836bd9ccf4f0f0f9d00cb61ad7bb03be9b497ae9c5cbf3d3822ac5113377159e24e6bde"]) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000000c0)=0xfffffffffffffeff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='block_plug\x00', r3, 0x0, 0xc2af}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x9fffff, 0x800, 0x0, 0x1}, 0x20) 867.267978ms ago: executing program 2 (id=3692): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b068543b988682aaf6c00ba59923b259eb", 0xdc}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e97", 0x94}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d", 0x8a}], 0x6, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cdf4af97ed8c04f82a8a3b6bcec4eec48c2bd26688d2dfddff", 0xf8}, {&(0x7f0000000d40)="6af118351b2776a2d3525c5f4d7d1103d5d9ab595e516eea9d608d34b09b177f7054e74349a3d6157be1b300dc6c58ab781ab4accbe2aa3169693042c761ea0c193666e4373d7b8ec4f2e36176da156c728696ccdb3dede7b6915fe44e21f74dbebc602610838e539c6a3a7c8cefe2f69cce79f76376f57de01c5517a88714ac6c", 0x81}, {0x0}, {0x0}, {&(0x7f0000000f80)}], 0x5, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0xfe3}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=3693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = io_uring_setup(0x2ffa, &(0x7f0000000040)={0x0, 0x20c8a3, 0x1c881, 0x0, 0xe3}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0xfc, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @ipv4=@empty=0x5000000}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r7, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x82) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000003c0)={0x5, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000300)}], &(0x7f0000000380)=[0x9, 0x5], 0x4}, 0x20) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r9, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x19, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28) kernel console output (not intermixed with test programs): aller #0 PREEMPT(full) [ 799.670367][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 799.670377][T16566] Call Trace: [ 799.670382][T16566] [ 799.670389][T16566] dump_stack_lvl+0x16c/0x1f0 [ 799.670415][T16566] should_fail_ex+0x512/0x640 [ 799.670438][T16566] ? kmem_cache_alloc_noprof+0x62/0x770 [ 799.670457][T16566] should_failslab+0xc2/0x120 [ 799.670477][T16566] kmem_cache_alloc_noprof+0x83/0x770 [ 799.670493][T16566] ? getname_flags.part.0+0x4c/0x550 [ 799.670514][T16566] ? getname_flags.part.0+0x4c/0x550 [ 799.670528][T16566] getname_flags.part.0+0x4c/0x550 [ 799.670543][T16566] ? ksys_write+0x1ac/0x250 [ 799.670570][T16566] getname_flags+0x93/0xf0 [ 799.670589][T16566] __x64_sys_statx+0x1a1/0x1e0 [ 799.670609][T16566] do_syscall_64+0xcd/0xf80 [ 799.670632][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.670647][T16566] RIP: 0033:0x7f2e2e78f749 [ 799.670660][T16566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.670676][T16566] RSP: 002b:00007f2e2f63b038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 799.670691][T16566] RAX: ffffffffffffffda RBX: 00007f2e2e9e5fa0 RCX: 00007f2e2e78f749 [ 799.670701][T16566] RDX: 0000000000000100 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 799.670711][T16566] RBP: 00007f2e2f63b090 R08: 0000000000000000 R09: 0000000000000000 [ 799.670721][T16566] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 799.670730][T16566] R13: 00007f2e2e9e6038 R14: 00007f2e2e9e5fa0 R15: 00007ffc1f191c78 [ 799.670751][T16566] [ 799.847088][T16462] bridge_slave_0: entered promiscuous mode [ 799.858537][T16462] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.866528][T16462] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.874801][T16462] bridge_slave_1: entered allmulticast mode [ 799.882160][T16462] bridge_slave_1: entered promiscuous mode [ 799.888041][T16367] usb 4-1: Using ep0 maxpacket: 8 [ 799.912780][T16367] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 799.929631][T16367] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 799.967042][T16462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.977816][T16367] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 799.992470][T16367] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 800.014888][T16367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.022918][T16367] usb 4-1: Product: syz [ 800.038236][T16367] usb 4-1: Manufacturer: syz [ 800.042933][T16367] usb 4-1: SerialNumber: syz [ 800.175627][T16462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.301299][T16462] team0: Port device team_slave_0 added [ 800.549067][T16462] team0: Port device team_slave_1 added [ 800.723314][ T5827] Bluetooth: hci3: command tx timeout [ 801.006645][ T6044] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 801.014489][T16462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.037752][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.071110][T16462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.089933][T16462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.097539][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.151050][T16585] overlay: ./file0 is not a directory [ 801.234925][ T6044] usb 3-1: Using ep0 maxpacket: 8 [ 801.514569][ T6044] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 801.528290][ T30] audit: type=1400 audit(2000000412.110:2014): avc: denied { mounton } for pid=16576 comm="syz.5.3214" path="/32/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 801.571320][ T6044] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 801.616550][ T6044] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.629842][T16462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.698271][ T6044] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 801.764769][ T6044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.847213][ T3843] hsr_slave_0: left promiscuous mode [ 801.915245][ T3843] hsr_slave_1: left promiscuous mode [ 801.947683][ T6044] usbtmc 3-1:16.0: bulk endpoints not found [ 801.983536][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.073227][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.186180][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.282058][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.887455][ T3843] veth1_macvtap: left promiscuous mode [ 802.966119][ T3843] veth0_macvtap: left promiscuous mode [ 803.025393][ T3843] veth1_vlan: left promiscuous mode [ 803.037073][ T30] audit: type=1400 audit(2000000414.010:2015): avc: denied { connect } for pid=16577 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 803.065512][ T3843] veth0_vlan: left promiscuous mode [ 803.228597][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.230016][T16367] usb 4-1: 0:2 : does not exist [ 803.240521][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.299426][ T30] audit: type=1400 audit(2000000414.040:2016): avc: denied { read } for pid=16577 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 803.685666][T16367] usb 4-1: USB disconnect, device number 31 [ 803.759075][T16220] udevd[16220]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.504351][T16610] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3220'. [ 804.804702][T16367] usb 3-1: USB disconnect, device number 42 [ 805.999677][ T3843] team0 (unregistering): Port device team_slave_1 removed [ 806.036321][ T3843] team0 (unregistering): Port device team_slave_0 removed [ 806.582669][T16462] hsr_slave_0: entered promiscuous mode [ 806.593841][T16462] hsr_slave_1: entered promiscuous mode [ 806.604635][T16462] debugfs: 'hsr0' already exists in 'hsr' [ 806.648581][T16462] Cannot create hsr debugfs directory [ 807.529486][ T30] audit: type=1400 audit(2000000418.500:2017): avc: denied { connect } for pid=16636 comm="syz.4.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 808.172577][T16635] GUP no longer grows the stack in syz.2.3227 (16635): 200000004000-200000008000 (200000002000) [ 808.183238][T16635] CPU: 1 UID: 0 PID: 16635 Comm: syz.2.3227 Not tainted syzkaller #0 PREEMPT(full) [ 808.183254][T16635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.183262][T16635] Call Trace: [ 808.183268][T16635] [ 808.183273][T16635] dump_stack_lvl+0x16c/0x1f0 [ 808.183292][T16635] gup_vma_lookup+0x1d2/0x220 [ 808.183308][T16635] __get_user_pages+0x241/0x3590 [ 808.183328][T16635] ? find_held_lock+0x2b/0x80 [ 808.183347][T16635] ? __pfx___get_user_pages+0x10/0x10 [ 808.183365][T16635] get_user_pages_remote+0x243/0xab0 [ 808.183380][T16635] ? mas_new_root+0x660/0x6e0 [ 808.183399][T16635] ? __pfx_get_user_pages_remote+0x10/0x10 [ 808.183417][T16635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.183435][T16635] __access_remote_vm+0x24d/0x850 [ 808.183460][T16635] ? do_raw_spin_lock+0x12c/0x2b0 [ 808.183481][T16635] ? __pfx___access_remote_vm+0x10/0x10 [ 808.183497][T16635] proc_pid_cmdline_read+0x4de/0x8e0 [ 808.183513][T16635] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 808.183526][T16635] ? rw_verify_area+0xcf/0x6c0 [ 808.183539][T16635] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 808.183550][T16635] vfs_readv+0x5c1/0x8b0 [ 808.183566][T16635] ? __pfx_vfs_readv+0x10/0x10 [ 808.183588][T16635] ? __fget_files+0x20e/0x3c0 [ 808.183607][T16635] ? do_preadv+0x1a6/0x270 [ 808.183619][T16635] do_preadv+0x1a6/0x270 [ 808.183631][T16635] ? __pfx_do_preadv+0x10/0x10 [ 808.183648][T16635] do_syscall_64+0xcd/0xf80 [ 808.183670][T16635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.183682][T16635] RIP: 0033:0x7fa3d498f749 [ 808.183692][T16635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.183705][T16635] RSP: 002b:00007fa3d5893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 808.183717][T16635] RAX: ffffffffffffffda RBX: 00007fa3d4be5fa0 RCX: 00007fa3d498f749 [ 808.183724][T16635] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 000000000000000b [ 808.183732][T16635] RBP: 00007fa3d4a13f91 R08: 0000000000000200 R09: 0000000000000000 [ 808.183739][T16635] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 808.183746][T16635] R13: 00007fa3d4be6038 R14: 00007fa3d4be5fa0 R15: 00007ffe08b565c8 [ 808.183761][T16635] [ 808.238391][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.327117][T16652] FAULT_INJECTION: forcing a failure. [ 808.327117][T16652] name failslab, interval 1, probability 0, space 0, times 0 [ 808.528397][T16653] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3231'. [ 808.658442][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.695208][T16653] netlink: 'syz.5.3231': attribute type 74 has an invalid length. [ 808.795388][T16652] CPU: 0 UID: 0 PID: 16652 Comm: syz.3.3232 Not tainted syzkaller #0 PREEMPT(full) [ 808.795421][T16652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.795432][T16652] Call Trace: [ 808.795439][T16652] [ 808.795446][T16652] dump_stack_lvl+0x16c/0x1f0 [ 808.795475][T16652] should_fail_ex+0x512/0x640 [ 808.795502][T16652] ? fs_reclaim_acquire+0xae/0x150 [ 808.795527][T16652] should_failslab+0xc2/0x120 [ 808.795551][T16652] __kmalloc_noprof+0xeb/0x910 [ 808.795579][T16652] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 808.795608][T16652] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 808.795630][T16652] tomoyo_realpath_from_path+0xc2/0x6e0 [ 808.795656][T16652] ? tomoyo_profile+0x47/0x60 [ 808.795684][T16652] tomoyo_path_number_perm+0x245/0x580 [ 808.795703][T16652] ? tomoyo_path_number_perm+0x237/0x580 [ 808.795729][T16652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 808.795754][T16652] ? find_held_lock+0x2b/0x80 [ 808.795803][T16652] ? find_held_lock+0x2b/0x80 [ 808.795828][T16652] ? hook_file_ioctl_common+0x144/0x410 [ 808.795861][T16652] ? __fget_files+0x20e/0x3c0 [ 808.795891][T16652] security_file_ioctl+0x9b/0x240 [ 808.795917][T16652] __x64_sys_ioctl+0xb7/0x210 [ 808.795941][T16652] do_syscall_64+0xcd/0xf80 [ 808.795965][T16652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.795982][T16652] RIP: 0033:0x7f3744f8f749 [ 808.795997][T16652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.796013][T16652] RSP: 002b:00007f37431ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.796030][T16652] RAX: ffffffffffffffda RBX: 00007f37451e5fa0 RCX: 00007f3744f8f749 [ 808.796040][T16652] RDX: 0000200000000280 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 808.796050][T16652] RBP: 00007f37431ee090 R08: 0000000000000000 R09: 0000000000000000 [ 808.796060][T16652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.796070][T16652] R13: 00007f37451e6038 R14: 00007f37451e5fa0 R15: 00007ffc18405e98 [ 808.796094][T16652] [ 808.796226][T16652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 809.177823][T16658] FAULT_INJECTION: forcing a failure. [ 809.177823][T16658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.210903][T16658] CPU: 1 UID: 0 PID: 16658 Comm: syz.5.3235 Not tainted syzkaller #0 PREEMPT(full) [ 809.210929][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.210941][T16658] Call Trace: [ 809.210947][T16658] [ 809.210954][T16658] dump_stack_lvl+0x16c/0x1f0 [ 809.210983][T16658] should_fail_ex+0x512/0x640 [ 809.211014][T16658] _copy_from_iter+0x2a4/0x16c0 [ 809.211045][T16658] ? __lock_acquire+0x436/0x2890 [ 809.211068][T16658] ? __pfx__copy_from_iter+0x10/0x10 [ 809.211106][T16658] vhost_chr_write_iter+0xc8/0x10f0 [ 809.211127][T16658] ? get_pid_task+0xfc/0x250 [ 809.211151][T16658] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 809.211170][T16658] ? selinux_file_permission+0x126/0x660 [ 809.211200][T16658] ? bpf_lsm_file_permission+0x9/0x10 [ 809.211217][T16658] ? security_file_permission+0x71/0x210 [ 809.211242][T16658] ? rw_verify_area+0xcf/0x6c0 [ 809.211264][T16658] vfs_write+0x7d3/0x11d0 [ 809.211287][T16658] ? __pfx_vhost_net_chr_write_iter+0x10/0x10 [ 809.211318][T16658] ? __pfx_vfs_write+0x10/0x10 [ 809.211338][T16658] ? find_held_lock+0x2b/0x80 [ 809.211377][T16658] ksys_write+0x12a/0x250 [ 809.211399][T16658] ? __pfx_ksys_write+0x10/0x10 [ 809.211420][T16658] ? fput+0x70/0xf0 [ 809.211436][T16658] do_syscall_64+0xcd/0xf80 [ 809.211460][T16658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.211476][T16658] RIP: 0033:0x7f35aab8f749 [ 809.211490][T16658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.211505][T16658] RSP: 002b:00007f35abb08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.211521][T16658] RAX: ffffffffffffffda RBX: 00007f35aade5fa0 RCX: 00007f35aab8f749 [ 809.211531][T16658] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 809.211540][T16658] RBP: 00007f35abb08090 R08: 0000000000000000 R09: 0000000000000000 [ 809.211549][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.211557][T16658] R13: 00007f35aade6038 R14: 00007f35aade5fa0 R15: 00007fffef852948 [ 809.211577][T16658] [ 809.854372][T16670] ip6t_srh: unknown srh invflags 7F00 [ 810.374718][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 810.731915][T16462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 810.758316][T16462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 810.803142][T16462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 810.847535][T16462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 811.201624][ T30] audit: type=1400 audit(2000000422.150:2018): avc: denied { shutdown } for pid=16681 comm="syz.4.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 811.530786][T16462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.597793][T16462] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.631170][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.638411][ T4036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.800055][T11196] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.807252][T11196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.232971][T16709] xt_cgroup: path and classid specified [ 812.367843][T16711] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 812.570239][T16710] gretap1: entered allmulticast mode [ 812.837244][T16462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.905244][T16722] netlink: 'syz.5.3248': attribute type 74 has an invalid length. [ 812.931285][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 813.271219][T16462] veth0_vlan: entered promiscuous mode [ 813.282382][T16462] veth1_vlan: entered promiscuous mode [ 813.414270][T16462] veth0_macvtap: entered promiscuous mode [ 813.463027][T16462] veth1_macvtap: entered promiscuous mode [ 813.654105][T16462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.189550][T16462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.240477][ T9916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.276693][ T9916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.319473][ T9916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.343430][ T9916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.463675][T11653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.496550][T11653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.593931][T16735] netlink: 'syz.4.3251': attribute type 74 has an invalid length. [ 814.915375][T11653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.923287][T11653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.216226][ T5922] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 815.391326][ T8237] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 815.419652][ T5922] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 815.434810][ T5922] usb 3-1: config 0 has no interface number 0 [ 815.443121][ T5922] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 815.452597][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.462786][ T5922] usb 3-1: Product: syz [ 815.467109][ T5922] usb 3-1: Manufacturer: syz [ 815.472905][ T5922] usb 3-1: SerialNumber: syz [ 815.497634][ T5922] usb 3-1: config 0 descriptor?? [ 815.776772][ T8237] usb 1-1: Using ep0 maxpacket: 8 [ 815.869629][ T8237] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 815.981057][ T8237] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 816.008599][ T8237] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.037874][ T8237] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.062337][ T8237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.082739][ T8237] usb 1-1: Product: syz [ 816.092089][ T8237] usb 1-1: Manufacturer: syz [ 816.101995][ T8237] usb 1-1: SerialNumber: syz [ 816.248446][ T5922] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 816.263782][ T5922] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 816.274778][ T5922] asix 3-1:0.251: probe with driver asix failed with error -5 [ 816.285836][ T5922] usb 3-1: USB disconnect, device number 43 [ 816.537745][T16758] FAULT_INJECTION: forcing a failure. [ 816.537745][T16758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.553567][T16758] CPU: 1 UID: 0 PID: 16758 Comm: syz.5.3256 Not tainted syzkaller #0 PREEMPT(full) [ 816.553595][T16758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 816.553606][T16758] Call Trace: [ 816.553618][T16758] [ 816.553625][T16758] dump_stack_lvl+0x16c/0x1f0 [ 816.553653][T16758] should_fail_ex+0x512/0x640 [ 816.553680][T16758] _copy_from_user+0x2e/0xd0 [ 816.553707][T16758] copy_msghdr_from_user+0x98/0x160 [ 816.553725][T16758] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 816.553749][T16758] ? __lock_acquire+0x436/0x2890 [ 816.553775][T16758] ___sys_recvmsg+0xdb/0x1a0 [ 816.553794][T16758] ? __pfx____sys_recvmsg+0x10/0x10 [ 816.553815][T16758] ? find_held_lock+0x2b/0x80 [ 816.553855][T16758] do_recvmmsg+0x2fe/0x750 [ 816.553875][T16758] ? __pfx_do_recvmmsg+0x10/0x10 [ 816.553898][T16758] ? __mutex_unlock_slowpath+0x161/0x790 [ 816.553927][T16758] ? __fget_files+0x20e/0x3c0 [ 816.553955][T16758] __x64_sys_recvmmsg+0x22a/0x280 [ 816.553976][T16758] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 816.554002][T16758] do_syscall_64+0xcd/0xf80 [ 816.554026][T16758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.554043][T16758] RIP: 0033:0x7f35aab8f749 [ 816.554057][T16758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.554074][T16758] RSP: 002b:00007f35abac6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 816.554091][T16758] RAX: ffffffffffffffda RBX: 00007f35aade6180 RCX: 00007f35aab8f749 [ 816.554101][T16758] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 816.554112][T16758] RBP: 00007f35abac6090 R08: 0000000000000000 R09: 0000000000000000 [ 816.554121][T16758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.554130][T16758] R13: 00007f35aade6218 R14: 00007f35aade6180 R15: 00007fffef852948 [ 816.554152][T16758] [ 816.925255][ T8237] usb 1-1: 0:2 : does not exist [ 816.944649][ T8237] usb 1-1: USB disconnect, device number 37 [ 816.979768][T16220] udevd[16220]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.791467][T16772] input input47: cannot allocate more than FF_MAX_EFFECTS effects [ 817.840192][T16772] gretap1: entered allmulticast mode [ 818.701050][T16787] ip6t_srh: unknown srh invflags 7F00 [ 818.765812][T16788] xt_cgroup: path and classid specified [ 819.745688][T16795] openvswitch: netlink: IP tunnel dst address not specified [ 819.954959][T16799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=16799 comm=syz.2.3266 [ 820.023502][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3266'. [ 821.024662][ T8237] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 821.097507][T16813] ip6t_srh: unknown srh invflags 7F00 [ 821.728939][ T8237] usb 1-1: Using ep0 maxpacket: 8 [ 821.751915][ T8237] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 821.774688][ T8237] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 821.804647][ T8237] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 821.836244][ T8237] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 821.845544][ T8237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.854726][ T8237] usb 1-1: Product: syz [ 821.859004][ T8237] usb 1-1: Manufacturer: syz [ 821.863598][ T8237] usb 1-1: SerialNumber: syz [ 822.288943][T16829] ip6t_srh: unknown srh invflags 7F00 [ 822.298872][T16829] xt_cgroup: path and classid specified [ 823.003438][ T8237] usb 1-1: 0:2 : does not exist [ 823.533200][T16835] overlayfs: failed to resolve './file0': -2 [ 823.546082][ T8237] usb 1-1: USB disconnect, device number 38 [ 823.714695][ T6059] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 824.015783][ T6059] usb 4-1: Using ep0 maxpacket: 8 [ 824.041775][ T6059] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 824.077394][ T6059] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 824.113291][ T6059] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 824.152176][ T6059] usb 4-1: Product: syz [ 824.166836][ T6059] usb 4-1: Manufacturer: syz [ 824.206021][ T6059] usb 4-1: SerialNumber: syz [ 824.475484][ T6059] usb 4-1: Invalid connection information received from device [ 824.914756][ T30] audit: type=1400 audit(2000000435.890:2019): avc: denied { lock } for pid=16844 comm="syz.4.3283" path="socket:[65847]" dev="sockfs" ino=65847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 825.089161][ T24] usb 4-1: USB disconnect, device number 32 [ 826.024761][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 826.215147][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 826.232499][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 826.263033][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 826.307851][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 826.344114][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 826.364758][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.396029][ T9] usb 4-1: Product: syz [ 826.400935][ T9] usb 4-1: Manufacturer: syz [ 826.426542][ T9] usb 4-1: SerialNumber: syz [ 826.956771][T16904] ip6t_srh: unknown srh invflags 7F00 [ 827.402201][ T9] usb 4-1: 0:2 : does not exist [ 827.503692][ T9] usb 4-1: USB disconnect, device number 33 [ 827.910931][T16220] udevd[16220]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.051335][T16923] openvswitch: netlink: IPv4 tun info is not correct [ 828.343414][T16936] FAULT_INJECTION: forcing a failure. [ 828.343414][T16936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.357184][T16936] CPU: 0 UID: 0 PID: 16936 Comm: syz.4.3315 Not tainted syzkaller #0 PREEMPT(full) [ 828.357209][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 828.357219][T16936] Call Trace: [ 828.357225][T16936] [ 828.357231][T16936] dump_stack_lvl+0x16c/0x1f0 [ 828.357258][T16936] should_fail_ex+0x512/0x640 [ 828.357287][T16936] _copy_from_user+0x2e/0xd0 [ 828.357312][T16936] copy_msghdr_from_user+0x98/0x160 [ 828.357331][T16936] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 828.357358][T16936] ___sys_sendmsg+0xfe/0x1d0 [ 828.357377][T16936] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.357424][T16936] __sys_sendmsg+0x16d/0x220 [ 828.357444][T16936] ? __pfx___sys_sendmsg+0x10/0x10 [ 828.357478][T16936] do_syscall_64+0xcd/0xf80 [ 828.357501][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.357516][T16936] RIP: 0033:0x7f2e2e78f749 [ 828.357530][T16936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.357545][T16936] RSP: 002b:00007f2e2f63b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.357568][T16936] RAX: ffffffffffffffda RBX: 00007f2e2e9e5fa0 RCX: 00007f2e2e78f749 [ 828.357580][T16936] RDX: 0000000004008094 RSI: 0000200000002780 RDI: 0000000000000003 [ 828.357591][T16936] RBP: 00007f2e2f63b090 R08: 0000000000000000 R09: 0000000000000000 [ 828.357602][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.357611][T16936] R13: 00007f2e2e9e6038 R14: 00007f2e2e9e5fa0 R15: 00007ffc1f191c78 [ 828.357632][T16936] [ 828.574120][T16937] ip6t_srh: unknown srh invflags 7F00 [ 829.014118][ T30] audit: type=1400 audit(2000000439.980:2020): avc: denied { execute } for pid=16938 comm="syz.4.3316" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=66600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 830.394791][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 830.554006][T16969] FAULT_INJECTION: forcing a failure. [ 830.554006][T16969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.627021][T16969] CPU: 0 UID: 0 PID: 16969 Comm: syz.3.3325 Not tainted syzkaller #0 PREEMPT(full) [ 830.627047][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.627058][T16969] Call Trace: [ 830.627064][T16969] [ 830.627072][T16969] dump_stack_lvl+0x16c/0x1f0 [ 830.627099][T16969] should_fail_ex+0x512/0x640 [ 830.627130][T16969] _copy_from_user+0x2e/0xd0 [ 830.627157][T16969] copy_msghdr_from_user+0x98/0x160 [ 830.627176][T16969] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 830.627193][T16969] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.627227][T16969] ? rcu_is_watching+0x12/0xc0 [ 830.627250][T16969] ___sys_sendmsg+0xfe/0x1d0 [ 830.627268][T16969] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.627293][T16969] ? find_held_lock+0x2b/0x80 [ 830.627330][T16969] __sys_sendmmsg+0x200/0x420 [ 830.627351][T16969] ? __pfx___sys_sendmmsg+0x10/0x10 [ 830.627372][T16969] ? rcu_is_watching+0x12/0xc0 [ 830.627386][T16969] ? irqentry_exit+0x1dd/0x8c0 [ 830.627406][T16969] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.627437][T16969] ? __sys_sendmmsg+0x10/0x420 [ 830.627455][T16969] __x64_sys_sendmmsg+0x9c/0x100 [ 830.627472][T16969] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.627492][T16969] do_syscall_64+0xcd/0xf80 [ 830.627514][T16969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.627531][T16969] RIP: 0033:0x7f3744f8f749 [ 830.627545][T16969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.627562][T16969] RSP: 002b:00007f37431ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 830.627577][T16969] RAX: ffffffffffffffda RBX: 00007f37451e5fa0 RCX: 00007f3744f8f749 [ 830.627588][T16969] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000004 [ 830.627597][T16969] RBP: 00007f37431ee090 R08: 0000000000000000 R09: 0000000000000000 [ 830.627608][T16969] R10: 0000000002004800 R11: 0000000000000246 R12: 0000000000000001 [ 830.627619][T16969] R13: 00007f37451e6038 R14: 00007f37451e5fa0 R15: 00007ffc18405e98 [ 830.627643][T16969] [ 830.664642][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 830.948858][ T24] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 830.961015][ T24] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 830.972770][ T24] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.985745][ T24] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 831.001272][ T24] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 831.011262][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.019302][ T24] usb 1-1: Product: syz [ 831.023473][ T24] usb 1-1: Manufacturer: syz [ 831.031969][ T24] usb 1-1: SerialNumber: syz [ 831.049301][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 831.059240][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input48 [ 831.341905][T16367] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 831.514658][T16367] usb 3-1: Using ep0 maxpacket: 32 [ 831.521473][T16367] usb 3-1: config 0 has no interfaces? [ 831.531997][T16367] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 831.555767][T16367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.570373][T16367] usb 3-1: Product: syz [ 831.579230][T16367] usb 3-1: Manufacturer: syz [ 831.586119][T16367] usb 3-1: SerialNumber: syz [ 831.600360][T16367] usb 3-1: config 0 descriptor?? [ 831.826282][ T8237] usb 3-1: USB disconnect, device number 44 [ 831.852229][T16994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3332'. [ 832.194861][T16975] FAULT_INJECTION: forcing a failure. [ 832.194861][T16975] name failslab, interval 1, probability 0, space 0, times 0 [ 832.337622][T16975] CPU: 0 UID: 0 PID: 16975 Comm: syz.2.3327 Not tainted syzkaller #0 PREEMPT(full) [ 832.337644][T16975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.337651][T16975] Call Trace: [ 832.337655][T16975] [ 832.337660][T16975] dump_stack_lvl+0x16c/0x1f0 [ 832.337678][T16975] should_fail_ex+0x512/0x640 [ 832.337696][T16975] ? fs_reclaim_acquire+0xae/0x150 [ 832.337721][T16975] should_failslab+0xc2/0x120 [ 832.337744][T16975] __kmalloc_noprof+0xeb/0x910 [ 832.337771][T16975] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.337793][T16975] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.337808][T16975] tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.337824][T16975] ? tomoyo_profile+0x47/0x60 [ 832.337841][T16975] tomoyo_path_number_perm+0x245/0x580 [ 832.337860][T16975] ? tomoyo_path_number_perm+0x237/0x580 [ 832.337883][T16975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 832.337905][T16975] ? find_held_lock+0x2b/0x80 [ 832.337951][T16975] ? find_held_lock+0x2b/0x80 [ 832.337967][T16975] ? hook_file_ioctl_common+0x144/0x410 [ 832.337988][T16975] ? __fget_files+0x20e/0x3c0 [ 832.338014][T16975] security_file_ioctl+0x9b/0x240 [ 832.338037][T16975] __x64_sys_ioctl+0xb7/0x210 [ 832.338072][T16975] do_syscall_64+0xcd/0xf80 [ 832.338089][T16975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.338100][T16975] RIP: 0033:0x7fa3d498f34b [ 832.338110][T16975] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 832.338121][T16975] RSP: 002b:00007fa3d5890f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.338132][T16975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa3d498f34b [ 832.338140][T16975] RDX: 00007fa3d5891ff0 RSI: 0000000080085502 RDI: 0000000000000003 [ 832.338151][T16975] RBP: 00007fa3d5893090 R08: 0000000000000000 R09: 0000000000000000 [ 832.338161][T16975] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 832.338171][T16975] R13: 0000000000000000 R14: 00007fa3d4be5fa0 R15: 00007ffe08b565c8 [ 832.338195][T16975] [ 832.338201][T16975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.337690][ T24] imon:send_packet: packet tx failed (-71) [ 833.364634][ T24] imon 1-1:155.0: panel buttons/knobs setup failed [ 833.371198][ T24] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 833.394895][ T24] (id 0x00) [ 833.464809][ T24] rc_core: IR keymap rc-imon-pad not found [ 833.481543][ T24] Registered IR keymap rc-empty [ 833.486658][ T8237] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 833.500486][ T24] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 833.502668][ T30] audit: type=1400 audit(2000000444.470:2021): avc: denied { read } for pid=17008 comm="syz.4.3337" path="socket:[66774]" dev="sockfs" ino=66774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 833.511963][ T24] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 833.558906][ T24] imon:send_packet: packet tx failed (-71) [ 833.603438][T17016] openvswitch: netlink: IP tunnel dst address not specified [ 833.610971][ T24] imon 1-1:155.0: remote input dev register failed [ 833.628573][ T24] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 833.655018][ T8237] usb 6-1: Using ep0 maxpacket: 8 [ 833.683224][ T8237] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 833.694618][ T8237] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 833.714727][ T8237] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.158606][T17017] xt_cgroup: path and classid specified [ 834.182614][ T24] imon 1-1:155.0: unable to initialize intf0, err 0 [ 834.198033][ T8237] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 834.228724][ T8237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.236901][ T24] imon:imon_probe: failed to initialize context! [ 834.245928][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 834.266125][ T24] imon 1-1:155.0: unable to register, err -19 [ 834.274384][ T8237] usb 6-1: Product: syz [ 834.284486][ T8237] usb 6-1: Manufacturer: syz [ 834.298253][ T24] usb 1-1: USB disconnect, device number 39 [ 834.306478][ T8237] usb 6-1: SerialNumber: syz [ 834.769791][T17028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3340'. [ 834.917559][T17030] netlink: 'syz.0.3340': attribute type 74 has an invalid length. [ 836.691018][T17041] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 836.909902][ T8237] usb 6-1: 0:2 : does not exist [ 836.929523][T17041] gretap1: entered allmulticast mode [ 836.951549][ T8237] usb 6-1: USB disconnect, device number 3 [ 836.986572][T16220] udevd[16220]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.992601][T17048] overlayfs: failed to resolve './file0': -2 [ 837.009131][T17046] FAULT_INJECTION: forcing a failure. [ 837.009131][T17046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.023424][T17046] CPU: 1 UID: 0 PID: 17046 Comm: syz.5.3346 Not tainted syzkaller #0 PREEMPT(full) [ 837.023447][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.023454][T17046] Call Trace: [ 837.023458][T17046] [ 837.023462][T17046] dump_stack_lvl+0x16c/0x1f0 [ 837.023481][T17046] should_fail_ex+0x512/0x640 [ 837.023500][T17046] _copy_from_user+0x2e/0xd0 [ 837.023518][T17046] copy_msghdr_from_user+0x98/0x160 [ 837.023530][T17046] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 837.023544][T17046] ? __lock_acquire+0x436/0x2890 [ 837.023559][T17046] ___sys_recvmsg+0xdb/0x1a0 [ 837.023571][T17046] ? __pfx____sys_recvmsg+0x10/0x10 [ 837.023583][T17046] ? find_held_lock+0x2b/0x80 [ 837.023607][T17046] do_recvmmsg+0x2fe/0x750 [ 837.023620][T17046] ? __pfx_do_recvmmsg+0x10/0x10 [ 837.023634][T17046] ? __mutex_unlock_slowpath+0x161/0x790 [ 837.023653][T17046] ? __fget_files+0x20e/0x3c0 [ 837.023672][T17046] __x64_sys_recvmmsg+0x22a/0x280 [ 837.023684][T17046] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 837.023700][T17046] do_syscall_64+0xcd/0xf80 [ 837.023715][T17046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.023726][T17046] RIP: 0033:0x7f35aab8f749 [ 837.023736][T17046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.023747][T17046] RSP: 002b:00007f35abb08038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 837.023758][T17046] RAX: ffffffffffffffda RBX: 00007f35aade5fa0 RCX: 00007f35aab8f749 [ 837.023765][T17046] RDX: 0000000000000001 RSI: 0000200000006980 RDI: 0000000000000003 [ 837.023772][T17046] RBP: 00007f35abb08090 R08: 0000000000000000 R09: 0000000000000000 [ 837.023778][T17046] R10: 0000000040000020 R11: 0000000000000246 R12: 0000000000000001 [ 837.023784][T17046] R13: 00007f35aade6038 R14: 00007f35aade5fa0 R15: 00007fffef852948 [ 837.023798][T17046] [ 837.428803][T17050] macvlan1: entered promiscuous mode [ 838.141111][T17061] netlink: 'syz.0.3349': attribute type 74 has an invalid length. [ 838.386987][T17063] xt_cgroup: path and classid specified [ 840.082818][T17072] ip6t_srh: unknown srh invflags 7F00 [ 840.106267][T17072] xt_cgroup: path and classid specified [ 840.889430][T17080] openvswitch: netlink: IP tunnel dst address not specified [ 840.983759][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3353'. [ 842.016352][T17103] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 842.403658][T17105] evm: overlay not supported [ 842.433765][T17111] FAULT_INJECTION: forcing a failure. [ 842.433765][T17111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.464784][T17111] CPU: 1 UID: 0 PID: 17111 Comm: syz.3.3360 Not tainted syzkaller #0 PREEMPT(full) [ 842.464808][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.464817][T17111] Call Trace: [ 842.464822][T17111] [ 842.464828][T17111] dump_stack_lvl+0x16c/0x1f0 [ 842.464852][T17111] should_fail_ex+0x512/0x640 [ 842.464879][T17111] _copy_from_user+0x2e/0xd0 [ 842.464902][T17111] mptcp_setsockopt+0x13ef/0x3380 [ 842.464927][T17111] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 842.464951][T17111] ? find_held_lock+0x2b/0x80 [ 842.464978][T17111] ? selinux_socket_setsockopt+0x6a/0x80 [ 842.464995][T17111] ? sock_common_setsockopt+0x2e/0xf0 [ 842.465014][T17111] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 842.465034][T17111] do_sock_setsockopt+0xf3/0x1d0 [ 842.465055][T17111] __sys_setsockopt+0x1a0/0x230 [ 842.465073][T17111] __x64_sys_setsockopt+0xbd/0x160 [ 842.465086][T17111] ? do_syscall_64+0x91/0xf80 [ 842.465104][T17111] ? lockdep_hardirqs_on+0x7c/0x110 [ 842.465121][T17111] do_syscall_64+0xcd/0xf80 [ 842.465140][T17111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.465156][T17111] RIP: 0033:0x7f3744f8f749 [ 842.465170][T17111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.465186][T17111] RSP: 002b:00007f37431cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 842.465203][T17111] RAX: ffffffffffffffda RBX: 00007f37451e6090 RCX: 00007f3744f8f749 [ 842.465214][T17111] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000004 [ 842.465223][T17111] RBP: 00007f37431cd090 R08: 0000000000000028 R09: 0000000000000000 [ 842.465233][T17111] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 842.465244][T17111] R13: 00007f37451e6128 R14: 00007f37451e6090 R15: 00007ffc18405e98 [ 842.465266][T17111] [ 844.693136][T17138] FAULT_INJECTION: forcing a failure. [ 844.693136][T17138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.835243][T17138] CPU: 0 UID: 0 PID: 17138 Comm: syz.4.3368 Not tainted syzkaller #0 PREEMPT(full) [ 844.835269][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.835281][T17138] Call Trace: [ 844.835287][T17138] [ 844.835295][T17138] dump_stack_lvl+0x16c/0x1f0 [ 844.835323][T17138] should_fail_ex+0x512/0x640 [ 844.835362][T17138] _copy_to_user+0x32/0xd0 [ 844.835392][T17138] simple_read_from_buffer+0xcb/0x170 [ 844.835421][T17138] proc_fail_nth_read+0x197/0x240 [ 844.835442][T17138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 844.835463][T17138] ? rw_verify_area+0xcf/0x6c0 [ 844.835483][T17138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 844.835502][T17138] vfs_read+0x1e4/0xcf0 [ 844.835526][T17138] ? __pfx___mutex_lock+0x10/0x10 [ 844.835554][T17138] ? __pfx_vfs_read+0x10/0x10 [ 844.835584][T17138] ? __fget_files+0x20e/0x3c0 [ 844.835618][T17138] ksys_read+0x12a/0x250 [ 844.835640][T17138] ? __pfx_ksys_read+0x10/0x10 [ 844.835663][T17138] ? fdget+0x187/0x210 [ 844.835692][T17138] do_syscall_64+0xcd/0xf80 [ 844.835718][T17138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.835735][T17138] RIP: 0033:0x7f2e2e78e15c [ 844.835745][T17138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 844.835758][T17138] RSP: 002b:00007f2e2f61a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 844.835770][T17138] RAX: ffffffffffffffda RBX: 00007f2e2e9e6090 RCX: 00007f2e2e78e15c [ 844.835777][T17138] RDX: 000000000000000f RSI: 00007f2e2f61a0a0 RDI: 0000000000000005 [ 844.835784][T17138] RBP: 00007f2e2f61a090 R08: 0000000000000000 R09: 0000000000000000 [ 844.835791][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.835798][T17138] R13: 00007f2e2e9e6128 R14: 00007f2e2e9e6090 R15: 00007ffc1f191c78 [ 844.835812][T17138] [ 845.443231][T17143] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 846.132942][T17143] gretap1: entered allmulticast mode [ 848.665968][T17181] ip6t_srh: unknown srh invflags 7F00 [ 848.688173][T17181] xt_cgroup: path and classid specified [ 849.326253][T17190] ip6t_srh: unknown srh invflags 7F00 [ 849.797714][T17192] FAULT_INJECTION: forcing a failure. [ 849.797714][T17192] name failslab, interval 1, probability 0, space 0, times 0 [ 849.835681][T17192] CPU: 0 UID: 0 PID: 17192 Comm: syz.4.3384 Not tainted syzkaller #0 PREEMPT(full) [ 849.835708][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.835720][T17192] Call Trace: [ 849.835726][T17192] [ 849.835734][T17192] dump_stack_lvl+0x16c/0x1f0 [ 849.835769][T17192] should_fail_ex+0x512/0x640 [ 849.835795][T17192] ? fs_reclaim_acquire+0xae/0x150 [ 849.835823][T17192] should_failslab+0xc2/0x120 [ 849.835849][T17192] __kmalloc_noprof+0xeb/0x910 [ 849.835881][T17192] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 849.835910][T17192] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 849.835934][T17192] tomoyo_realpath_from_path+0xc2/0x6e0 [ 849.835960][T17192] ? tomoyo_profile+0x47/0x60 [ 849.835991][T17192] tomoyo_path_number_perm+0x245/0x580 [ 849.836012][T17192] ? tomoyo_path_number_perm+0x237/0x580 [ 849.836036][T17192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 849.836060][T17192] ? find_held_lock+0x2b/0x80 [ 849.836111][T17192] ? find_held_lock+0x2b/0x80 [ 849.836144][T17192] ? hook_file_ioctl_common+0x144/0x410 [ 849.836179][T17192] ? __fget_files+0x20e/0x3c0 [ 849.836209][T17192] security_file_ioctl+0x9b/0x240 [ 849.836236][T17192] __x64_sys_ioctl+0xb7/0x210 [ 849.836259][T17192] do_syscall_64+0xcd/0xf80 [ 849.836286][T17192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.836305][T17192] RIP: 0033:0x7f2e2e78f749 [ 849.836320][T17192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.836338][T17192] RSP: 002b:00007f2e2f63b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.836356][T17192] RAX: ffffffffffffffda RBX: 00007f2e2e9e5fa0 RCX: 00007f2e2e78f749 [ 849.836369][T17192] RDX: 0000200000000100 RSI: 000000000000891c RDI: 0000000000000003 [ 849.836380][T17192] RBP: 00007f2e2f63b090 R08: 0000000000000000 R09: 0000000000000000 [ 849.836391][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.836402][T17192] R13: 00007f2e2e9e6038 R14: 00007f2e2e9e5fa0 R15: 00007ffc1f191c78 [ 849.836427][T17192] [ 849.836481][T17192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 852.282098][T17223] ip6t_srh: unknown srh invflags 7F00 [ 852.305193][T17223] xt_cgroup: path and classid specified [ 852.707113][T17225] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3394'. [ 852.788582][ T30] audit: type=1400 audit(2000000463.760:2022): avc: denied { append } for pid=17229 comm="syz.4.3397" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 852.947163][T17233] openvswitch: netlink: IP tunnel dst address not specified [ 853.057670][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3396'. [ 853.382703][T17245] ip6t_srh: unknown srh invflags 7F00 [ 855.317216][T17255] tipc: Failed to obtain node identity [ 855.334096][T17255] tipc: Enabling of bearer rejected, failed to enable media [ 855.610446][ T6048] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 856.436571][ T6048] usb 4-1: Using ep0 maxpacket: 32 [ 856.461826][ T6048] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 856.504267][ T6048] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 856.754687][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 856.961863][ T6048] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 856.990844][ T6048] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 857.022202][ T6048] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 857.155247][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.163314][ T6048] usb 4-1: Product: syz [ 857.250107][ T6048] usb 4-1: Manufacturer: syz [ 857.259691][ T6048] usb 4-1: SerialNumber: syz [ 857.294053][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 857.306296][ T6048] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input52 [ 858.081658][T17283] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3410'. [ 858.159863][T17284] netlink: 'syz.5.3410': attribute type 74 has an invalid length. [ 859.368678][ T6048] imon:send_packet: packet tx failed (-71) [ 859.527245][ T6048] imon 4-1:155.0: panel buttons/knobs setup failed [ 859.714249][ T6048] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 859.873735][ T6048] (id 0x00) [ 859.971353][T17306] FAULT_INJECTION: forcing a failure. [ 859.971353][T17306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.036685][T17306] CPU: 1 UID: 0 PID: 17306 Comm: syz.5.3416 Not tainted syzkaller #0 PREEMPT(full) [ 860.036717][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.036729][T17306] Call Trace: [ 860.036735][T17306] [ 860.036743][T17306] dump_stack_lvl+0x16c/0x1f0 [ 860.036775][T17306] should_fail_ex+0x512/0x640 [ 860.036808][T17306] _copy_from_user+0x2e/0xd0 [ 860.036837][T17306] __sys_bpf+0x248/0x4980 [ 860.036868][T17306] ? __pfx___sys_bpf+0x10/0x10 [ 860.036893][T17306] ? find_held_lock+0x2b/0x80 [ 860.036931][T17306] ? find_held_lock+0x2b/0x80 [ 860.036963][T17306] ? __mutex_unlock_slowpath+0x161/0x790 [ 860.037003][T17306] ? fput+0x70/0xf0 [ 860.037020][T17306] ? ksys_write+0x1ac/0x250 [ 860.037042][T17306] ? __pfx_ksys_write+0x10/0x10 [ 860.037069][T17306] __x64_sys_bpf+0x78/0xc0 [ 860.037094][T17306] ? lockdep_hardirqs_on+0x7c/0x110 [ 860.037118][T17306] do_syscall_64+0xcd/0xf80 [ 860.037143][T17306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.037163][T17306] RIP: 0033:0x7f35aab8f749 [ 860.037177][T17306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.037201][T17306] RSP: 002b:00007f35abb08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.037221][T17306] RAX: ffffffffffffffda RBX: 00007f35aade5fa0 RCX: 00007f35aab8f749 [ 860.037233][T17306] RDX: 00000000000000eb RSI: 0000200000000240 RDI: 000000000000000a [ 860.037244][T17306] RBP: 00007f35abb08090 R08: 0000000000000000 R09: 0000000000000000 [ 860.037255][T17306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.037267][T17306] R13: 00007f35aade6038 R14: 00007f35aade5fa0 R15: 00007fffef852948 [ 860.037292][T17306] [ 860.688562][ T6048] rc_core: IR keymap rc-imon-pad not found [ 860.703099][ T6048] Registered IR keymap rc-empty [ 860.708411][ T6048] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 860.719368][ T6048] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 860.729067][ T6048] imon:send_packet: packet tx failed (-71) [ 860.749126][T17309] xt_cgroup: path and classid specified [ 860.755248][ T6048] imon 4-1:155.0: remote input dev register failed [ 860.761875][ T6048] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 860.849750][ T6048] imon 4-1:155.0: unable to initialize intf0, err 0 [ 860.889166][ T6048] imon:imon_probe: failed to initialize context! [ 861.029262][ T6048] imon 4-1:155.0: unable to register, err -19 [ 861.340548][ T6048] usb 4-1: USB disconnect, device number 34 [ 861.466334][ T30] audit: type=1400 audit(2000000472.440:2023): avc: denied { create } for pid=17315 comm="syz.2.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 862.483007][T17345] openvswitch: netlink: IP tunnel dst address not specified [ 862.506817][T17344] openvswitch: netlink: IP tunnel dst address not specified [ 862.605591][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3424'. [ 862.658138][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'. [ 864.496811][T17368] sctp: [Deprecated]: syz.4.3428 (pid 17368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 864.496811][T17368] Use struct sctp_sack_info instead [ 864.856203][T17379] overlayfs: failed to resolve './file0': -2 [ 864.922682][T17382] ip6t_srh: unknown srh invflags 7F00 [ 864.942601][T17382] xt_cgroup: path and classid specified [ 864.980219][ T6044] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 865.376941][T17384] ip6t_srh: unknown srh invflags 7F00 [ 865.389676][T17384] xt_cgroup: path and classid specified [ 865.919874][ T6044] usb 3-1: Using ep0 maxpacket: 8 [ 865.935749][ T6044] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 865.950112][ T6044] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 865.968553][ T6044] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.984074][ T6044] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 865.993254][ T6044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.004061][ T6044] usb 3-1: Product: syz [ 866.008304][ T6044] usb 3-1: Manufacturer: syz [ 866.022253][ T6044] usb 3-1: SerialNumber: syz [ 868.956557][ T6044] usb 3-1: 0:2 : does not exist [ 869.004853][ T6044] usb 3-1: USB disconnect, device number 45 [ 869.056501][T17079] udevd[17079]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.290225][T17426] FAULT_INJECTION: forcing a failure. [ 869.290225][T17426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.324665][T17426] CPU: 1 UID: 0 PID: 17426 Comm: syz.3.3444 Not tainted syzkaller #0 PREEMPT(full) [ 869.324692][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 869.324704][T17426] Call Trace: [ 869.324711][T17426] [ 869.324719][T17426] dump_stack_lvl+0x16c/0x1f0 [ 869.324748][T17426] should_fail_ex+0x512/0x640 [ 869.324780][T17426] ? __pfx_eventfd_write+0x10/0x10 [ 869.324802][T17426] _copy_from_user+0x2e/0xd0 [ 869.324830][T17426] eventfd_write+0xdb/0x670 [ 869.324853][T17426] ? import_ubuf+0x1b6/0x220 [ 869.324877][T17426] ? __pfx_eventfd_write+0x10/0x10 [ 869.324903][T17426] ? selinux_file_permission+0x126/0x660 [ 869.324931][T17426] ? bpf_lsm_file_permission+0x9/0x10 [ 869.324950][T17426] ? security_file_permission+0x71/0x210 [ 869.324976][T17426] ? rw_verify_area+0xcf/0x6c0 [ 869.324998][T17426] ? __pfx_eventfd_write+0x10/0x10 [ 869.325020][T17426] vfs_writev+0x5df/0xde0 [ 869.325048][T17426] ? __pfx_vfs_writev+0x10/0x10 [ 869.325087][T17426] ? __fget_files+0x20e/0x3c0 [ 869.325110][T17426] ? __fget_files+0x130/0x3c0 [ 869.325141][T17426] ? do_writev+0x132/0x340 [ 869.325159][T17426] do_writev+0x132/0x340 [ 869.325186][T17426] ? __pfx_do_writev+0x10/0x10 [ 869.325214][T17426] do_syscall_64+0xcd/0xf80 [ 869.325240][T17426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.325259][T17426] RIP: 0033:0x7f3744f8f749 [ 869.325275][T17426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.325293][T17426] RSP: 002b:00007f3743168038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 869.325312][T17426] RAX: ffffffffffffffda RBX: 00007f37451e6090 RCX: 00007f3744f8f749 [ 869.325325][T17426] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 869.325336][T17426] RBP: 00007f3743168090 R08: 0000000000000000 R09: 0000000000000000 [ 869.325347][T17426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.325358][T17426] R13: 00007f37451e6128 R14: 00007f37451e6090 R15: 00007ffc18405e98 [ 869.325384][T17426] [ 869.661312][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.679811][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.051955][T17434] ip6t_srh: unknown srh invflags 7F00 [ 870.079244][T17434] xt_cgroup: path and classid specified [ 870.391312][T17441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3446'. [ 871.081881][T17442] netlink: 'syz.2.3446': attribute type 74 has an invalid length. [ 871.367747][T17451] FAULT_INJECTION: forcing a failure. [ 871.367747][T17451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.382569][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.3.3450 Not tainted syzkaller #0 PREEMPT(full) [ 871.382597][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.382608][T17451] Call Trace: [ 871.382615][T17451] [ 871.382624][T17451] dump_stack_lvl+0x16c/0x1f0 [ 871.382654][T17451] should_fail_ex+0x512/0x640 [ 871.382685][T17451] _copy_from_user+0x2e/0xd0 [ 871.382715][T17451] ucma_write+0x128/0x330 [ 871.382742][T17451] ? __pfx_ucma_write+0x10/0x10 [ 871.382767][T17451] ? bpf_lsm_file_permission+0x9/0x10 [ 871.382786][T17451] ? security_file_permission+0x71/0x210 [ 871.382814][T17451] ? rw_verify_area+0xcf/0x6c0 [ 871.382837][T17451] ? __pfx_ucma_write+0x10/0x10 [ 871.382860][T17451] vfs_writev+0x5df/0xde0 [ 871.382886][T17451] ? __pfx_vfs_writev+0x10/0x10 [ 871.382926][T17451] ? __fget_files+0x20e/0x3c0 [ 871.382951][T17451] ? __fget_files+0x130/0x3c0 [ 871.382982][T17451] ? do_writev+0x28c/0x340 [ 871.383002][T17451] do_writev+0x28c/0x340 [ 871.383024][T17451] ? __pfx_do_writev+0x10/0x10 [ 871.383053][T17451] do_syscall_64+0xcd/0xf80 [ 871.383080][T17451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.383100][T17451] RIP: 0033:0x7f3744f8f749 [ 871.383115][T17451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.383140][T17451] RSP: 002b:00007f37431ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 871.383159][T17451] RAX: ffffffffffffffda RBX: 00007f37451e5fa0 RCX: 00007f3744f8f749 [ 871.383172][T17451] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 871.383183][T17451] RBP: 00007f37431ee090 R08: 0000000000000000 R09: 0000000000000000 [ 871.383194][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.383205][T17451] R13: 00007f37451e6038 R14: 00007f37451e5fa0 R15: 00007ffc18405e98 [ 871.383231][T17451] [ 872.986723][ T30] audit: type=1800 audit(2000000483.960:2024): pid=17479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3459" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 873.187299][T17490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3461'. [ 873.708752][T17492] netlink: 'syz.4.3461': attribute type 74 has an invalid length. [ 874.013256][ T24] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 874.175929][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 874.186887][ T24] usb 4-1: config 0 has no interface number 0 [ 874.194329][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 874.205800][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 874.217146][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 874.229762][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 874.248853][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 874.260549][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 874.283935][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 874.295346][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.307114][ T24] usb 4-1: config 0 descriptor?? [ 874.320056][T17474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 874.334942][ T5938] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 874.342960][T17474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 874.373727][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 874.494648][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 874.503149][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.536797][T17511] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 874.546979][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.583624][ T24] usb 4-1: USB disconnect, device number 35 [ 874.605170][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 874.616104][ T5938] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 874.664095][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.687298][T17511] gretap1: entered allmulticast mode [ 874.707839][ T5938] usb 1-1: config 0 descriptor?? [ 874.731081][T17515] FAULT_INJECTION: forcing a failure. [ 874.731081][T17515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.747012][T17515] CPU: 1 UID: 0 PID: 17515 Comm: syz.5.3469 Not tainted syzkaller #0 PREEMPT(full) [ 874.747036][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.747045][T17515] Call Trace: [ 874.747051][T17515] [ 874.747058][T17515] dump_stack_lvl+0x16c/0x1f0 [ 874.747079][T17515] should_fail_ex+0x512/0x640 [ 874.747100][T17515] _copy_to_user+0x32/0xd0 [ 874.747118][T17515] simple_read_from_buffer+0xcb/0x170 [ 874.747135][T17515] proc_fail_nth_read+0x197/0x240 [ 874.747149][T17515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.747161][T17515] ? rw_verify_area+0xcf/0x6c0 [ 874.747173][T17515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.747184][T17515] vfs_read+0x1e4/0xcf0 [ 874.747199][T17515] ? __pfx___mutex_lock+0x10/0x10 [ 874.747216][T17515] ? __pfx_vfs_read+0x10/0x10 [ 874.747233][T17515] ? __fget_files+0x20e/0x3c0 [ 874.747252][T17515] ksys_read+0x12a/0x250 [ 874.747265][T17515] ? __pfx_ksys_read+0x10/0x10 [ 874.747283][T17515] do_syscall_64+0xcd/0xf80 [ 874.747298][T17515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.747310][T17515] RIP: 0033:0x7f35aab8e15c [ 874.747319][T17515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 874.747330][T17515] RSP: 002b:00007f35abae7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 874.747341][T17515] RAX: ffffffffffffffda RBX: 00007f35aade6090 RCX: 00007f35aab8e15c [ 874.747348][T17515] RDX: 000000000000000f RSI: 00007f35abae70a0 RDI: 0000000000000006 [ 874.747355][T17515] RBP: 00007f35abae7090 R08: 0000000000000000 R09: 0000000000000000 [ 874.747361][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.747368][T17515] R13: 00007f35aade6128 R14: 00007f35aade6090 R15: 00007fffef852948 [ 874.747382][T17515] [ 875.245291][ T30] audit: type=1400 audit(2000000486.210:2025): avc: denied { ioctl } for pid=17493 comm="syz.0.3462" path="socket:[69078]" dev="sockfs" ino=69078 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 875.326429][ T5938] ft260 0003:0403:6030.0005: item fetching failed at offset 1/2 [ 875.334758][ T5938] ft260 0003:0403:6030.0005: failed to parse HID [ 875.341190][ T5938] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -22 [ 875.657333][ T30] audit: type=1400 audit(2000000486.540:2026): avc: denied { write } for pid=17493 comm="syz.0.3462" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 875.716060][ T44] usb 1-1: USB disconnect, device number 40 [ 875.816407][T17523] ip6t_srh: unknown srh invflags 7F00 [ 877.901409][T17543] ip6t_srh: unknown srh invflags 7F00 [ 877.928752][T17543] xt_cgroup: path and classid specified [ 878.974614][ T30] audit: type=1400 audit(2000000489.940:2027): avc: denied { read } for pid=17554 comm="syz.3.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 879.025854][T17558] ip6t_srh: unknown srh invflags 7F00 [ 879.054542][T17558] xt_cgroup: path and classid specified [ 879.796813][ T30] audit: type=1400 audit(2000000490.760:2028): avc: denied { write } for pid=17554 comm="syz.3.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 879.856579][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 879.876909][ T30] audit: type=1400 audit(2000000490.840:2029): avc: denied { read } for pid=17554 comm="syz.3.3481" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 880.132863][T17569] ip6t_srh: unknown srh invflags 7F00 [ 880.143197][T17569] xt_cgroup: path and classid specified [ 880.613578][ T30] audit: type=1400 audit(2000000490.840:2030): avc: denied { open } for pid=17554 comm="syz.3.3481" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 880.668422][ T30] audit: type=1400 audit(2000000490.890:2031): avc: denied { accept } for pid=17564 comm="syz.2.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 880.737975][ T30] audit: type=1400 audit(2000000490.890:2032): avc: denied { read } for pid=17564 comm="syz.2.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 880.874346][T17579] input input55: cannot allocate more than FF_MAX_EFFECTS effects [ 880.894653][ T5861] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 880.936562][T17579] gretap1: entered allmulticast mode [ 881.054655][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 881.068255][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.084469][ T5861] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 881.118218][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.136912][ T5861] usb 5-1: config 0 descriptor?? [ 881.150142][ T5861] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 881.165184][ T6044] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 881.326274][ T6044] usb 1-1: Using ep0 maxpacket: 8 [ 881.342427][ T6044] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 881.347420][T17574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.412242][T17586] ip6t_srh: unknown srh invflags 7F00 [ 881.423059][T17586] xt_cgroup: path and classid specified [ 881.864509][ T5861] gspca_vc032x: reg_r err -110 [ 881.871655][ T5861] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 881.901751][ T6044] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 881.912322][T17574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.953575][ T6044] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.984733][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 881.998025][ T6044] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.016550][ T6044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.033027][ T6044] usb 1-1: Product: syz [ 882.045736][ T6044] usb 1-1: Manufacturer: syz [ 882.050530][ T6044] usb 1-1: SerialNumber: syz [ 882.369377][T17591] ip6t_srh: unknown srh invflags 7F00 [ 882.388473][T17591] xt_cgroup: path and classid specified [ 882.832199][ T5818] Bluetooth: hci5: unexpected event for opcode 0x202d [ 883.677765][ T30] audit: type=1400 audit(2000000494.560:2033): avc: denied { connect } for pid=17594 comm="syz.3.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 883.981595][ T30] audit: type=1400 audit(2000000494.560:2034): avc: denied { shutdown } for pid=17594 comm="syz.3.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 884.037947][ T9] usb 5-1: USB disconnect, device number 24 [ 885.514023][ T6044] usb 1-1: 0:2 : does not exist [ 885.587594][ T6044] usb 1-1: USB disconnect, device number 41 [ 885.661983][T17079] udevd[17079]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.752646][ T30] audit: type=1400 audit(2000000496.720:2035): avc: denied { read write } for pid=17621 comm="syz.5.3499" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 885.849221][ T30] audit: type=1400 audit(2000000496.720:2036): avc: denied { open } for pid=17621 comm="syz.5.3499" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 886.086248][T17632] ip6t_srh: unknown srh invflags 7F00 [ 886.099143][T17632] xt_cgroup: path and classid specified [ 886.189575][ T6044] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 886.384872][ T6044] usb 1-1: Using ep0 maxpacket: 32 [ 886.406135][ T6044] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 886.457248][T15780] hid_parser_main: 24 callbacks suppressed [ 886.457266][T15780] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 886.501113][ T6044] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 886.519450][ T6044] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 886.550310][T15780] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 886.565679][ T6044] usb 1-1: Product: syz [ 886.576068][ T6044] usb 1-1: Manufacturer: syz [ 886.593164][ T6044] usb 1-1: SerialNumber: syz [ 886.597995][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 886.619506][ T6044] usb 1-1: config 0 descriptor?? [ 886.644330][T17618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 886.654256][ T6044] hub 1-1:0.0: bad descriptor, ignoring hub [ 886.727656][ T6044] hub 1-1:0.0: probe with driver hub failed with error -5 [ 886.781196][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 887.427108][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 888.211959][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 888.246336][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.287211][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 888.309466][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.335445][ T6044] usb 1-1: reset high-speed USB device number 42 using dummy_hcd [ 888.344368][ T9] usb 4-1: Product: syz [ 888.350804][ T9] usb 4-1: Manufacturer: syz [ 888.356458][ T9] usb 4-1: SerialNumber: syz [ 888.513715][T17618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 888.578907][ T6044] usb 1-1: can't restore configuration #0 (error=-71) [ 888.923262][ T6044] usb 1-1: USB disconnect, device number 42 [ 889.056773][T17657] ip6t_srh: unknown srh invflags 7F00 [ 889.409316][T17663] ip6t_srh: unknown srh invflags 7F00 [ 890.335058][ T50] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 890.621314][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 890.674889][ T50] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 890.757264][ T50] usb 6-1: config 0 has no interface number 0 [ 890.821209][ T50] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 890.910445][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.065064][ T50] usb 6-1: Product: syz [ 891.128773][ T50] usb 6-1: Manufacturer: syz [ 891.172160][ T50] usb 6-1: SerialNumber: syz [ 891.288087][ T50] usb 6-1: config 0 descriptor?? [ 891.327830][ T50] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 891.356282][ T9] usb 4-1: 0:2 : does not exist [ 891.374790][ T50] usb 6-1: selecting invalid altsetting 1 [ 891.380514][ T50] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 891.405606][ T9] usb 4-1: USB disconnect, device number 36 [ 891.447155][ T50] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 891.514989][ T50] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 891.523283][ T50] usb 6-1: media controller created [ 891.531293][T17666] FAULT_INJECTION: forcing a failure. [ 891.531293][T17666] name failslab, interval 1, probability 0, space 0, times 0 [ 891.549410][T17475] udevd[17475]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.561916][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.574420][T17666] CPU: 1 UID: 0 PID: 17666 Comm: syz.5.3507 Not tainted syzkaller #0 PREEMPT(full) [ 891.574444][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 891.574454][T17666] Call Trace: [ 891.574460][T17666] [ 891.574467][T17666] dump_stack_lvl+0x16c/0x1f0 [ 891.574494][T17666] should_fail_ex+0x512/0x640 [ 891.574519][T17666] ? fs_reclaim_acquire+0xae/0x150 [ 891.574545][T17666] should_failslab+0xc2/0x120 [ 891.574573][T17666] __kmalloc_noprof+0xeb/0x910 [ 891.574601][T17666] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 891.574631][T17666] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 891.574656][T17666] tomoyo_realpath_from_path+0xc2/0x6e0 [ 891.574684][T17666] ? tomoyo_profile+0x47/0x60 [ 891.574714][T17666] tomoyo_path_number_perm+0x245/0x580 [ 891.574735][T17666] ? tomoyo_path_number_perm+0x237/0x580 [ 891.574758][T17666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 891.574781][T17666] ? find_held_lock+0x2b/0x80 [ 891.574831][T17666] ? find_held_lock+0x2b/0x80 [ 891.574857][T17666] ? hook_file_ioctl_common+0x144/0x410 [ 891.574891][T17666] ? __fget_files+0x20e/0x3c0 [ 891.574922][T17666] security_file_ioctl+0x9b/0x240 [ 891.574949][T17666] __x64_sys_ioctl+0xb7/0x210 [ 891.574973][T17666] do_syscall_64+0xcd/0xf80 [ 891.575005][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.575023][T17666] RIP: 0033:0x7f35aab8f749 [ 891.575039][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.575057][T17666] RSP: 002b:00007f35abb08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.575074][T17666] RAX: ffffffffffffffda RBX: 00007f35aade5fa0 RCX: 00007f35aab8f749 [ 891.575086][T17666] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 891.575097][T17666] RBP: 00007f35abb08090 R08: 0000000000000000 R09: 0000000000000000 [ 891.575108][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.575118][T17666] R13: 00007f35aade6038 R14: 00007f35aade5fa0 R15: 00007fffef852948 [ 891.575143][T17666] [ 892.031997][T17666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.065146][ T50] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 892.085807][ T50] zl10353_read_register: readreg error (reg=127, ret==-32) [ 893.020165][ T30] audit: type=1400 audit(2000000503.990:2037): avc: denied { getopt } for pid=17688 comm="syz.4.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 893.289584][T17666] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 893.387277][ T50] usb 6-1: USB disconnect, device number 4 [ 894.986046][T17712] ip6t_srh: unknown srh invflags 7F00 [ 895.147083][ T30] audit: type=1400 audit(2000000506.120:2038): avc: denied { create } for pid=17714 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 895.194734][ T30] audit: type=1400 audit(2000000506.120:2039): avc: denied { read } for pid=17714 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 895.470684][T17720] netlink: 'syz.5.3523': attribute type 27 has an invalid length. [ 897.014501][T17749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3531'. [ 897.364659][T14854] Bluetooth: hci1: command 0x0406 tx timeout [ 897.558392][T17753] netlink: 'syz.0.3531': attribute type 74 has an invalid length. [ 897.782998][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 897.964658][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 897.989312][ T9] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.221800][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 898.224693][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 898.293051][T17763] ip6t_srh: unknown srh invflags 7F00 [ 898.318292][T17763] xt_cgroup: path and classid specified [ 898.668101][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 898.702483][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.729655][ T9] usb 3-1: config 0 descriptor?? [ 899.064675][ T50] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 899.244847][T15990] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 899.266073][ T9] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0 [ 899.273414][ T9] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0 [ 899.284794][ T9] magicmouse 0003:05AC:0324.0007: hidraw0: USB HID v0.0a Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 899.298226][ T9] magicmouse 0003:05AC:0324.0007: magicmouse input not registered [ 899.310422][ T9] magicmouse 0003:05AC:0324.0007: probe with driver magicmouse failed with error -12 [ 899.389942][T15990] usb 4-1: device descriptor read/64, error -71 [ 899.676806][T15990] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 899.756542][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 899.764959][ T50] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 899.773774][ T50] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 899.804608][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.836951][ T50] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 899.855361][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.871557][ T9] usb 3-1: USB disconnect, device number 46 [ 899.907013][ T50] usb 1-1: Product: syz [ 899.917317][ T50] usb 1-1: Manufacturer: syz [ 899.924938][T15990] usb 4-1: device descriptor read/64, error -71 [ 899.934796][ T50] usb 1-1: SerialNumber: syz [ 900.064974][T15990] usb usb4-port1: attempt power cycle [ 900.447489][T15990] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 900.573915][ T30] audit: type=1326 audit(2000000511.540:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.5.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35aab8f749 code=0x7ffc0000 [ 900.608186][T15990] usb 4-1: device descriptor read/8, error -71 [ 900.634984][ T30] audit: type=1326 audit(2000000511.550:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.5.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35aab8f749 code=0x7ffc0000 [ 901.352200][T17784] sctp: [Deprecated]: syz.2.3539 (pid 17784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 901.352200][T17784] Use struct sctp_sack_info instead [ 901.740005][ T30] audit: type=1326 audit(2000000512.660:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d498f749 code=0x7ffc0000 [ 901.854647][T15990] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 901.875672][T15990] usb 4-1: device descriptor read/8, error -71 [ 901.889201][ T50] usb 1-1: 0:2 : does not exist [ 901.906104][ T30] audit: type=1326 audit(2000000512.700:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d498f749 code=0x7ffc0000 [ 901.974385][ T50] usb 1-1: USB disconnect, device number 43 [ 902.047013][T15990] usb usb4-port1: unable to enumerate USB device [ 902.150585][ T30] audit: type=1326 audit(2000000512.750:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa3d498f749 code=0x7ffc0000 [ 902.235514][ T30] audit: type=1326 audit(2000000512.750:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d498f749 code=0x7ffc0000 [ 902.386280][ T30] audit: type=1326 audit(2000000512.750:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d498f749 code=0x7ffc0000 [ 902.457741][ T30] audit: type=1326 audit(2000000512.750:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3d498e1ff code=0x7ffc0000 [ 902.489195][T17802] FAULT_INJECTION: forcing a failure. [ 902.489195][T17802] name failslab, interval 1, probability 0, space 0, times 0 [ 902.502549][ T30] audit: type=1326 audit(2000000512.750:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d498f749 code=0x7ffc0000 [ 902.640086][ T30] audit: type=1326 audit(2000000512.750:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.2.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d498f749 code=0x7ffc0000 [ 902.663998][T17802] CPU: 1 UID: 0 PID: 17802 Comm: syz.5.3546 Not tainted syzkaller #0 PREEMPT(full) [ 902.664026][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.664036][T17802] Call Trace: [ 902.664043][T17802] [ 902.664051][T17802] dump_stack_lvl+0x16c/0x1f0 [ 902.664082][T17802] should_fail_ex+0x512/0x640 [ 902.664110][T17802] ? fs_reclaim_acquire+0xae/0x150 [ 902.664137][T17802] should_failslab+0xc2/0x120 [ 902.664162][T17802] __kmalloc_noprof+0xeb/0x910 [ 902.664191][T17802] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 902.664222][T17802] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 902.664247][T17802] tomoyo_realpath_from_path+0xc2/0x6e0 [ 902.664279][T17802] ? tomoyo_profile+0x47/0x60 [ 902.664308][T17802] tomoyo_path_number_perm+0x245/0x580 [ 902.664328][T17802] ? tomoyo_path_number_perm+0x237/0x580 [ 902.664351][T17802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 902.664372][T17802] ? find_held_lock+0x2b/0x80 [ 902.664417][T17802] ? find_held_lock+0x2b/0x80 [ 902.664444][T17802] ? hook_file_ioctl_common+0x144/0x410 [ 902.664478][T17802] ? __fget_files+0x20e/0x3c0 [ 902.664509][T17802] security_file_ioctl+0x9b/0x240 [ 902.664535][T17802] __x64_sys_ioctl+0xb7/0x210 [ 902.664563][T17802] do_syscall_64+0xcd/0xf80 [ 902.664587][T17802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.664605][T17802] RIP: 0033:0x7f35aab8f749 [ 902.664620][T17802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.664636][T17802] RSP: 002b:00007f35abb08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.664653][T17802] RAX: ffffffffffffffda RBX: 00007f35aade5fa0 RCX: 00007f35aab8f749 [ 902.664664][T17802] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 902.664676][T17802] RBP: 00007f35abb08090 R08: 0000000000000000 R09: 0000000000000000 [ 902.664687][T17802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.664698][T17802] R13: 00007f35aade6038 R14: 00007f35aade5fa0 R15: 00007fffef852948 [ 902.664725][T17802] [ 903.283978][T17810] ip6t_srh: unknown srh invflags 7F00 [ 903.584761][T17802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 904.825428][ T5938] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 904.833381][ T5930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 904.975360][T17821] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 904.988693][ T5930] usb 6-1: device descriptor read/64, error -71 [ 904.995179][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 905.035984][ T5938] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 905.046049][ T5938] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 905.083884][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.103789][ T5938] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.114533][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.128931][ T5938] usb 5-1: Product: syz [ 905.133225][ T5938] usb 5-1: Manufacturer: syz [ 905.139615][ T5938] usb 5-1: SerialNumber: syz [ 905.224970][T17821] usb 1-1: Using ep0 maxpacket: 8 [ 905.234500][T17821] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 905.244712][T17821] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 905.255419][T17821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.267168][T17821] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.277463][T17821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.285657][ T5930] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 905.296154][T17821] usb 1-1: Product: syz [ 905.300544][T17821] usb 1-1: Manufacturer: syz [ 905.305719][T17821] usb 1-1: SerialNumber: syz [ 905.314646][T17648] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 905.435038][ T5930] usb 6-1: device descriptor read/64, error -71 [ 905.476658][T17648] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 905.626389][T17648] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 905.701070][ T5930] usb usb6-port1: attempt power cycle [ 905.979467][T17648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.989655][T17648] usb 3-1: Product: syz [ 905.993843][T17648] usb 3-1: Manufacturer: syz [ 905.999372][T17648] usb 3-1: SerialNumber: syz [ 906.005491][T17648] usb 3-1: config 0 descriptor?? [ 906.102875][T17648] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 906.258590][T17648] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.315141][ T5930] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 906.420629][ T5930] usb 6-1: device descriptor read/8, error -71 [ 906.540910][T17648] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 906.759214][ T5930] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 907.033924][T17648] usb 3-1: media controller created [ 907.726576][ T5938] usb 5-1: 0:2 : does not exist [ 907.758951][T17648] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 907.839331][ T5930] usb 6-1: device descriptor read/8, error -71 [ 907.865022][ T5938] usb 5-1: USB disconnect, device number 25 [ 908.077136][ T5930] usb usb6-port1: unable to enumerate USB device [ 908.685253][T17849] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3557'. [ 908.722502][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 908.722518][ T30] audit: type=1400 audit(2000000519.690:2054): avc: denied { setopt } for pid=17844 comm="syz.3.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 908.777076][T17821] usb 1-1: 0:2 : does not exist [ 908.777745][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3558'. [ 908.862208][T17648] DVB: Unable to find symbol mt352_attach() [ 908.893583][T17821] usb 1-1: USB disconnect, device number 44 [ 908.915370][ T30] audit: type=1326 audit(2000000519.880:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.5.3560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35aab8f749 code=0x0 [ 908.949573][T17841] udevd[17841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.967128][T17648] DVB: Unable to find symbol nxt6000_attach() [ 908.981880][T17648] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 908.997189][T17648] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 909.036134][T17648] dvb-usb: schedule remote query interval to 1000 msecs. [ 909.061006][T17648] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 909.074755][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 909.107316][T17864] input input57: cannot allocate more than FF_MAX_EFFECTS effects [ 909.118972][T17648] dvb-usb: bulk message failed: -22 (7/0) [ 909.128144][T17648] dvb-usb: bulk message failed: -22 (7/0) [ 909.188117][T17648] usb 3-1: USB disconnect, device number 47 [ 909.226255][T17648] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 909.244699][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 909.261077][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 909.270724][T17864] gretap1: entered allmulticast mode [ 909.289108][ T24] usb 4-1: config 0 has no interface number 0 [ 909.323592][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 909.347232][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.370521][ T24] usb 4-1: Product: syz [ 909.382456][ T24] usb 4-1: Manufacturer: syz [ 909.398805][ T24] usb 4-1: SerialNumber: syz [ 909.437438][ T24] usb 4-1: config 0 descriptor?? [ 909.460578][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 909.788771][T17873] openvswitch: netlink: IP tunnel dst address not specified [ 911.214914][T17648] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 911.394624][T17648] usb 6-1: Using ep0 maxpacket: 8 [ 911.407280][T17648] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 911.416609][T17648] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 911.431534][T17648] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 911.448797][T17648] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 911.459587][T17648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.476339][T17648] usb 6-1: Product: syz [ 911.480943][T17648] usb 6-1: Manufacturer: syz [ 911.487539][T17648] usb 6-1: SerialNumber: syz [ 911.556664][T17821] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 911.674996][ T24] usb 4-1: qt2_attach - failed to power on unit: -71 [ 911.681832][ T24] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 911.693248][ T24] usb 4-1: USB disconnect, device number 41 [ 911.900095][T17821] usb 1-1: device descriptor read/64, error -71 [ 912.061601][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 912.159698][T17821] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 912.304857][T17821] usb 1-1: device descriptor read/64, error -71 [ 912.416376][T17821] usb usb1-port1: attempt power cycle [ 912.768339][T17821] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 913.181205][T17821] usb 1-1: device descriptor read/8, error -71 [ 913.493983][T17648] usb 6-1: 0:2 : does not exist [ 913.543944][T17648] usb 6-1: USB disconnect, device number 9 [ 913.613533][T17841] udevd[17841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 913.724760][T17821] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 913.766057][T17821] usb 1-1: device descriptor read/8, error -71 [ 913.888747][T17821] usb usb1-port1: unable to enumerate USB device [ 914.520750][T17897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3571'. [ 914.534711][T17899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3570'. [ 914.545692][T17897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'. [ 915.208850][T17922] ip6t_srh: unknown srh invflags 7F00 [ 915.405388][T17920] xt_cgroup: path and classid specified [ 916.004851][T15990] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 916.235367][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 916.279490][T15990] usb 4-1: device descriptor read/64, error -71 [ 916.393038][T17937] input input58: cannot allocate more than FF_MAX_EFFECTS effects [ 916.411384][T17937] gretap1: entered allmulticast mode [ 916.434665][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 916.444493][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 916.453379][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 916.464237][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 916.478818][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.565834][T15990] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 916.574253][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.608432][ T24] usb 5-1: Product: syz [ 916.629837][T17939] FAULT_INJECTION: forcing a failure. [ 916.629837][T17939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.643031][ T24] usb 5-1: Manufacturer: syz [ 916.652195][ T24] usb 5-1: SerialNumber: syz [ 916.672780][T17939] CPU: 1 UID: 0 PID: 17939 Comm: syz.0.3584 Not tainted syzkaller #0 PREEMPT(full) [ 916.672804][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 916.672811][T17939] Call Trace: [ 916.672815][T17939] [ 916.672820][T17939] dump_stack_lvl+0x16c/0x1f0 [ 916.672838][T17939] should_fail_ex+0x512/0x640 [ 916.672858][T17939] _copy_from_user+0x2e/0xd0 [ 916.672876][T17939] do_ipv6_setsockopt+0x91b/0x4680 [ 916.672899][T17939] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 916.672915][T17939] ? avc_has_perm_noaudit+0x117/0x3b0 [ 916.672935][T17939] ? avc_has_perm_noaudit+0x149/0x3b0 [ 916.672954][T17939] ? avc_has_perm+0x144/0x1f0 [ 916.672965][T17939] ? __pfx_avc_has_perm+0x10/0x10 [ 916.672982][T17939] ? get_pid_task+0x106/0x250 [ 916.672996][T17939] ? proc_fail_nth_write+0x9f/0x220 [ 916.673010][T17939] ? sock_has_perm+0x258/0x2f0 [ 916.673022][T17939] ? __pfx_sock_has_perm+0x10/0x10 [ 916.673034][T17939] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 916.673050][T17939] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 916.673069][T17939] ? ipv6_setsockopt+0xcb/0x170 [ 916.673083][T17939] ipv6_setsockopt+0xcb/0x170 [ 916.673101][T17939] udpv6_setsockopt+0x7d/0xd0 [ 916.673112][T17939] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 916.673128][T17939] do_sock_setsockopt+0xf3/0x1d0 [ 916.673143][T17939] __sys_setsockopt+0x1a0/0x230 [ 916.673156][T17939] __x64_sys_setsockopt+0xbd/0x160 [ 916.673166][T17939] ? do_syscall_64+0x91/0xf80 [ 916.673180][T17939] ? lockdep_hardirqs_on+0x7c/0x110 [ 916.673195][T17939] do_syscall_64+0xcd/0xf80 [ 916.673212][T17939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.673230][T17939] RIP: 0033:0x7f3850b8f749 [ 916.673245][T17939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.673262][T17939] RSP: 002b:00007f3851a2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 916.673273][T17939] RAX: ffffffffffffffda RBX: 00007f3850de5fa0 RCX: 00007f3850b8f749 [ 916.673281][T17939] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 916.673287][T17939] RBP: 00007f3851a2b090 R08: 00000000000003f8 R09: 0000000000000000 [ 916.673294][T17939] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 916.673300][T17939] R13: 00007f3850de6038 R14: 00007f3850de5fa0 R15: 00007ffc453c87b8 [ 916.673314][T17939] [ 917.201002][T15990] usb 4-1: device descriptor read/64, error -71 [ 917.337567][T15990] usb usb4-port1: attempt power cycle [ 917.814976][ T5818] Bluetooth: hci3: command 0x0405 tx timeout [ 918.176381][T15990] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 918.356502][T15990] usb 4-1: device descriptor read/8, error -71 [ 919.154668][T15990] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 919.307609][ T24] usb 5-1: 0:2 : does not exist [ 919.469929][ T24] usb 5-1: USB disconnect, device number 26 [ 919.494867][T15990] usb 4-1: device not accepting address 45, error -71 [ 919.971129][T15990] usb usb4-port1: unable to enumerate USB device [ 919.988487][T17841] udevd[17841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.577761][ T30] audit: type=1400 audit(2000000534.530:2056): avc: denied { create } for pid=18004 comm="syz.4.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 924.048885][ T30] audit: type=1400 audit(2000000534.530:2057): avc: denied { shutdown } for pid=18004 comm="syz.4.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 924.344653][ T5938] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 924.997267][ T30] audit: type=1400 audit(2000000534.530:2058): avc: denied { getopt } for pid=18004 comm="syz.4.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 925.254624][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 925.540450][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.550972][ T5938] usb 3-1: config 0 has no interfaces? [ 925.558865][ T5938] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 925.572439][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.581825][ T5938] usb 3-1: Product: syz [ 925.587416][ T5938] usb 3-1: Manufacturer: syz [ 925.587462][ T30] audit: type=1400 audit(2000000534.540:2059): avc: denied { setopt } for pid=18004 comm="syz.4.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 925.592443][ T5938] usb 3-1: SerialNumber: syz [ 925.613467][ T30] audit: type=1400 audit(2000000534.540:2060): avc: denied { create } for pid=18004 comm="syz.4.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 925.642503][ T30] audit: type=1400 audit(2000000534.540:2061): avc: denied { write } for pid=18004 comm="syz.4.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 925.664538][ T30] audit: type=1400 audit(2000000534.950:2062): avc: denied { read write } for pid=15564 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 925.691878][ T30] audit: type=1400 audit(2000000534.950:2063): avc: denied { open } for pid=15564 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 925.721964][ T30] audit: type=1400 audit(2000000534.960:2064): avc: denied { ioctl } for pid=15564 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 925.722443][ T5938] usb 3-1: config 0 descriptor?? [ 925.747839][ T30] audit: type=1400 audit(2000000534.990:2065): avc: denied { module_request } for pid=18007 comm="syz.5.3599" kmod="netdev-dvmrp0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 925.983982][T18033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.874678][ T44] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 926.960430][T18050] ip6t_srh: unknown srh invflags 7F00 [ 926.994340][T18050] xt_cgroup: path and classid specified [ 927.086782][ T44] usb 1-1: config 6 has an invalid interface number: 241 but max is 2 [ 927.172991][ T44] usb 1-1: config 6 has an invalid interface number: 206 but max is 2 [ 927.250976][ T44] usb 1-1: config 6 has an invalid interface number: 170 but max is 2 [ 927.321181][ T44] usb 1-1: config 6 has no interface number 0 [ 927.327576][ T44] usb 1-1: config 6 has no interface number 1 [ 927.333738][ T44] usb 1-1: config 6 has no interface number 2 [ 927.346031][ T44] usb 1-1: config 6 interface 241 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 927.357478][ T44] usb 1-1: config 6 interface 206 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 927.357521][ T44] usb 1-1: config 6 interface 170 altsetting 32 has a duplicate endpoint with address 0x8, skipping [ 927.357543][ T44] usb 1-1: config 6 interface 170 altsetting 32 has a duplicate endpoint with address 0x8, skipping [ 927.394540][ T44] usb 1-1: config 6 interface 241 has no altsetting 0 [ 927.394635][ T44] usb 1-1: config 6 interface 206 has no altsetting 0 [ 927.394655][ T44] usb 1-1: config 6 interface 170 has no altsetting 0 [ 927.396394][ T44] usb 1-1: New USB device found, idVendor=19d2, idProduct=1104, bcdDevice=31.bd [ 927.429048][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.437486][ T44] usb 1-1: Product: syz [ 927.444156][ T44] usb 1-1: Manufacturer: syz [ 927.449053][ T44] usb 1-1: SerialNumber: syz [ 927.634449][T18059] ip6t_srh: unknown srh invflags 7F00 [ 927.646512][T18059] xt_cgroup: path and classid specified [ 927.772736][ T24] usb 3-1: USB disconnect, device number 48 [ 927.874892][T18037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.890256][T18037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.030607][ T44] option 1-1:6.241: GSM modem (1-port) converter detected [ 928.577263][ T44] usb 1-1: USB disconnect, device number 49 [ 928.599028][ T44] option 1-1:6.241: device disconnected [ 929.439761][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 929.439780][ T30] audit: type=1400 audit(2000000540.370:2122): avc: denied { create } for pid=18071 comm="syz.5.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 929.482861][ T30] audit: type=1400 audit(2000000540.380:2123): avc: denied { connect } for pid=18071 comm="syz.5.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 929.551764][ T30] audit: type=1400 audit(2000000540.450:2124): avc: denied { write } for pid=18071 comm="syz.5.3616" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 929.584834][ T30] audit: type=1400 audit(2000000540.450:2125): avc: denied { open } for pid=18071 comm="syz.5.3616" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 929.614408][ T30] audit: type=1400 audit(2000000540.580:2126): avc: denied { read } for pid=18077 comm="syz.5.3617" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 929.638396][ T30] audit: type=1400 audit(2000000540.610:2127): avc: denied { open } for pid=18077 comm="syz.5.3617" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 929.754733][ T30] audit: type=1400 audit(2000000540.710:2128): avc: denied { ioctl } for pid=18077 comm="syz.5.3617" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 929.953151][ T30] audit: type=1400 audit(2000000540.810:2129): avc: denied { read } for pid=18081 comm="syz.0.3618" dev="nsfs" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 929.974964][ T30] audit: type=1400 audit(2000000540.810:2130): avc: denied { open } for pid=18081 comm="syz.0.3618" path="net:[4026532792]" dev="nsfs" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 930.120070][ T5938] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 930.355517][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 930.433665][ T30] audit: type=1400 audit(2000000540.810:2131): avc: denied { create } for pid=18081 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 930.458853][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short [ 930.602550][ T5938] usb 6-1: config 255 has an invalid interface number: 16 but max is 0 [ 931.145268][ T5938] usb 6-1: config 255 has no interface number 0 [ 931.151917][ T5938] usb 6-1: config 255 interface 16 altsetting 10 bulk endpoint 0xC has invalid maxpacket 1024 [ 931.162630][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.168986][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.178260][ T5938] usb 6-1: config 255 interface 16 has no altsetting 0 [ 931.221627][ T5938] usb 6-1: New USB device found, idVendor=08e3, idProduct=0301, bcdDevice=79.8c [ 931.254286][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.273650][ T5938] usb 6-1: Product: syz [ 931.458307][ T5938] usb 6-1: Manufacturer: syz [ 931.463843][ T5938] usb 6-1: SerialNumber: syz [ 931.479193][T18078] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 931.758153][T18104] ip6t_srh: unknown srh invflags 7F00 [ 931.808588][T18102] xt_cgroup: path and classid specified [ 933.157194][T18119] ip6t_srh: unknown srh invflags 7F00 [ 933.177617][T18119] xt_cgroup: path and classid specified [ 933.700177][ T5938] HFC-S_USB 6-1:255.16: probe with driver HFC-S_USB failed with error -5 [ 933.798798][ T5938] usb 6-1: USB disconnect, device number 10 [ 934.498902][T18137] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3632'. [ 934.510994][T18137] netlink: 'syz.3.3632': attribute type 4 has an invalid length. [ 934.519909][T18137] netlink: 'syz.3.3632': attribute type 3 has an invalid length. [ 934.832632][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 934.832663][ T30] audit: type=1400 audit(2000000545.630:2146): avc: denied { create } for pid=18128 comm="syz.0.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 934.945750][T18137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3632'. [ 934.955825][ T30] audit: type=1400 audit(2000000545.640:2147): avc: denied { write } for pid=18128 comm="syz.0.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 934.977844][ T30] audit: type=1400 audit(2000000545.640:2148): avc: denied { nlmsg_write } for pid=18128 comm="syz.0.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 935.001172][ T30] audit: type=1400 audit(2000000545.650:2149): avc: denied { firmware_load } for pid=18128 comm="syz.0.3631" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 935.042381][ T30] audit: type=1400 audit(2000000545.950:2150): avc: denied { ioctl } for pid=18136 comm="syz.3.3632" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 935.104862][ T30] audit: type=1400 audit(2000000546.060:2151): avc: denied { read write } for pid=18136 comm="syz.3.3632" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 935.129902][ T30] audit: type=1400 audit(2000000546.060:2152): avc: denied { open } for pid=18136 comm="syz.3.3632" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 935.334726][T17648] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 935.379699][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3634'. [ 935.474642][ T44] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 935.514633][T17648] usb 6-1: Using ep0 maxpacket: 8 [ 935.617415][T17648] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 935.627009][T17648] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 935.638855][T17648] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.650685][T17648] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 935.693913][T17648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.790534][T17648] usb 6-1: Product: syz [ 935.822582][T17648] usb 6-1: Manufacturer: syz [ 935.859388][T17648] usb 6-1: SerialNumber: syz [ 935.913321][ T30] audit: type=1400 audit(2000000546.880:2153): avc: denied { create } for pid=18159 comm="syz.2.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 936.059134][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 936.061226][ T30] audit: type=1400 audit(2000000546.950:2154): avc: denied { setopt } for pid=18159 comm="syz.2.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 936.086052][ T44] usb 1-1: no configurations [ 936.092180][ T44] usb 1-1: can't read configurations, error -22 [ 936.408442][T18167] ip6t_srh: unknown srh invflags 7F00 [ 936.428053][T18167] xt_cgroup: path and classid specified [ 937.277782][ T30] audit: type=1400 audit(2000000547.280:2155): avc: denied { read } for pid=18140 comm="syz.5.3633" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 937.315971][ T44] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 937.538876][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 937.547241][ T44] usb 1-1: no configurations [ 937.558243][ T44] usb 1-1: can't read configurations, error -22 [ 937.583905][ T44] usb usb1-port1: attempt power cycle [ 938.038345][T17648] usb 6-1: 0:2 : does not exist [ 938.054958][ T44] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 938.095097][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 938.096165][T17648] usb 6-1: USB disconnect, device number 11 [ 938.141867][ T44] usb 1-1: no configurations [ 938.164444][ T44] usb 1-1: can't read configurations, error -22 [ 938.324765][ T44] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 938.444749][ T5861] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 938.595994][ T44] usb 1-1: device not accepting address 53, error -71 [ 938.613442][ T44] usb usb1-port1: unable to enumerate USB device [ 938.621068][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 938.646674][ T5861] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 938.664662][ T5861] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 938.714748][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.767828][ T5861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 938.797361][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.827158][ T5861] usb 5-1: Product: syz [ 938.846991][ T5861] usb 5-1: Manufacturer: syz [ 938.851595][ T5861] usb 5-1: SerialNumber: syz [ 939.088274][T18191] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 939.705971][T17648] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 939.739120][ T5861] usb 5-1: 0:2 : does not exist [ 939.803133][ T5861] usb 5-1: USB disconnect, device number 27 [ 939.874659][T17648] usb 1-1: Using ep0 maxpacket: 16 [ 939.918817][T17648] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 939.961724][T17648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.992895][T17648] usb 1-1: Product: syz [ 940.006593][T17648] usb 1-1: Manufacturer: syz [ 940.021927][T17648] usb 1-1: SerialNumber: syz [ 940.070352][T17648] usb 1-1: config 0 descriptor?? [ 940.102257][T17648] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 940.903594][T17841] udevd[17841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.717209][T18222] ip6t_srh: unknown srh invflags 7F00 [ 941.743289][T18222] xt_cgroup: path and classid specified [ 941.991133][T18220] ip6t_srh: unknown srh invflags 7F00 [ 942.098028][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 942.098044][ T30] audit: type=1400 audit(2000000553.070:2165): avc: denied { mount } for pid=18225 comm="syz.5.3656" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 942.142001][T11677] gretap0: left allmulticast mode [ 942.162982][T11677] gretap0: left promiscuous mode [ 942.172517][T11677] bridge0: port 3(gretap0) entered disabled state [ 943.099130][T11677] bridge_slave_1: left allmulticast mode [ 943.115078][T11677] bridge_slave_1: left promiscuous mode [ 943.135385][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.169211][T11677] bridge_slave_0: left allmulticast mode [ 943.185148][T17648] usb 1-1: clie_3_5_startup: get config number failed: -110 [ 943.192706][T11677] bridge_slave_0: left promiscuous mode [ 943.198770][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.231295][T17648] visor 1-1:0.0: probe with driver visor failed with error -110 [ 943.247189][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3657'. [ 944.816344][ T30] audit: type=1400 audit(2000000555.770:2166): avc: denied { validate_trans } for pid=18241 comm="syz.4.3660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 945.003741][ T44] usb 1-1: USB disconnect, device number 54 [ 945.624030][ T30] audit: type=1400 audit(2000000556.590:2167): avc: denied { create } for pid=18250 comm="syz.3.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 945.812236][T18257] input input59: cannot allocate more than FF_MAX_EFFECTS effects [ 945.835692][ T30] audit: type=1400 audit(2000000556.780:2168): avc: denied { ioctl } for pid=18250 comm="syz.3.3662" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 946.222056][T18263] netlink: 'syz.0.3664': attribute type 1 has an invalid length. [ 946.313088][T18265] ip6t_srh: unknown srh invflags 7F00 [ 946.330332][T18265] xt_cgroup: path and classid specified [ 946.714643][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 946.876024][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.898006][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 946.921678][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.970632][ T9] usb 1-1: config 0 descriptor?? [ 947.010170][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 947.103645][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.125574][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.145492][T11677] bond0 (unregistering): Released all slaves [ 947.279482][T18263] bond1: entered promiscuous mode [ 947.314178][T18263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 947.379416][T18266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 947.395723][T18266] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 947.406484][T18266] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 947.429009][T18266] bond1: (slave wireguard0): making interface the new active one [ 947.436960][T18266] wireguard0: entered promiscuous mode [ 947.445110][T18266] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 947.549260][T18257] gretap1: entered allmulticast mode [ 947.557551][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 947.572951][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 947.582336][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 947.593269][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 947.614794][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 947.627833][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 947.655193][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 947.662105][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 947.677072][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 947.684032][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 947.692032][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 947.700900][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 947.710994][T11677] tipc: Disabling bearer [ 947.730926][T11677] tipc: Left network mode [ 947.922211][ T30] audit: type=1400 audit(2000000558.890:2169): avc: denied { create } for pid=18260 comm="syz.0.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.476003][T18291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3671'. [ 948.491261][ T30] audit: type=1400 audit(2000000558.890:2170): avc: denied { ioctl } for pid=18260 comm="syz.0.3664" path="socket:[73792]" dev="sockfs" ino=73792 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.601028][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 948.655609][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 948.678225][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 948.688716][ T9] pwc: Registered as video103. [ 948.697785][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 948.710261][ T30] audit: type=1400 audit(2000000559.680:2171): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=3486 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 948.712881][ T9] usb 1-1: USB disconnect, device number 55 [ 948.851921][ T30] audit: type=1400 audit(2000000559.710:2172): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3486 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 948.970940][ T30] audit: type=1400 audit(2000000559.710:2173): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3486 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.057466][ T30] audit: type=1400 audit(2000000560.030:2174): avc: denied { read write } for pid=18306 comm="syz.5.3677" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 949.088523][T18305] ip6t_srh: unknown srh invflags 7F00 [ 949.108118][ T30] audit: type=1400 audit(2000000560.030:2175): avc: denied { open } for pid=18306 comm="syz.5.3677" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 949.131795][ T30] audit: type=1400 audit(2000000560.030:2176): avc: denied { mounton } for pid=18306 comm="syz.5.3677" path="/132/file0" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 949.234840][ T44] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 949.464871][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 949.483383][ T44] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 949.499135][ T44] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 949.513048][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.607697][T18323] overlayfs: overlapping lowerdir path [ 949.652527][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.702640][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 949.718877][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 949.876652][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.885235][ T44] usb 3-1: Product: syz [ 949.890547][ T30] audit: type=1400 audit(2000000560.670:2177): avc: denied { bind } for pid=18312 comm="syz.3.3679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 949.896704][ T44] usb 3-1: Manufacturer: syz [ 949.921163][T18322] input input61: cannot allocate more than FF_MAX_EFFECTS effects [ 949.929140][ T44] usb 3-1: SerialNumber: syz [ 949.981593][ T30] audit: type=1400 audit(2000000560.710:2178): avc: denied { mount } for pid=18312 comm="syz.3.3679" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 950.009096][T11677] hsr_slave_0: left promiscuous mode [ 950.124616][T11677] hsr_slave_1: left promiscuous mode [ 950.131484][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.139363][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.250203][T18331] ip6t_srh: unknown srh invflags 7F00 [ 950.704695][T11677] veth1_macvtap: left promiscuous mode [ 950.721789][T11677] veth0_macvtap: left promiscuous mode [ 950.739251][T11677] veth1_vlan: left promiscuous mode [ 950.753392][T11677] veth0_vlan: left promiscuous mode [ 951.501779][T18344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3684'. [ 951.587020][T18345] ip6t_srh: unknown srh invflags 7F00 [ 951.617141][T18345] xt_cgroup: path and classid specified [ 952.098336][T10932] smc: removing ib device syz2 [ 952.555567][ T44] usb 3-1: 0:2 : does not exist [ 952.582578][ T44] usb 3-1: USB disconnect, device number 49 [ 952.602518][T18351] input input62: cannot allocate more than FF_MAX_EFFECTS effects [ 952.648623][T17841] udevd[17841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.770633][T11677] team0 (unregistering): Port device team_slave_1 removed [ 952.818886][T11677] team0 (unregistering): Port device team_slave_0 removed [ 953.263168][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 953.263181][ T30] audit: type=1400 audit(2000000564.230:2182): avc: denied { create } for pid=18353 comm="syz.3.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 953.337911][ T30] audit: type=1400 audit(2000000564.310:2183): avc: denied { connect } for pid=18353 comm="syz.3.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 953.459502][ T30] audit: type=1400 audit(2000000564.430:2184): avc: denied { read } for pid=18359 comm="syz.3.3691" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 953.586172][ T30] audit: type=1400 audit(2000000564.460:2185): avc: denied { open } for pid=18359 comm="syz.3.3691" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 953.827866][ T30] audit: type=1400 audit(2000000564.750:2186): avc: denied { create } for pid=18359 comm="syz.3.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 953.847923][ T30] audit: type=1400 audit(2000000564.750:2187): avc: denied { setopt } for pid=18359 comm="syz.3.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 954.341147][T18322] gretap1: entered allmulticast mode [ 954.353239][T17648] ================================================================== [ 954.361332][T17648] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x190/0x1c0 [ 954.370173][T17648] Read of size 8 at addr ffff8880599bc2e8 by task kworker/0:12/17648 [ 954.378237][T17648] [ 954.380563][T17648] CPU: 0 UID: 0 PID: 17648 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 954.380589][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 954.380601][T17648] Workqueue: events smc_ib_port_event_work [ 954.380629][T17648] Call Trace: [ 954.380636][T17648] [ 954.380643][T17648] dump_stack_lvl+0x116/0x1f0 [ 954.380667][T17648] print_report+0xcd/0x630 [ 954.380689][T17648] ? __virt_addr_valid+0x81/0x610 [ 954.380706][T17648] ? __phys_addr+0xe8/0x180 [ 954.380723][T17648] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 954.380748][T17648] kasan_report+0xe0/0x110 [ 954.380770][T17648] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 954.380799][T17648] __ethtool_get_link_ksettings+0x190/0x1c0 [ 954.380824][T17648] __ethtool_get_link_ksettings+0x144/0x1c0 [ 954.380850][T17648] ib_get_eth_speed+0x122/0xb50 [ 954.380877][T17648] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 954.380905][T17648] ? do_raw_spin_unlock+0x172/0x230 [ 954.380932][T17648] rxe_query_port+0x127/0x360 [ 954.380951][T17648] ib_query_port+0x441/0x8a0 [ 954.380977][T17648] smc_ib_port_event_work+0x12f/0xbf0 [ 954.381003][T17648] ? rcu_is_watching+0x12/0xc0 [ 954.381022][T17648] process_one_work+0x9ba/0x1b20 [ 954.381049][T17648] ? __pfx_process_one_work+0x10/0x10 [ 954.381075][T17648] ? assign_work+0x1a0/0x250 [ 954.381097][T17648] worker_thread+0x6c8/0xf10 [ 954.381129][T17648] ? __pfx_worker_thread+0x10/0x10 [ 954.381153][T17648] kthread+0x3c5/0x780 [ 954.381175][T17648] ? __pfx_kthread+0x10/0x10 [ 954.381195][T17648] ? rcu_is_watching+0x12/0xc0 [ 954.381211][T17648] ? __pfx_kthread+0x10/0x10 [ 954.381230][T17648] ret_from_fork+0x983/0xb10 [ 954.381249][T17648] ? __pfx_ret_from_fork+0x10/0x10 [ 954.381270][T17648] ? __switch_to+0x7af/0x10d0 [ 954.381293][T17648] ? __pfx_kthread+0x10/0x10 [ 954.381314][T17648] ret_from_fork_asm+0x1a/0x30 [ 954.381345][T17648] [ 954.381352][T17648] [ 954.565155][T17648] Allocated by task 5824: [ 954.569460][T17648] kasan_save_stack+0x33/0x60 [ 954.574121][T17648] kasan_save_track+0x14/0x30 [ 954.578781][T17648] __kasan_kmalloc+0xaa/0xb0 [ 954.583365][T17648] __kvmalloc_node_noprof+0x3ac/0xa40 [ 954.588717][T17648] alloc_netdev_mqs+0xd7/0x1550 [ 954.593548][T17648] rtnl_create_link+0xc08/0xf60 [ 954.598380][T17648] rtnl_newlink+0xb3b/0x1f50 [ 954.602950][T17648] rtnetlink_rcv_msg+0x95e/0xe90 [ 954.607882][T17648] netlink_rcv_skb+0x158/0x420 [ 954.612627][T17648] netlink_unicast+0x5aa/0x870 [ 954.617372][T17648] netlink_sendmsg+0x8c8/0xdd0 [ 954.622120][T17648] __sys_sendto+0x4a3/0x520 [ 954.626611][T17648] __x64_sys_sendto+0xe0/0x1c0 [ 954.631362][T17648] do_syscall_64+0xcd/0xf80 [ 954.635847][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.641720][T17648] [ 954.644026][T17648] Freed by task 11677: [ 954.648066][T17648] kasan_save_stack+0x33/0x60 [ 954.652723][T17648] kasan_save_track+0x14/0x30 [ 954.657379][T17648] kasan_save_free_info+0x3b/0x60 [ 954.662380][T17648] __kasan_slab_free+0x5f/0x80 [ 954.667130][T17648] kfree+0x2f8/0x6e0 [ 954.671001][T17648] device_release+0xa4/0x240 [ 954.675573][T17648] kobject_put+0x1ef/0x6f0 [ 954.679974][T17648] netdev_run_todo+0x7da/0x12a0 [ 954.684807][T17648] default_device_exit_batch+0x99a/0xc80 [ 954.690428][T17648] ops_undo_list+0x363/0xab0 [ 954.695003][T17648] cleanup_net+0x41b/0x830 [ 954.699402][T17648] process_one_work+0x9ba/0x1b20 [ 954.704323][T17648] worker_thread+0x6c8/0xf10 [ 954.708897][T17648] kthread+0x3c5/0x780 [ 954.712946][T17648] ret_from_fork+0x983/0xb10 [ 954.717515][T17648] ret_from_fork_asm+0x1a/0x30 [ 954.722275][T17648] [ 954.724575][T17648] The buggy address belongs to the object at ffff8880599bc000 [ 954.724575][T17648] which belongs to the cache kmalloc-cg-4k of size 4096 [ 954.738864][T17648] The buggy address is located 744 bytes inside of [ 954.738864][T17648] freed 4096-byte region [ffff8880599bc000, ffff8880599bd000) [ 954.752723][T17648] [ 954.755026][T17648] The buggy address belongs to the physical page: [ 954.761410][T17648] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x599b8 [ 954.770151][T17648] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 954.778645][T17648] memcg:ffff888035a12dc1 [ 954.782864][T17648] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 954.790389][T17648] page_type: f5(slab) [ 954.794351][T17648] raw: 00fff00000000040 ffff88813ff30500 dead000000000100 dead000000000122 [ 954.802913][T17648] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888035a12dc1 [ 954.811475][T17648] head: 00fff00000000040 ffff88813ff30500 dead000000000100 dead000000000122 [ 954.820127][T17648] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888035a12dc1 [ 954.828779][T17648] head: 00fff00000000003 ffffea0001666e01 00000000ffffffff 00000000ffffffff [ 954.837428][T17648] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 954.846071][T17648] page dumped because: kasan: bad access detected [ 954.852459][T17648] page_owner tracks the page as allocated [ 954.858148][T17648] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 62111565164, free_ts 16008105675 [ 954.879485][T17648] post_alloc_hook+0x1af/0x220 [ 954.884240][T17648] get_page_from_freelist+0xd0b/0x31a0 [ 954.889680][T17648] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 954.895656][T17648] alloc_pages_mpol+0x1fb/0x550 [ 954.900490][T17648] new_slab+0x2c3/0x430 [ 954.904631][T17648] ___slab_alloc+0xe18/0x1c90 [ 954.909311][T17648] __slab_alloc.constprop.0+0x63/0x110 [ 954.914755][T17648] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 954.921152][T17648] kmemdup_noprof+0x29/0x60 [ 954.925634][T17648] __addrconf_sysctl_register+0xbb/0x360 [ 954.931250][T17648] addrconf_sysctl_register+0x15f/0x1f0 [ 954.936777][T17648] ipv6_add_dev+0xb31/0x15f0 [ 954.941350][T17648] addrconf_notify+0x53e/0x19f0 [ 954.946188][T17648] notifier_call_chain+0xbc/0x3e0 [ 954.951193][T17648] call_netdevice_notifiers_info+0xbe/0x110 [ 954.957068][T17648] register_netdevice+0x1792/0x21d0 [ 954.962246][T17648] page last free pid 1 tgid 1 stack trace: [ 954.968023][T17648] __free_frozen_pages+0x7df/0x1170 [ 954.973208][T17648] free_contig_range+0x183/0x4a0 [ 954.978131][T17648] destroy_args+0xb95/0x14e0 [ 954.982706][T17648] debug_vm_pgtable+0x2220/0x38d0 [ 954.987714][T17648] do_one_initcall+0x123/0x680 [ 954.992462][T17648] kernel_init_freeable+0x5c8/0x920 [ 954.997647][T17648] kernel_init+0x1c/0x2b0 [ 955.001954][T17648] ret_from_fork+0x983/0xb10 [ 955.006522][T17648] ret_from_fork_asm+0x1a/0x30 [ 955.011272][T17648] [ 955.013572][T17648] Memory state around the buggy address: [ 955.019186][T17648] ffff8880599bc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.027227][T17648] ffff8880599bc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.035263][T17648] >ffff8880599bc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.043298][T17648] ^ [ 955.050726][T17648] ffff8880599bc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.058764][T17648] ffff8880599bc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.066799][T17648] ================================================================== [ 955.082442][T17648] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 955.089662][T17648] CPU: 0 UID: 0 PID: 17648 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 955.099207][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 955.109271][T17648] Workqueue: events smc_ib_port_event_work [ 955.115096][T17648] Call Trace: [ 955.118373][T17648] [ 955.121300][T17648] dump_stack_lvl+0x3d/0x1f0 [ 955.125878][T17648] vpanic+0x640/0x6f0 [ 955.129837][T17648] panic+0xca/0xd0 [ 955.133531][T17648] ? __pfx_panic+0x10/0x10 [ 955.137920][T17648] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 955.143969][T17648] ? preempt_schedule_common+0x44/0xc0 [ 955.149408][T17648] ? preempt_schedule_thunk+0x16/0x30 [ 955.154754][T17648] ? check_panic_on_warn+0x1f/0xb0 [ 955.159853][T17648] check_panic_on_warn+0xab/0xb0 [ 955.164771][T17648] end_report+0x107/0x160 [ 955.169079][T17648] kasan_report+0xee/0x110 [ 955.173471][T17648] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 955.179524][T17648] __ethtool_get_link_ksettings+0x190/0x1c0 [ 955.185409][T17648] __ethtool_get_link_ksettings+0x144/0x1c0 [ 955.191305][T17648] ib_get_eth_speed+0x122/0xb50 [ 955.196150][T17648] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 955.201507][T17648] ? do_raw_spin_unlock+0x172/0x230 [ 955.206692][T17648] rxe_query_port+0x127/0x360 [ 955.211364][T17648] ib_query_port+0x441/0x8a0 [ 955.215937][T17648] smc_ib_port_event_work+0x12f/0xbf0 [ 955.221286][T17648] ? rcu_is_watching+0x12/0xc0 [ 955.226029][T17648] process_one_work+0x9ba/0x1b20 [ 955.230945][T17648] ? __pfx_process_one_work+0x10/0x10 [ 955.236308][T17648] ? assign_work+0x1a0/0x250 [ 955.240874][T17648] worker_thread+0x6c8/0xf10 [ 955.245445][T17648] ? __pfx_worker_thread+0x10/0x10 [ 955.250530][T17648] kthread+0x3c5/0x780 [ 955.254580][T17648] ? __pfx_kthread+0x10/0x10 [ 955.259155][T17648] ? rcu_is_watching+0x12/0xc0 [ 955.263890][T17648] ? __pfx_kthread+0x10/0x10 [ 955.268454][T17648] ret_from_fork+0x983/0xb10 [ 955.273018][T17648] ? __pfx_ret_from_fork+0x10/0x10 [ 955.278114][T17648] ? __switch_to+0x7af/0x10d0 [ 955.282777][T17648] ? __pfx_kthread+0x10/0x10 [ 955.287342][T17648] ret_from_fork_asm+0x1a/0x30 [ 955.292097][T17648] [ 955.295387][T17648] Kernel Offset: disabled [ 955.299686][T17648] Rebooting in 86400 seconds..