last executing test programs: 7m40.037248234s ago: executing program 0 (id=72): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001aaa2608b979906", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000006c0)="fb9dabb03d7e4434d435d05b7eafc1ddca0f2b53923cf3dbf3d0ec520276148276fbc9dc52ff3281f7949f1c9462b6882e903011683a43722951759b53084da3adc5f494806f71bf188edfceff5edb72a0752d379a6d068c89928d58ebd3bb79d148f563c530a464daaa2c9d98c16cbb37c7ed8f9b56fada275b2f128949368c41cf7c105de1f2a1ac88ca0c76b3f0c9d26a4b6229c45a28d28a1bd4b1fc83f3f5eb979b41e0a3e7a7b1a061843522900659be6bacc2f1d29a375e04d1dbc6147e08e108ae70a87d1b61af2aa72c00a618f4b45397f0984848506d01cd6fbfa7ff", &(0x7f0000000280)=""/190, &(0x7f0000000100), &(0x7f0000000840)="508e47a3bfa46f90c75caa439c4d3b167e08ac4b14096ace30a01dda932c9304675829c8fb95158a0138a977dc587c32ea5a6f3383939a4ee5f9e87017217de9cae69fedf9e2a955725cf306365c72e5c7101905b7e768f0002a0872cf50c4b7eb8be749ff0ee1fcd899cf74016b5736e7cba76f40e6f7d8730a66f829b424a2b927b62c194f9346bbc73c18a263fef293f73a7b9a5c5ee6b7bb81b58110fdaaa8b96197a3a9d92a4d5e8a393a1fca90f3a0d2e75ee1f61c5527169d5030a0c00ba7f83caac9682d05721c952dc862715f6a379b1025e9b01e17ed6024034935eff130", 0x80000000, r2, 0x4}, 0x38) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000940)=""/98, 0x62}], 0x3, &(0x7f0000000d80)=""/42, 0x2a}, 0x10000}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)}], 0x5, &(0x7f0000000e40)=""/149, 0x95}, 0x1}, {{&(0x7f0000000f00)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/181, 0xb5}, {&(0x7f0000001040)=""/179, 0xb3}, {&(0x7f0000006240)=""/188, 0xbc}, {&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f0000001200)=""/168, 0xa8}], 0x5, &(0x7f0000001340)=""/146, 0x92}, 0x9}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/70, 0x46}], 0x1, &(0x7f00000014c0)=""/133, 0x85}, 0x7}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/154, 0x9a}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002800)=""/3, 0x3}, 0x3}, {{&(0x7f0000002840)=@caif=@dbg, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/251, 0xfb}, {&(0x7f00000029c0)=""/58, 0x3a}, {&(0x7f0000002a00)=""/205, 0xcd}], 0x3, &(0x7f0000002b40)=""/251, 0xfb}, 0xd55}, {{&(0x7f0000002c40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002cc0)=""/29, 0x1d}, {&(0x7f0000002d00)=""/195, 0xc3}, {&(0x7f0000002e80)=""/247, 0xf7}, {&(0x7f0000002f80)=""/181, 0xb5}, {&(0x7f0000003040)=""/93, 0x5d}, {&(0x7f00000030c0)=""/163, 0xa3}, {&(0x7f0000002e00)=""/7, 0x7}], 0x7}, 0x2}, {{&(0x7f0000003200)=@sco={0x1f, @none}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003280)=""/57, 0x39}, {&(0x7f00000032c0)=""/121, 0x79}, {&(0x7f0000003340)=""/59, 0x3b}, {&(0x7f0000003380)=""/198, 0xc6}, {&(0x7f0000003480)=""/197, 0xc5}, {&(0x7f0000003580)=""/214, 0xd6}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/233, 0xe9}, {&(0x7f0000003880)=""/125, 0x7d}], 0x9, &(0x7f00000039c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000049c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/227, 0xe3}, {&(0x7f0000004b40)=""/120, 0x78}, {&(0x7f0000004bc0)=""/105, 0x69}], 0x3, &(0x7f0000004c80)=""/90, 0x5a}, 0x10000}, {{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004d80)=""/205, 0xcd}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/114, 0x72}], 0x3}, 0x80}], 0xa, 0x1, &(0x7f0000006200)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f320f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef7878bafc0cec756740450f078ec02c1aa80004460f1c460041ae", 0x45}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) io_setup(0x9, &(0x7f0000002e40)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r8, 0xffffffffffffffff, 0x1c}) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) 7m36.756943024s ago: executing program 0 (id=80): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001aaa2608b979906", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000006c0)="fb9dabb03d7e4434d435d05b7eafc1ddca0f2b53923cf3dbf3d0ec520276148276fbc9dc52ff3281f7949f1c9462b6882e903011683a43722951759b53084da3adc5f494806f71bf188edfceff5edb72a0752d379a6d068c89928d58ebd3bb79d148f563c530a464daaa2c9d98c16cbb37c7ed8f9b56fada275b2f128949368c41cf7c105de1f2a1ac88ca0c76b3f0c9d26a4b6229c45a28d28a1bd4b1fc83f3f5eb979b41e0a3e7a7b1a061843522900659be6bacc2f1d29a375e04d1dbc6147e08e108ae70a87d1b61af2aa72c00a618f4b45397f0984848506d01cd6fbfa7ff", &(0x7f0000000280)=""/190, &(0x7f0000000100), &(0x7f0000000840)="508e47a3bfa46f90c75caa439c4d3b167e08ac4b14096ace30a01dda932c9304675829c8fb95158a0138a977dc587c32ea5a6f3383939a4ee5f9e87017217de9cae69fedf9e2a955725cf306365c72e5c7101905b7e768f0002a0872cf50c4b7eb8be749ff0ee1fcd899cf74016b5736e7cba76f40e6f7d8730a66f829b424a2b927b62c194f9346bbc73c18a263fef293f73a7b9a5c5ee6b7bb81b58110fdaaa8b96197a3a9d92a4d5e8a393a1fca90f3a0d2e75ee1f61c5527169d5030a0c00ba7f83caac9682d05721c952dc862715f6a379b1025e9b01e17ed6024034935eff130", 0x80000000, r2, 0x4}, 0x38) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000940)=""/98, 0x62}], 0x3, &(0x7f0000000d80)=""/42, 0x2a}, 0x10000}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)}], 0x5, &(0x7f0000000e40)=""/149, 0x95}, 0x1}, {{&(0x7f0000000f00)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/181, 0xb5}, {&(0x7f0000001040)=""/179, 0xb3}, {&(0x7f0000006240)=""/188, 0xbc}, {&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f0000001200)=""/168, 0xa8}], 0x5, &(0x7f0000001340)=""/146, 0x92}, 0x9}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/70, 0x46}], 0x1, &(0x7f00000014c0)=""/133, 0x85}, 0x7}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/154, 0x9a}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002800)=""/3, 0x3}, 0x3}, {{&(0x7f0000002840)=@caif=@dbg, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/251, 0xfb}, {&(0x7f00000029c0)=""/58, 0x3a}, {&(0x7f0000002a00)=""/205, 0xcd}], 0x3, &(0x7f0000002b40)=""/251, 0xfb}, 0xd55}, {{&(0x7f0000002c40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002cc0)=""/29, 0x1d}, {&(0x7f0000002d00)=""/195, 0xc3}, {&(0x7f0000002e80)=""/247, 0xf7}, {&(0x7f0000002f80)=""/181, 0xb5}, {&(0x7f0000003040)=""/93, 0x5d}, {&(0x7f00000030c0)=""/163, 0xa3}, {&(0x7f0000002e00)=""/7, 0x7}], 0x7}, 0x2}, {{&(0x7f0000003200)=@sco={0x1f, @none}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003280)=""/57, 0x39}, {&(0x7f00000032c0)=""/121, 0x79}, {&(0x7f0000003340)=""/59, 0x3b}, {&(0x7f0000003380)=""/198, 0xc6}, {&(0x7f0000003480)=""/197, 0xc5}, {&(0x7f0000003580)=""/214, 0xd6}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/233, 0xe9}, {&(0x7f0000003880)=""/125, 0x7d}], 0x9, &(0x7f00000039c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000049c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/227, 0xe3}, {&(0x7f0000004b40)=""/120, 0x78}, {&(0x7f0000004bc0)=""/105, 0x69}], 0x3, &(0x7f0000004c80)=""/90, 0x5a}, 0x10000}, {{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004d80)=""/205, 0xcd}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/114, 0x72}], 0x3}, 0x80}], 0xa, 0x1, &(0x7f0000006200)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f320f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef7878bafc0cec756740450f078ec02c1aa80004460f1c460041ae", 0x45}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r8, 0xffffffffffffffff, 0x1c}) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) 7m33.150379051s ago: executing program 0 (id=89): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) keyctl$read(0x1f, 0x0, 0x0, 0x0) 7m32.146993633s ago: executing program 0 (id=91): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001aaa2608b979906", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000006c0)="fb9dabb03d7e4434d435d05b7eafc1ddca0f2b53923cf3dbf3d0ec520276148276fbc9dc52ff3281f7949f1c9462b6882e903011683a43722951759b53084da3adc5f494806f71bf188edfceff5edb72a0752d379a6d068c89928d58ebd3bb79d148f563c530a464daaa2c9d98c16cbb37c7ed8f9b56fada275b2f128949368c41cf7c105de1f2a1ac88ca0c76b3f0c9d26a4b6229c45a28d28a1bd4b1fc83f3f5eb979b41e0a3e7a7b1a061843522900659be6bacc2f1d29a375e04d1dbc6147e08e108ae70a87d1b61af2aa72c00a618f4b45397f0984848506d01cd6fbfa7ff", &(0x7f0000000280)=""/190, &(0x7f0000000100), &(0x7f0000000840)="508e47a3bfa46f90c75caa439c4d3b167e08ac4b14096ace30a01dda932c9304675829c8fb95158a0138a977dc587c32ea5a6f3383939a4ee5f9e87017217de9cae69fedf9e2a955725cf306365c72e5c7101905b7e768f0002a0872cf50c4b7eb8be749ff0ee1fcd899cf74016b5736e7cba76f40e6f7d8730a66f829b424a2b927b62c194f9346bbc73c18a263fef293f73a7b9a5c5ee6b7bb81b58110fdaaa8b96197a3a9d92a4d5e8a393a1fca90f3a0d2e75ee1f61c5527169d5030a0c00ba7f83caac9682d05721c952dc862715f6a379b1025e9b01e17ed6024034935eff130", 0x80000000, r2, 0x4}, 0x38) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000940)=""/98, 0x62}], 0x3, &(0x7f0000000d80)=""/42, 0x2a}, 0x10000}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)}], 0x5, &(0x7f0000000e40)=""/149, 0x95}, 0x1}, {{&(0x7f0000000f00)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/181, 0xb5}, {&(0x7f0000001040)=""/179, 0xb3}, {&(0x7f0000006240)=""/188, 0xbc}, {&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f0000001200)=""/168, 0xa8}], 0x5, &(0x7f0000001340)=""/146, 0x92}, 0x9}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/70, 0x46}], 0x1, &(0x7f00000014c0)=""/133, 0x85}, 0x7}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/154, 0x9a}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002800)=""/3, 0x3}, 0x3}, {{&(0x7f0000002840)=@caif=@dbg, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/251, 0xfb}, {&(0x7f00000029c0)=""/58, 0x3a}, {&(0x7f0000002a00)=""/205, 0xcd}], 0x3, &(0x7f0000002b40)=""/251, 0xfb}, 0xd55}, {{&(0x7f0000002c40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002cc0)=""/29, 0x1d}, {&(0x7f0000002d00)=""/195, 0xc3}, {&(0x7f0000002e80)=""/247, 0xf7}, {&(0x7f0000002f80)=""/181, 0xb5}, {&(0x7f0000003040)=""/93, 0x5d}, {&(0x7f00000030c0)=""/163, 0xa3}, {&(0x7f0000002e00)=""/7, 0x7}], 0x7}, 0x2}, {{&(0x7f0000003200)=@sco={0x1f, @none}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003280)=""/57, 0x39}, {&(0x7f00000032c0)=""/121, 0x79}, {&(0x7f0000003340)=""/59, 0x3b}, {&(0x7f0000003380)=""/198, 0xc6}, {&(0x7f0000003480)=""/197, 0xc5}, {&(0x7f0000003580)=""/214, 0xd6}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/233, 0xe9}, {&(0x7f0000003880)=""/125, 0x7d}], 0x9, &(0x7f00000039c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000049c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/227, 0xe3}, {&(0x7f0000004b40)=""/120, 0x78}, {&(0x7f0000004bc0)=""/105, 0x69}], 0x3, &(0x7f0000004c80)=""/90, 0x5a}, 0x10000}, {{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004d80)=""/205, 0xcd}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/114, 0x72}], 0x3}, 0x80}], 0xa, 0x1, &(0x7f0000006200)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f320f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef7878bafc0cec756740450f078ec02c1aa80004460f1c460041ae", 0x45}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r8, 0xffffffffffffffff, 0x1c}) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) 7m29.375016458s ago: executing program 0 (id=97): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xd0fb1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x100000000003}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0) 7m24.41974058s ago: executing program 0 (id=107): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001aaa2608b979906", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/27], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000006c0)="fb9dabb03d7e4434d435d05b7eafc1ddca0f2b53923cf3dbf3d0ec520276148276fbc9dc52ff3281f7949f1c9462b6882e903011683a43722951759b53084da3adc5f494806f71bf188edfceff5edb72a0752d379a6d068c89928d58ebd3bb79d148f563c530a464daaa2c9d98c16cbb37c7ed8f9b56fada275b2f128949368c41cf7c105de1f2a1ac88ca0c76b3f0c9d26a4b6229c45a28d28a1bd4b1fc83f3f5eb979b41e0a3e7a7b1a061843522900659be6bacc2f1d29a375e04d1dbc6147e08e108ae70a87d1b61af2aa72c00a618f4b45397f0984848506d01cd6fbfa7ff", &(0x7f0000000280)=""/190, &(0x7f0000000100), &(0x7f0000000840)="508e47a3bfa46f90c75caa439c4d3b167e08ac4b14096ace30a01dda932c9304675829c8fb95158a0138a977dc587c32ea5a6f3383939a4ee5f9e87017217de9cae69fedf9e2a955725cf306365c72e5c7101905b7e768f0002a0872cf50c4b7eb8be749ff0ee1fcd899cf74016b5736e7cba76f40e6f7d8730a66f829b424a2b927b62c194f9346bbc73c18a263fef293f73a7b9a5c5ee6b7bb81b58110fdaaa8b96197a3a9d92a4d5e8a393a1fca90f3a0d2e75ee1f61c5527169d5030a0c00ba7f83caac9682d05721c952dc862715f6a379b1025e9b01e17ed6024034935eff130", 0x80000000, r2, 0x4}, 0x38) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000940)=""/98, 0x62}], 0x3, &(0x7f0000000d80)=""/42, 0x2a}, 0x10000}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)}], 0x5, &(0x7f0000000e40)=""/149, 0x95}, 0x1}, {{&(0x7f0000000f00)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/181, 0xb5}, {&(0x7f0000001040)=""/179, 0xb3}, {&(0x7f0000006240)=""/188, 0xbc}, {&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f0000001200)=""/168, 0xa8}], 0x5, &(0x7f0000001340)=""/146, 0x92}, 0x9}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/70, 0x46}], 0x1, &(0x7f00000014c0)=""/133, 0x85}, 0x7}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/154, 0x9a}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002800)=""/3, 0x3}, 0x3}, {{&(0x7f0000002840)=@caif=@dbg, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/251, 0xfb}, {&(0x7f00000029c0)=""/58, 0x3a}, {&(0x7f0000002a00)=""/205, 0xcd}], 0x3, &(0x7f0000002b40)=""/251, 0xfb}, 0xd55}, {{&(0x7f0000002c40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002cc0)=""/29, 0x1d}, {&(0x7f0000002d00)=""/195, 0xc3}, {&(0x7f0000002e80)=""/247, 0xf7}, {&(0x7f0000002f80)=""/181, 0xb5}, {&(0x7f0000003040)=""/93, 0x5d}, {&(0x7f00000030c0)=""/163, 0xa3}, {&(0x7f0000002e00)=""/7, 0x7}], 0x7}, 0x2}, {{&(0x7f0000003200)=@sco={0x1f, @none}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003280)=""/57, 0x39}, {&(0x7f00000032c0)=""/121, 0x79}, {&(0x7f0000003340)=""/59, 0x3b}, {&(0x7f0000003380)=""/198, 0xc6}, {&(0x7f0000003480)=""/197, 0xc5}, {&(0x7f0000003580)=""/214, 0xd6}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/233, 0xe9}, {&(0x7f0000003880)=""/125, 0x7d}], 0x9, &(0x7f00000039c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000049c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/227, 0xe3}, {&(0x7f0000004b40)=""/120, 0x78}, {&(0x7f0000004bc0)=""/105, 0x69}], 0x3, &(0x7f0000004c80)=""/90, 0x5a}, 0x10000}, {{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004d80)=""/205, 0xcd}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/114, 0x72}], 0x3}, 0x80}], 0xa, 0x1, &(0x7f0000006200)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f320f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef7878bafc0cec756740450f078ec02c1aa80004460f1c460041ae", 0x45}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r8, 0xffffffffffffffff, 0x1c}) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) 7m9.090287884s ago: executing program 32 (id=107): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001aaa2608b979906", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/27], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000006c0)="fb9dabb03d7e4434d435d05b7eafc1ddca0f2b53923cf3dbf3d0ec520276148276fbc9dc52ff3281f7949f1c9462b6882e903011683a43722951759b53084da3adc5f494806f71bf188edfceff5edb72a0752d379a6d068c89928d58ebd3bb79d148f563c530a464daaa2c9d98c16cbb37c7ed8f9b56fada275b2f128949368c41cf7c105de1f2a1ac88ca0c76b3f0c9d26a4b6229c45a28d28a1bd4b1fc83f3f5eb979b41e0a3e7a7b1a061843522900659be6bacc2f1d29a375e04d1dbc6147e08e108ae70a87d1b61af2aa72c00a618f4b45397f0984848506d01cd6fbfa7ff", &(0x7f0000000280)=""/190, &(0x7f0000000100), &(0x7f0000000840)="508e47a3bfa46f90c75caa439c4d3b167e08ac4b14096ace30a01dda932c9304675829c8fb95158a0138a977dc587c32ea5a6f3383939a4ee5f9e87017217de9cae69fedf9e2a955725cf306365c72e5c7101905b7e768f0002a0872cf50c4b7eb8be749ff0ee1fcd899cf74016b5736e7cba76f40e6f7d8730a66f829b424a2b927b62c194f9346bbc73c18a263fef293f73a7b9a5c5ee6b7bb81b58110fdaaa8b96197a3a9d92a4d5e8a393a1fca90f3a0d2e75ee1f61c5527169d5030a0c00ba7f83caac9682d05721c952dc862715f6a379b1025e9b01e17ed6024034935eff130", 0x80000000, r2, 0x4}, 0x38) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000940)=""/98, 0x62}], 0x3, &(0x7f0000000d80)=""/42, 0x2a}, 0x10000}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)}], 0x5, &(0x7f0000000e40)=""/149, 0x95}, 0x1}, {{&(0x7f0000000f00)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/181, 0xb5}, {&(0x7f0000001040)=""/179, 0xb3}, {&(0x7f0000006240)=""/188, 0xbc}, {&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f0000001200)=""/168, 0xa8}], 0x5, &(0x7f0000001340)=""/146, 0x92}, 0x9}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/70, 0x46}], 0x1, &(0x7f00000014c0)=""/133, 0x85}, 0x7}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/154, 0x9a}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002800)=""/3, 0x3}, 0x3}, {{&(0x7f0000002840)=@caif=@dbg, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/251, 0xfb}, {&(0x7f00000029c0)=""/58, 0x3a}, {&(0x7f0000002a00)=""/205, 0xcd}], 0x3, &(0x7f0000002b40)=""/251, 0xfb}, 0xd55}, {{&(0x7f0000002c40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002cc0)=""/29, 0x1d}, {&(0x7f0000002d00)=""/195, 0xc3}, {&(0x7f0000002e80)=""/247, 0xf7}, {&(0x7f0000002f80)=""/181, 0xb5}, {&(0x7f0000003040)=""/93, 0x5d}, {&(0x7f00000030c0)=""/163, 0xa3}, {&(0x7f0000002e00)=""/7, 0x7}], 0x7}, 0x2}, {{&(0x7f0000003200)=@sco={0x1f, @none}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003280)=""/57, 0x39}, {&(0x7f00000032c0)=""/121, 0x79}, {&(0x7f0000003340)=""/59, 0x3b}, {&(0x7f0000003380)=""/198, 0xc6}, {&(0x7f0000003480)=""/197, 0xc5}, {&(0x7f0000003580)=""/214, 0xd6}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/233, 0xe9}, {&(0x7f0000003880)=""/125, 0x7d}], 0x9, &(0x7f00000039c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000049c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/227, 0xe3}, {&(0x7f0000004b40)=""/120, 0x78}, {&(0x7f0000004bc0)=""/105, 0x69}], 0x3, &(0x7f0000004c80)=""/90, 0x5a}, 0x10000}, {{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004d80)=""/205, 0xcd}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/114, 0x72}], 0x3}, 0x80}], 0xa, 0x1, &(0x7f0000006200)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f320f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef7878bafc0cec756740450f078ec02c1aa80004460f1c460041ae", 0x45}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r8, 0xffffffffffffffff, 0x1c}) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) 2m46.646264861s ago: executing program 3 (id=757): r0 = semget$private(0x0, 0x5, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x3) semop(r0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r0, &(0x7f0000000180)=[{0x3, 0x44cf, 0x800}], 0x1f4) 2m46.494498303s ago: executing program 3 (id=759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x35f, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) 2m45.507687747s ago: executing program 3 (id=762): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000840), 0x22600, 0x0) ppoll(&(0x7f0000000880)=[{r0, 0x40, 0xffff}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 2m45.211533228s ago: executing program 3 (id=763): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, 0x0, 0x0, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYBLOB="791aa5502d33e625edf70ee6d1e79433f5be039c61512d64ac3ced14fb2c19ffc1ecf6da0d8b6854271650d8a883b86716fee49dc2e3f1781a6676cb25cee826966e6928f9a0b808051711a42a538302d880628f0328a6a7525f857ad4ffa00b3e1be6c73f58de66a7f5cd1bd239f87100f00373ec078cddb0bd3a35701687d5153ac01e6b4c8b8e475be53bcf310273f5f64de7acdb66482f343663dd5dd2a5f9c94c1c0d97dea1023758"], 0x20}, {&(0x7f0000000a00)={0x129c, 0x23, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x4, 0xcd}, @generic="e68f73660191a471ec27071f36fcbfaff4e69ace4b95ebcaf90adb3fb5277e8adf2f837f4778a2e754b45a59a0fc08df4bf0ae335763cf9bec936ab9d6fa9e8e6a06f32c0f8467384ce8b961d3a4a4a6c6c7b85fe88d632dfb3260dc48b2bf3e6a66417f4d1e629c89db573880d1b4500c0f93f94a7cc7584ea6b62bd793978cf991196efc962297390a18759cf53b1ea4b999be8e633c5a995f03c98e1f76f7e647b95aca9b06b15c0f3bf34393384e6b62207a6d691afa803b5f3d987b5c7e527c22ee8d8c73592cf20b613acf2374c2611153b86d1c8ee2b646d930e13140e585c9d2c7c4a762cc28371e2007443499e079d966d676", @generic="d30980580866e49ab70557001d42789806de0245d8ded99ebb158800c539e8002174d2fe488e33067564d87b28e1e1d53d44466d1be30d2ed1cccc0b7584b5f48096ef4ce599ffa74b90e65d55f8a0d44c8a06515813f655e9f890", @generic="412b0196e17a201cda874b8062ea7727d08ec0039787dca5", @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@loopback}, @generic="da30f9de27f5c5aae9ab1dc3530ada6192d049a90c0dc0d4df3be4dd51c61ac772bc38dad7c0d3c141662c804535d262adbc32ee246b26927e0e454e033e38bdfa0b60a6f823744e12074859cdfd4a7d209663cca1c7b8498688efc7db2746c934541e477262798f01f9177954fd4c59e125af81256ec1344c11467cd6cec8ffcd40b4424be2e73a8e63fa9f4b3d00a74f61e676b840be4ce15f761b1ccb64a436ea1c5f10519e79b52f6c16a6fbc99c1ac8a4b76d1dd8318d42dcfcaff14ce0c10954ce2e6ca7ee4fec452e68e847a202493ea369bcea8a34773e40484b3792a02a1503755597154d", @nested={0x100c, 0xb0, 0x0, 0x1, [@nested={0x4, 0x35}, @typed={0x1004, 0x137, 0x0, 0x0, @binary="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"}]}]}, 0x129c}, {&(0x7f0000000340)={0x70, 0x37, 0x100, 0x70bd2c, 0x25dfdbff, "", [@generic="619baafb2bc71376b9c6a91983ee12c0e408700e3920d3655ce24230e3012c5b87f1fcd9330a896a5a7c01fb1b9a4262b287da9730c8a9c5426f7ac53d0ab0013ca13b847cbed10c58aa58b7614bed644d9a105c996539525a", @generic="bb9ab904f6380c"]}, 0x70}, {&(0x7f0000002400)={0xdbc, 0x27, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@typed={0xc, 0x53, 0x0, 0x0, @u64=0x77fffffffffffd}, @nested={0x78d, 0x118, 0x0, 0x1, [@typed={0x4, 0x57}, @typed={0x8, 0xde, 0x0, 0x0, @u32=0x7}, @nested={0xc, 0x3c, 0x0, 0x1, [@nested={0x4, 0x6c}, @nested={0x4, 0x88}]}, @nested={0x100, 0x2, 0x0, 0x1, [@generic="9d67859679b86d55129b8b7b419852a8ee31a5c4727105d239bc94dc70841d412126fbc62a8e806da0c381de1a47e90714790bc6059294d353f9ecc2bd828419b919c571f8acf30399e6b5efb282da48480d891e5b6f6e1491c37dadfa40b06806212e029ee5f04d2958bec6b8f9835d0636f72da3c19bddf5e54271a586f7e12f28642efdc453dcffb914e2015ffbdba23af902d9906c", @nested={0x4, 0x116}, @generic="c4d2b7ec0086c162eb156c560e7ed1a6a6ad54a136de5bf5c14a0189654eb203224371c8457dad01f19154cc1e58705a50346076d35903614c99061facb3b52810f804cebbece0fae5ced5ef9284191acc59b553ef35883650", @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @nested={0x2e7, 0x11b, 0x0, 0x1, [@nested={0x4, 0x57}, @generic="8da7d085fe63b061e052e658b7ab3ebd7c58c708c358616368ab58c227a6407af92773b44c52e7d118f7dfdf939c4e06fc59702fe00c41b1c6095f0b1d49c3b8a365cfedff8c83b890d36920636aa5c8c88f0c2230419d8e3c71f8", @generic="2fc410752e3a6c2590e7e33058502b65f22d4ff6bbcba4605d8fa3a8c1c1e0f4c96167798606dd5a37767ce33293c06d05a632aedadfc56f3a9a25fccb67cebc85e35e4abc73134d6d90b9aba5c1d12eb42659154507c8ef125965ecde69f24152937d11e5ed8420f509a9e9a9f46d91e8d486e2fedc53742e7f71ed6b63817aef3d61d8237ac4f309f9b505f840c4c27b28b83f127d815e7b1ce783f67db6d74d74ab267e1826173882211a2c7c320462352fa0d4497699f9c2ab92ac638eaf9973c6beffe5554072701551b3f6aba12b58dd91c5da39e2cc9f3e6d0a7b", @generic="e759a448a1d4a57eb2b699431c9ffaba48d5e586f6e8c5b71139fd732ca24184edb1d0a3852df64730220fc4f1ce749cb248292e4700dd1e3cdae6c93f061b177407983fc955c2bbccfdb73a843f8eee0a12d07fa835e0f81c67c90c8b518625fe298fb511d7f213fc3502f1b0a940610bda3f7ae4d7414a32e395ab5ed5b32f142235b77f00cbc8a2c57244459fe2ec92a0fd80bddbb27990c103ae7bac59916f96e8ce1348a982ac51189319b823b0ce99579a6d7b4e5857acb8283cb18c08f9d5b931a3d14e7dd38c41d42bde2daba7780c72171e45c3ec37492a2480", @generic="162986a21e662b7ddcc55e0618e29ecffbfd0ed4032a63c8ee6f0563b964761de9e8284e8db84e7f841aa9ddddc9bcfaffdd7337d2e8de762af5db460f6b5547efa66b8459992698631f562ad8e0fe", @generic="d966dd8e5aafdc7bd2ec980fee96dabbdd7b9ae7ae3634bac65ddb542114ce77c81fd5967482d65dc257ce0247926fe1bd7e35b89888f0d1ea70f5f64fee8e35b2e65275804f6d2de5a28fd9047181097ae70a68282e623ce6d7c3c8e07e0ade015cdf5d5a6b4b8633253a6944540b27045e171329f673f396"]}, @nested={0x19f, 0x118, 0x0, 0x1, [@generic="1c7f62d53d060e1955caaebbe9de1103517af96a66b3620f1bc1f993e4a7e3c06babc66d30c129b85dfaf738134f6dd5e03e97b569d546311405d9174de59d6a4729e080081fffa81e78d3c70d2419cde7afc926358c2e5dfb65aaad09d435037b9860b52b3e67207df59a4e0b6a009056710e4a72a185e8c4efe21e535bd12a0f82e4d97253c5bf455e2ea750ff6f018f717d8dc467cc279f96175d6687eca43e36316dba3c7ab9", @generic="c454482a1c19796151884a1c78f6d7a544edc9d18664fe8cb179e301be31bbdfdd99a5a25e321fb4162b8b4c9baf507ac429a403142c7bedf2db3ce81749a7561e9b2a5823850b72b3297356248bd03a3e0f3091bf807ee7f50fb02954d482a085967f79ab9acc29a23649e14e933aa2ef051cc2a7aeb04fad997ad698c79ac2c55c866d5604b14ba859c26226391ad6aab2a41070845ceaf147d86b2f", @generic="8399f936b6fe60e10331d7b957438cf4222065d1d2f52360562f2f61e88e9f37f82bdc6177d7a6768d60d2b674939513e011f7a14abb7bf20f0bc1b7ae6f670e484ad0389789159bc678424ec2cd", @typed={0x8, 0xa7, 0x0, 0x0, @pid}]}, @generic="6ab1b0c52f443580cc3fef50df744478345081f2f403cc1855649d39e1a26ec77b9fce2df92fc300d54ef6dbf9ee26498fd01bceec52f3c6090559c02d163b3011f004694d61a7adee91ee16448415b6be26db2766c00de455d3d53a530f87e18b0f3807873b1f4b025c855104", @nested={0x17a, 0x111, 0x0, 0x1, [@typed={0x14, 0xac, 0x0, 0x0, @ipv6=@remote}, @generic="a7dd327ab915d631fadb175541c6bb78ea9afb1338a45366ecc05408b453cfb83dc7753e7e085949f4fbbca526a4b3cd88d92336d1be8d3e5fd60f38d9dbd4354b2dd134d972d8d10c7bb3656058aeda3bc91389f5cd2c538c7a658635ae1e273de77e797b62a91533d556ff8dcff98179c1689d47b32a40c694c328928b6e577502eecb6922341b383bdb5d612e0a29e342f643251135832b2e7a85", @typed={0xc, 0x17, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x10a, 0x0, 0x0, @fd=r0}, @generic="d4a7d27b5e41bd8aba9d0573f41b88d62cbb13786976dffa08b1f29071e41c3bcb915396a4e9b36e58767c73a868ab9d70e83113211f1bffe59dcaa0348eef0316217b08ff034741b19c72349d095df175f870703825b58402eaf88ddcefc661f829270ebc7c8165c8a05a991b489e", @generic="32f005e68a3ab4531457f9c02a4b2be2907210fc954a1ea469c76c5daec3cc02f09d58ad10993ffb7f15ca253be5169607a17095f0b26aa9d6e643", @typed={0x8, 0xc6, 0x0, 0x0, @fd=r0}]}]}, @nested={0x3dc, 0x36, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x100}, @nested={0x106, 0xc5, 0x0, 0x1, [@generic="af1d507c9840e24cfbaaf6a1686144c795470e9d5f880704eb20253cc9ea8bc6b7bdf22bfe4be25954358b7c13fc7095e6283a817a65c9e3585125b1dc26528c7f77217ac9ebb7161d5cd7d39fdf1c7d7addcd9b48416808397f08c13b2842e361abf73410d5cb33e265d71f47303657964f1b66cc76c20d72e3dd3aa7581562929ad25443c57c552d71ebd79fe4712c9d860b7b438288a086e9cb1affa10bc1f786a85ced06688cfffbb46ababcb4ae22b084d1feee91e451b0db430c6d", @nested={0x44, 0xe4, 0x0, 0x1, [@nested={0x10, 0x120, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @pid}, @nested={0x4, 0x111}, @generic]}, @typed={0x30, 0x57, 0x0, 0x0, @binary="4d9517d3bd0aed3ba67f56951acd05d3e3659d1b7474026a5c790d486a837bc17dab60771dcdb0303d4581fa"}]}]}, @nested={0x2aa, 0x116, 0x0, 0x1, [@generic="ac3b968e2dbe30402bba76d9dd97538b31ae30f495c2d65951f4ce46161f3201de2b0837ed5a5b80b2f200516d4039f3620af60b58904ebe4434084f", @generic="512811f5344706e3a26af124beff327225e99c8e248870b679c17c6a5e8ab95b2079d7ce4a656e89d8c2f4257283a27b94198b4c89e093b8c8fd85446875681ceec3f1602449db1e78e22f934f50861db5604a1519441f8ef6458dd4f36e00a2f5868a92b387889962a5220f89e02549870f76ec38d12c67666962b44cf56a39dc07cf63f41d62c2f1e2889a1a900712b74f4f5e31ae98e7f5394c2df01ae1c1da859bd410f89ba11c25cda654f47cc3a684bcf0aa167bafd15276935a83a5d0776e7bd991a561647f4ef4ead495f59fce95c29d2828ff127305a810a44a", @generic="6fa2dbce7ba13d19dcd994542fe13a31a3eaedffbd95b749871b7e004c21abf3af16b919bbdd614cadd5195a00d8d8eabe3438e8d3a81175cb001607de17e1c2ae07627f5e1071ed3ab037272a61adbb869397f24b6c11ebb76ecdfc0851d1595342492593ca705a7599d6f15f06a9382c7eb66ec2d2194665fbbe124b5ab0262a5349b2d95768aa9e629306c34ec630a1bf4f8b6dac2b9b2d0c5668cce8f4b8f5eb40be9675d576919936d1c13c73a34ca467127315d1d5477808d1fa6812dc0eb9752e420b9e927d311037f1a70606a5a4dc4d0cfbb8bc26c38da662b1a1aecc05d02ae67d992f2c4a3672174cb02f457c", @typed={0x8, 0xe8, 0x0, 0x0, @uid}, @generic="6b99f1f68c86450aa9251f84f86a54b6f1ee78d33911e702109688c5290aa56098af5c05bcf9ed526aee37593cfd2bb9e56b05742cabde4a4e96c0f00125638cca1854b3898d9371bc3979876f82494823477939fb9b4eba3228187dd959cd43177ef9c0270e3041286c607d51036c06535df2bdaeea435e14979806d75dbe8c46946e0fa10cf21caab8e18c3887eee9fc35"]}, @nested={0x4, 0x84}, @nested={0x4, 0xd5}, @nested={0x4, 0xbf}, @typed={0x8, 0x97, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x33}, @nested={0x4, 0xd6}]}, @nested={0x18, 0xb, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @uid}, @nested={0x4, 0x3b}, @nested={0x4, 0xeb}, @nested={0x4, 0x10f}]}, @generic="02bd3814d29c5523131b393888438ec82e688ccc62dc5eec9b4f4125970e3241dfa1b0c9300e096a6ad8520470f70dd451c4e5da8e6224560d9f376f76430f1b2214d52474c7c8332c33fc697eafa0933445bb97e3d5bb4c35b1d4007cc072b1966f12a85c9058ae848ac922622effc4aa2631f7ac336918ca89b2e65c2ddf2d33226c70eecef5af3ba9a6b037e379926fb79a7621f655697a26928c58", @generic="210015978081e9cee91ab91a2a51f6fc305a25ad25303a24df124c0d685bac7ba6fbd96c5f32d607fe2e405a765bf98b526cd524677601ef662c922a8ce67b897fe4a631dfa0fa5cd31c468846da93bff0f5759700", @generic="d711886ca572414238dacb969c7fde10f5f89f0fdc24", @nested={0xfe, 0xab, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="3e0aa6e5b6e42de4f0c420117ded5ca1281a98ce3391db30b6538686e5187a42d44292e6e330bf0c0cf3e4304d722b3f24fb81254f7ec15c57f7d33d1d29ea58d156dbbc254b4b22f4acda63333f86dcbed0a9276158eb4b7cd4edf74bc32a5a2114da917b40d30d40b4bfcabaa8b6b1a9a1684cd7ea5998ecd37c80905f0da65fc2833bd54e7270b441b03488dac73ea197db025360de721f33137660682e298107cb91df1f284e43b7b43273825ea8d6cfd29dd150bd0d565b62652beacaa21c2d365a7a109022a5936aa425332c38e29ab644d466935bb4abe9e6bfe7f5b77a81f8451a2cca36a471b3761cbf931a3289", @nested={0x4, 0x122}]}, @typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xdbc}], 0x4}, 0x300) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0e93616c2"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r8, r8, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m44.930355001s ago: executing program 3 (id=765): unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x36, {0x9, 0x21, 0xff, 0x3, 0x1, {0x22, 0xa5d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xf8, 0x81}}}}}]}}]}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0xff000000, 0x0, 0x0, 0x0) 2m41.830107852s ago: executing program 3 (id=774): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae589767d0e047901720", @ANYRES32=r1, @ANYRES32], 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0xb}, 0x94) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r5, 0x8004b707, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRESDEC, @ANYRES32=r4, @ANYRES8=r2, @ANYBLOB="030000000d0000000100104000c3a001970851dee787c69a8472ccb246f822a265f7fa5cb020c7b3ca3fd6"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000000), 0x27) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x700, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0xfffffffffffffea1, 0x1, @rand_addr=0x64010102}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1404, 0x1, 0x70fd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 2m25.643930308s ago: executing program 33 (id=774): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae589767d0e047901720", @ANYRES32=r1, @ANYRES32], 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0xb}, 0x94) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r5, 0x8004b707, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRESDEC, @ANYRES32=r4, @ANYRES8=r2, @ANYBLOB="030000000d0000000100104000c3a001970851dee787c69a8472ccb246f822a265f7fa5cb020c7b3ca3fd6"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000000), 0x27) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x700, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0xfffffffffffffea1, 0x1, @rand_addr=0x64010102}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1404, 0x1, 0x70fd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 10.0725684s ago: executing program 2 (id=1199): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000640)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xe, 0xe, 0x1, 0x0, 0x0, 0x2}, 0x1c) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x1a, &(0x7f0000000340)={0x40, 0x4, 0x80}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @private=0xffffffff}, 0x10) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {&(0x7f0000004540)=""/240, 0xf0}], 0x2}}], 0x1, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) 9.867322193s ago: executing program 6 (id=1200): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010101, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8.65111846s ago: executing program 2 (id=1201): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x0) 8.083384601s ago: executing program 1 (id=1203): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) socket$inet(0xa, 0x801, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000800)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) cachestat(r5, &(0x7f0000000040), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f4, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x1fe, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e23, 0x4e22, 0x4e21, 0xd04, 0x7f, 0x0, 0x6, 0x8}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x50}, 0x0, 0xfc, 0x12c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'virt_wifi0\x00', {0x0, 0x0, 0x40004, 0x0, 0xffffffff, 0x7, 0x3ff, 0x98}, {0xfffffffffffffffe}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x350) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 7.886330572s ago: executing program 2 (id=1204): r0 = socket$igmp6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) getgroups(0x2, &(0x7f0000002f80)=[0xee01, 0xee00]) r10 = getuid() read$FUSE(r8, &(0x7f0000002fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000005000), 0x2000, 0x0) sendmmsg$unix(r8, &(0x7f0000005100)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xfffffffffffffd2e, &(0x7f0000000280)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000200)="e831b6cb0ea9fa639639686aae0a0c5236424b8558f5571b8eb5a0b6aeceb68fd195edee45f7ed1426b3b2cca4051c468c767b86ff41a5", 0x37}, {&(0x7f0000000240)="d1790935041370b94907dffe3e8b396860f7012bc54e005cb6c3611f0bbc7f0c096b3126b7c15d0768dbf4e9c1e4a200b96e92ee4ceb98d9f1f90e9d7158c5", 0x3f}, {&(0x7f0000001400)="e3af0195db720e8c1e076fba0f5e91b7c62329a067b9ee5fdbb00a60c249fae3e4c485762f5c0641c012b48ac23ac16bcc903e2be9e5f68b329547511a81c849160019825d6d6691bc74edfaa8f21c70e14571ffad7dd1f58261a62fb64c71f195b480bd4d69bcac976336747a8a519b42c71c4a6419ed9173c6aaed85de0f1220eb2ad20d6027e459882f7ee3f07d16ef3aca84b9984cf8cb536e591809a47dd0f6fb052d14700778ef63e955910096279361393d892c5a2de043d52c6b3988783b3da95466f3cfbd3d11335890994cc167318f62186dd16559183034ac9b561dbed16023c5f2f0fb", 0xe9}], 0x4, &(0x7f00000002c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r6, r1, r12, 0xffffffffffffffff, r12, r4, r5]}}], 0x30, 0x480d1}}, {{&(0x7f0000001500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001580)="dd3efa0b1452967565079a0e9ae8b94751a74486186db019e852db1defd844a3f625f7a04d33f6b373f7e041b319ab7d4134e122f1cafd78870f5fc1b99342f133f0e6d48dd87601e8f5f4d6c796150760878ce6", 0x54}, {&(0x7f0000001600)="49134fe22ebe1d88b33d93df1124ae90898538d0128b58771b6568f0fff64cbf85f680fbe0fd3f3a55380f6bc5b5f5c44c7b9b51b9826b215508ceb9faac36866b7a58c723aa1a78642ef5691fa94df2d3652f6191a93636c6282d4bf7abf312c83366419fccc1053d3a46f31549de98b60327f690416847aa24a39daff245a5261daca6ddbd696c39a8239be23b273d2935538102ae9e2d70c8ccf2bbf039579fd370eddb9c0d7b139eb2bc670eca4184ab5f0ab50c7669915474746c3573a2e4f2eaf6e91a1bebb1ce2054c6ae6f35e4b431344e8c08d0c7e813294006a9178b", 0xe1}, {&(0x7f0000001700)="0184cd60fae0342d404b6194fcb6a2b54a37b91238cbc8208ab1be41758857558bf2b507adbdb8b2621ac4521c2e0d85059187db9b07a25e82bea973026a4fedfcf34a01e1a2b50ea6dbe1e4e52fdf13629f5a52cbbc5a3d6232e099862e5c73cee32a783d07309614022d6318a0cc7607730ee658dd90be91c4f225364e3d84d944", 0x82}, {&(0x7f00000017c0)="b42ece83", 0x4}], 0x4, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, r4, 0xffffffffffffffff, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x68, 0x80000}}, {{&(0x7f00000019c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001a40)="5b49bbfba8369736abbe51c8ae696a58bc5865c25bd5c97a81e1fd654d6afa7e0438f9e1db5cc367ee79b0d18225936a3c9647400cc97ff3c6bb782074cae0dc41647ac1c46b0d0cf2370cff559533f981a00a81fa483dc2365d8be91784f7359b12728199b204bf800478b01d38359d59d7c2552e2ce0d7540932c2d7385c558c7ab00fde4b236d137efc59f2b77eb0e047820b183ff0a55ee5e835f003c8bd5df335ceb02e0ef0ef66aa67157b8ce261d9d161b823ef61319f90c7737b9f689b961949e4972f4c83301b06dedd68508231a05edf", 0xd5}, {&(0x7f0000001b40)="6feaec2c982a4792526a6c1af2cccd475e0bdfcc17caa36f9e126b461836f9b596b1bd97ae9d7474f13fbba143ebca0a75904f466e384fc8420fe315072e0f32383c88d0952db454d07c5ec544", 0x4d}, {&(0x7f0000001bc0)="c737513c80441fc57a1a427e977825a4c71a9d83075f8663f73e74159c6f289651cf1f12a3533bf5cbf16f01fbe0eff907be42e7da2ef2bdad2a97d0904d1fb0570c9b8d96cb2250c401817168f1e4da899f9f81b66f8af7e9f6c2e3e4111d8edeb4e96c7c9a2aacd8e398c407b84aad0f2fd91702820e0f7f16c1b5c751aa8c82b794bc4101f4f502fdcfc639a459999c57ef06bb0efccd5953a2", 0x9b}, {&(0x7f0000001c80)="26140f705c293231bed193dd47e0daef8090b2b256b8aa8caf6d98f2670a47dc988e85854c78cabd51d37d856a08900e3e3d6f648e7ca67a8a7a559c8f5ae6578cdb0c288e3555704249132802f58e3e51fc752864a6d4c17655711fafe4477812dec2c84c59421d69f4f0e67a427aa3f333a04b95cff34b2f0540bde792f3e4d0bb2cdd6a0c3a5d713f398d388017e08d1bba7324113b9c29963e86ed173892179bb75987f1514486ae1513ecf3a659c8a1915571e8f8", 0xb7}, {&(0x7f0000001d40)="88bde35cce2b59d2533a7022a749dac78e3036cfad6305e34956d45e365d776c1152a45d2f15", 0x26}, {&(0x7f00000051c0)="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", 0x1000}], 0x6, &(0x7f0000005040)=[@rights={{0x38, 0x1, 0x1, [r8, r7, r5, 0xffffffffffffffff, r7, r0, r6, r4, r1, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [r5, r8, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0xc0, 0x10}}], 0x3, 0x40094) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) 7.018662448s ago: executing program 6 (id=1207): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000380)=0xfffffffffffff800, 0x12) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40880) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4014020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x50, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x3, 0x8, 0x3, 0x40, 0x1, 0x1, '\x00', r4, r1, 0x0, 0x5, 0x5, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)="69b6e3bd5abafbaf837c078ef24c568f6ae36843c1270032847afbdac6242ea0ffd3d560b01a780aec1b7fca972eef5f05b3bc6bef58a2b90b76aabb90da895393654ef8627978bf59015ac876cd72be9177dab6d1f5ec6b52140f56905a4164619c01914903194939179600a262195b", 0xb, r5, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40010000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 6.64343258s ago: executing program 1 (id=1209): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4bacd3741100010000000000000100000000000a"], 0x28}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 6.461902983s ago: executing program 5 (id=1210): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f00000001c0)="0b08b212f35e64e1f7e54bb820fc75ee92fc684c205a68dd5fdb2c91352542865fb177f494c0596acf5e2e0f69bfea59499fb056530999aa661f397e51b6299f05aae304b5aabda2cbb7a76bdfb7e5afa1b5f66f5b368c6637a0a8b204e4984d7e2dc94c8418e5fd02c8db5586f9fc3d8425ee100f4e924bdc785bebe41ae7d779014ef6e48d0068ca40434b5e3927651b4223fe6dfe8a9785f22189ba785adb902f65371ecbdacb197b57f3bd6d8176f0ffd349", 0xb4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000180)=0x4, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000640)=0x13) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000000140)=0x3, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010700000000fcdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4c000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) ioctl$TCSETA(r3, 0x5406, 0x0) 6.170046536s ago: executing program 5 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0xfffffffffffffc01, 0x0) tee(r3, r6, 0x60000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000005c0)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) 5.79506686s ago: executing program 6 (id=1215): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) (fail_nth: 1) 4.869880326s ago: executing program 4 (id=1216): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES16=r3, @ANYRES16=0x0], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x44004) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) sendfile(r2, r2, 0x0, 0x9) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) 4.799210766s ago: executing program 6 (id=1217): syz_usb_connect$cdc_ecm(0x4, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x7, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, 'W'}, {0x5, 0x24, 0x0, 0xbbd7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x7, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7ff, 0x2, 0x3}, @country_functional={0xe, 0x24, 0x7, 0x5, 0x7, [0x6, 0x6f, 0xb1c, 0xadf]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1082, 0x26, 0xd322}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x4, 0x7a}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xa, 0xf9, 0xea}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5, 0x6, 0x2, 0x20, 0x9}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x1c, &(0x7f0000000300)=@string={0x1c, 0x3, "22ae244cef94af26e978087a14b7f615a0e05dbb345a65bd3c3f"}}, {0xa8, &(0x7f0000000540)=ANY=[@ANYBLOB="a803e97b3af270d461d333ae0e5e5221b30e39c9cbb08b014b813821ba904fad5f88ffff0000000000005eb405e46b050f2aa2dfe67632df351308fb70549ca654f8ee3c3ea8e8e31a9c2001bd83e44654d2846bdf9c3e197fc4c97b496f2e9ac3fc1f6b2bea7d0e42416606c0eee6b1452e4b85698863"]}, {0x7f, &(0x7f0000000480)=ANY=[@ANYBLOB="7f0371ce407a25b06bd8fa402b68f1b99799b22d5d9eff68ef4bd8e107c2c13c8a24cab70df7a23d1817514495754899cba15c069922eae1def069063b98cc8d3562704f5f1957b9c1d70c7ddd9b679818819a48ee488cc399e72c4938be585eb7e09b77c953b53e43fd6da62d6aa90f386462270b"]}]}) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x6, 0xcbff, 0x0, {0x5, 0x6, 0x200000003, 0x6c, 0x7, 0x40000000000d, 0x3, 0xfffff2df, 0x101, 0x4000, 0xfffffffe, 0xee00, 0xffffffffffffffff, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0xbf}}, 0x30) syz_usb_connect$cdc_ecm(0x0, 0x6c, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x9, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "28472ce7"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x400, 0x3, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x9, 0xca96}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x8}, @country_functional={0xe, 0x24, 0x7, 0x12, 0x4, [0x5, 0x8000, 0xe, 0xaf28]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xa1, 0xf4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x0, 0x81, 0x0, 0x5, 0xff, 0x6}, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xbf, &(0x7f0000000ec0)=@string={0xbf, 0x3, "286a3b8730cb6460e8cb79e37f66750b1d00f7799f42fb2d5456ebc53d3a7d5af3217d6a3db2a8295fe51a0faa1b61fa23c2f539b30eecd331c2eba80e06879ce4b2cba1636d78264e582b849c681bc1098400a2726d66d810890e1a1731ddf1e11e882470a844e119607bb82183581fedb874fc98c1cde4482ba7a0e90e6f7568d547bc9b922a0f8e848d172e10058b5fb9cc3872d5cde0890d6a68ebf62b5800a4dc87edf8ffc36414f1c0b1b6dcc63d3cdf2350f01464dbbaae8171"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x861}}, {0x2, &(0x7f0000001000)=@string={0x2}}, {0xd9, &(0x7f0000000700)=@string={0xd9, 0x3, "56afd6fc7b607d304d02cde7522f5cbd4c2a87ea51b1e792f1038786cd4b8e6b3a92bf061fd017d3298f5b261b289f63b2ff98c824d6da74a98bf58ddb3dc519e6dd0cf2ebb2fefe571181dab2c86ab9e8f9b3a1b6e6b026b7131b3d1022549fab83a54b35eea9f538dc06b7880e07bf1b2dd1b578d1d01012c5983870b5b23e0d5aa575c977be61c095b2a1a81f6b71e692fb67f43eab80466022927c4832bdc68f25f726fa201db9cd01af0b48ca52ba064d1c05dc85055dca1f3e5f0a928f8e0723909d29f9b3611ba6bf8e5929605a80062dcf1079"}}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 4.605046069s ago: executing program 5 (id=1218): socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket(0x16, 0x80000, 0x20000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x321002, 0x0) 4.577515992s ago: executing program 4 (id=1219): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0xce3468f833de3c7d, 0xffffffffffffffff, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x4}, [{0x2, 0x5}], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x4}}, 0x2c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x8000, &(0x7f00000024c0)=ANY=[]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x200002, 0x200003, 0x801, 0x4, 0x7}) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x26, r7, 0xb31, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) socket$inet(0x2, 0x2, 0x1) 4.348487822s ago: executing program 2 (id=1220): gettid() r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x1, 0x0, 0x7, [], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9, 0x0, 0xfffffeff, 0xfffffffe, 0x1, [], [0x800, 0x0, 0x20], [0x1, 0x0, 0x0, 0x77], [0x10000, 0xa54, 0xd1, 0x3]}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000024140)=[0x0, 0x0, 0x0], &(0x7f00000009c0), 0x42, 0x42, 0x1, 0x0, r1}) 3.314125986s ago: executing program 4 (id=1221): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x81000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x1000, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) bind$qrtr(r5, &(0x7f0000000240)={0x2a, 0x4, 0x4000}, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) 3.176749524s ago: executing program 1 (id=1222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x1f, &(0x7f00000044c0)={&(0x7f0000001540)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 2.980974203s ago: executing program 5 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) (fail_nth: 4) 2.19093379s ago: executing program 4 (id=1224): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000, 0x4000], [0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3f}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002000000000002100004e20000c90784100000100"/46], 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r7, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x801180, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r11 = syz_open_dev$MSR(&(0x7f0000000080), 0x7, 0x0) read$msr(r11, &(0x7f0000000180)=""/82, 0x52) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r12, 0x0, &(0x7f0000000900)) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000009b0b00"/28], 0x50) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000176db0efdea053122d912e10cc01ae0b97aef531d5c2d78bce9df50e6caba82a06c41444052e64c5e579e2c5df641bfd48141ac7fdeba26e", @ANYRES16=0x0, @ANYBLOB="1709a70000000000000101000000"], 0x14}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r13, &(0x7f0000000200)}, 0x20) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01010300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) 2.111881766s ago: executing program 2 (id=1225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r3, &(0x7f00000008c0), 0x0, 0x408c0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0080003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.867278699s ago: executing program 1 (id=1226): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000020}, 0x20008001) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000240)={0xa, @vbi={0xa, 0x7fffffff, 0x5, 0x41495043, [0x3], [0x3, 0xd5a], 0x108}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x40800) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x4}], {}, [], {}, {0x20, 0x7}}, 0x2c, 0x0) 1.451289871s ago: executing program 5 (id=1227): syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') syz_open_dev$audion(&(0x7f0000000080), 0x10001, 0x121200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(0xffffffffffffffff, 0x101) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r2, r2}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 1.354099936s ago: executing program 6 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0xfffffffffffffc01, 0x0) tee(r3, r6, 0x60000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000005c0)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) 1.239367005s ago: executing program 4 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 549.879155ms ago: executing program 5 (id=1230): r0 = socket$igmp6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) getgroups(0x2, &(0x7f0000002f80)=[0xee01, 0xee00]) r10 = getuid() read$FUSE(r8, &(0x7f0000002fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000005000), 0x2000, 0x0) sendmmsg$unix(r8, &(0x7f0000005100)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xfffffffffffffd2e, &(0x7f0000000280)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000200)="e831b6cb0ea9fa639639686aae0a0c5236424b8558f5571b8eb5a0b6aeceb68fd195edee45f7ed1426b3b2cca4051c468c767b86ff41a5", 0x37}, {&(0x7f0000000240)="d1790935041370b94907dffe3e8b396860f7012bc54e005cb6c3611f0bbc7f0c096b3126b7c15d0768dbf4e9c1e4a200b96e92ee4ceb98d9f1f90e9d7158c5", 0x3f}, {&(0x7f0000001400)="e3af0195db720e8c1e076fba0f5e91b7c62329a067b9ee5fdbb00a60c249fae3e4c485762f5c0641c012b48ac23ac16bcc903e2be9e5f68b329547511a81c849160019825d6d6691bc74edfaa8f21c70e14571ffad7dd1f58261a62fb64c71f195b480bd4d69bcac976336747a8a519b42c71c4a6419ed9173c6aaed85de0f1220eb2ad20d6027e459882f7ee3f07d16ef3aca84b9984cf8cb536e591809a47dd0f6fb052d14700778ef63e955910096279361393d892c5a2de043d52c6b3988783b3da95466f3cfbd3d11335890994cc167318f62186dd16559183034ac9b561dbed16023c5f2f0fb", 0xe9}], 0x4, &(0x7f00000002c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r6, r1, r12, 0xffffffffffffffff, r12, r4, r5]}}], 0x30, 0x480d1}}, {{&(0x7f0000001500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001580)="dd3efa0b1452967565079a0e9ae8b94751a74486186db019e852db1defd844a3f625f7a04d33f6b373f7e041b319ab7d4134e122f1cafd78870f5fc1b99342f133f0e6d48dd87601e8f5f4d6c796150760878ce6", 0x54}, {&(0x7f0000001600)="49134fe22ebe1d88b33d93df1124ae90898538d0128b58771b6568f0fff64cbf85f680fbe0fd3f3a55380f6bc5b5f5c44c7b9b51b9826b215508ceb9faac36866b7a58c723aa1a78642ef5691fa94df2d3652f6191a93636c6282d4bf7abf312c83366419fccc1053d3a46f31549de98b60327f690416847aa24a39daff245a5261daca6ddbd696c39a8239be23b273d2935538102ae9e2d70c8ccf2bbf039579fd370eddb9c0d7b139eb2bc670eca4184ab5f0ab50c7669915474746c3573a2e4f2eaf6e91a1bebb1ce2054c6ae6f35e4b431344e8c08d0c7e813294006a9178b", 0xe1}, {&(0x7f0000001700)="0184cd60fae0342d404b6194fcb6a2b54a37b91238cbc8208ab1be41758857558bf2b507adbdb8b2621ac4521c2e0d85059187db9b07a25e82bea973026a4fedfcf34a01e1a2b50ea6dbe1e4e52fdf13629f5a52cbbc5a3d6232e099862e5c73cee32a783d07309614022d6318a0cc7607730ee658dd90be91c4f225364e3d84d944", 0x82}, {&(0x7f00000017c0)="b42ece83", 0x4}], 0x4, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, r4, 0xffffffffffffffff, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x68, 0x80000}}, {{&(0x7f00000019c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001a40)="5b49bbfba8369736abbe51c8ae696a58bc5865c25bd5c97a81e1fd654d6afa7e0438f9e1db5cc367ee79b0d18225936a3c9647400cc97ff3c6bb782074cae0dc41647ac1c46b0d0cf2370cff559533f981a00a81fa483dc2365d8be91784f7359b12728199b204bf800478b01d38359d59d7c2552e2ce0d7540932c2d7385c558c7ab00fde4b236d137efc59f2b77eb0e047820b183ff0a55ee5e835f003c8bd5df335ceb02e0ef0ef66aa67157b8ce261d9d161b823ef61319f90c7737b9f689b961949e4972f4c83301b06dedd68508231a05edf", 0xd5}, {&(0x7f0000001b40)="6feaec2c982a4792526a6c1af2cccd475e0bdfcc17caa36f9e126b461836f9b596b1bd97ae9d7474f13fbba143ebca0a75904f466e384fc8420fe315072e0f32383c88d0952db454d07c5ec544", 0x4d}, {&(0x7f0000001bc0)="c737513c80441fc57a1a427e977825a4c71a9d83075f8663f73e74159c6f289651cf1f12a3533bf5cbf16f01fbe0eff907be42e7da2ef2bdad2a97d0904d1fb0570c9b8d96cb2250c401817168f1e4da899f9f81b66f8af7e9f6c2e3e4111d8edeb4e96c7c9a2aacd8e398c407b84aad0f2fd91702820e0f7f16c1b5c751aa8c82b794bc4101f4f502fdcfc639a459999c57ef06bb0efccd5953a2", 0x9b}, {&(0x7f0000001c80)="26140f705c293231bed193dd47e0daef8090b2b256b8aa8caf6d98f2670a47dc988e85854c78cabd51d37d856a08900e3e3d6f648e7ca67a8a7a559c8f5ae6578cdb0c288e3555704249132802f58e3e51fc752864a6d4c17655711fafe4477812dec2c84c59421d69f4f0e67a427aa3f333a04b95cff34b2f0540bde792f3e4d0bb2cdd6a0c3a5d713f398d388017e08d1bba7324113b9c29963e86ed173892179bb75987f1514486ae1513ecf3a659c8a1915571e8f8", 0xb7}, {&(0x7f0000001d40)="88bde35cce2b59d2533a7022a749dac78e3036cfad6305e34956d45e365d776c1152a45d2f15", 0x26}, {&(0x7f00000051c0)="1c2e2eac357c90b08997bcfe0414e1e90ea0ac4139368f08757e68793e64d99d15080d3ef0ac55a41ca9d012778e7b1d423233628e864a4b44ec262bfe5c940eae0c4970293c90b41afd804a3782f6746dbb3c7b937aaec7b3541a369eff2da419cba3f7325dec5326fe477ed5b8be7a9def02b1f5d9dde02c71e78dbd8ad52c912f43843c11f987117d8ea4e1c682c8aef5e4848aafbb5f5d006d0f47eb513e8018ac9996bacd18ab04ffc9ec99676dea7419a9afd1637ef42e7c6ce2eb03ac09b993498b646ba5229bf54548c450d740291c1e0598572b74d8314d7bf490d8e391f12c1757c441cb3b7ad5f3d020ecf0be78812dadd2050245d33fd5fa57b3696978b17252435e8054a03e1e0eccfb2803085d9ef32aba485a270a1db56ced849c37776389fa9089e6e75a5d19ee793d97bf7cc8e8964c67008de22f056d2f07aeafcd8d3a5f2ee408f4de76ab6cc3e8c50ecb7e38bba676d0c5d1f5c305ae082afd3e6f897cac96798ebf8f379b85942087b2f300b63ff60d95ffa5eac82ed6c622336fc66dba270c4cd60e4e3d878249dad033aaaaebee1cc56b3d6f4b081426c0a2d55d2d41ca65907b4d855ab6cdfcbe2623100f6aa806ea5756c7a68ffc1fca8aecf9e48b80eabdbbbdde612c11b08e54c0e1d58b5506e26e5826871824996c3a88fa893da5b653d440ae95db6db2853c5c1d9781295d2e5fa5affdfe57fdf8d5f26ce75f3e835db4cdf1b4cad77aa514db0891c94b988d3256bac626821a544ce44d093ea73b0081d2bf47c15e6c94c9c18a12b773e6b413b4306d28ea5f3e09569076c68337adf0e8134fc40365e50c45f94bb2d3423809a3b39188f2167244480fe8453d32cecae5d6ac134fb46b3674ff91f12afff3cd2469d5b18da15e775f49a5d3e8c7200d8e20080a600929b0baba11b2a74d374a33a25deb94ccba030dc35ec4e86f67fced34e4b8c451a2531c8324e095e59c2e7a7a2a748171f3f0830f643668f084c00f1442437ffed1c063cad910fc68777b46920bf25b5434cb66b968e708e4abc434dbee350e091df7ea435ae63e12c59abf92ed16f41a4c1bf72a36438628271bf80c1ce77370a7a8a656eadc8ebbef409fd09dbe846ac4307847aeb36541ded5f7a691064f9f395ae53b787d16d8897b7663972b525099ac2085ccddf3eebba8e3d41d5ee762e16bb62896780c567683eb3fc6b92d7c17585e8857cc07738056186fafba8cfa74113772c9309f653cec7f51c331af862bcfc06f901bd8125950e612e212484d1e2760f5950cd375a95013fb4f10b90fd7b7eb19e8f6bb9b2badf69f6646b1a397393bc86ad595ae405cc0f2e3ece3c18f12dc9930bb5a23a52b651600be940824e7f13a4f5b44feef29abd742180aa1314086d184011c493e86ca831a8e3c3525687510a45704cd4fe9347fe4035cceabf3541784244cce8e13201a48bb12b2406f2c0694de49707f7de29f9b18063dfb94a18be16bc64c76ac1f01fcae6f12bf84114ed203ba48af37fc7fbeb6a0bcdac1546f791e336aacca2a0c3e05ded78df5cab807f53b224d6157e0d2745be037d4d79e88d5fc6a0a44749f0a9e34d390f260f052a26495a6d610df9631d4e147585f40b1706c9fe70fabc713219e444fed59d22704018d250e80533bcc72865675b7d6bb18448166926363bf53769f1c1cb037ccbc38f3a5cf618728585d23e7e048240ea807637826326d0632a14ef704126e8a5abb4df1c9953ac78e60f2808330960d3822650b7e4ab4e2a3223451ecfb98832c4f54937129286eae5af638322cd4d58dc66bca3d1d1838a855ff22c87779f81a0ae8fd088d4b8eca2c06a3c37f913dfdcece318f9225e21b17d7fe5f5e7b9cddd33ec7bc3f2af35803a4dd263e7935dae7650de312ebb4cdbfbeb3c404af55b731f9056c5c1822331f2af3841f00fb8d1e623d466e74c745e50388de2ac27a1790ebaaaa14125e8e09f80309390fa4b8e4436a9e7da2e6e5d10d3b2d94d7bdc849f51b5d7243f2657137f0707326b01af3bd3509e29eb1232e54f10c9d4d4fc86ebb0451d12a1cedcf8df77ba50803d32fb949bd3e1041b453d1341f531155ad0d4450f878f69eb5b8cd1db874a289626d149ed7dc774d0fdb7e1ae078c6a3e1adccb51e799ac49bb3faeb3c05e48f3ec77a028911906e2051f23074fb96a96b3b07c78a3000051c69e512fe61a735533eaf14631f8e0a22d351ed94fecfec82fcbef8dd66d53eedbc48188430e27cb92612c4914059b8308d280c5336e2d13aa8374e4163f6ee119c6bb108dc89d3a286bf0c2586a5d435e55f9a208bb4df45fe9de020e50a8dce83e0972a6a0b2e40630798caab11c1cda0c87d15570b135e00937a671d3b5986a2abce909c0df6f132f6c04569b148d03dfe2dba287a1ceb3c401f8de9b5130d036628c9aa26224b3379ff79f1dbc850c0607f586bf7ab6868d6905a9dd44216959a2993600482c14df454fbbf8b183cf908ba778a9ca78bef92231f2b1844c09531f3d1b734dee762145e198239ed3a3acf179c74d2a0c7316d49631139e8cb4339d27899093fb1ceb42dfaf73632a66a61ea246dec02f0a12f79a99ee61c6a1554d41e2b0b070ee7073c4292487860210e34131db40fcb0dba84eeb9ae081227c65b39270c7097a572746c599c9f4311be332881d4a4de8a83c89a701470013b88231ab1c8b2ad14302c7245c825a4a6823ff5a506e9017e2bc4d7f49f69c5717eeebb8f8de6fbc40d768d52d2091844556fd33ff2c527eb37621d5e8ce467fa30834cba24083a4e7a868d01b1fbf8118c45538b243eb337de23148c5069d149c469b9670faf8fabd3740dfd83ba1323d1c8bd6b1eccccb76852c73eb2f08974ea792d9e3ab79a49259b05bddc3b7314873d911f06fc4da3666630439e27bdc8314bbca477a5d0817b2b887453ee3b9c7859258aeeb64cf61eaca5f096ebeb7388195ec7f64f6f053f075621ebf6f7e92f354ce4ceecb5db9c26b6dc56e42c5b0d4b3af7acf3d7461043957e28ce5a04573a56d0d177ab9e6dfda46d5eb8082823bd95d0b628e28d9ee6e7287b374352281c21e99d4aae6c0c0e934783b5e1edbe0770d822bf101343bd0431accff7ee7ed1259e60c78e32134fda8340e3a583f65d4b5c13944ce7f85de8c232c1c9c795510e019a6907d82e9a6c978e7f7fd9a8b6af5eb965a1bbcfa8ce254d1e0a9ac7d9c0c57a6db022253a914956095cbff26164cb6210fec278aebc7986832e88a1a4a1a8ba26f4db68b285bbd0ea3fda3c50e8b8425130c6a2e0570b0cefe81d4889b6b44fdf0ea612d6c85db66983d6c60cb92a0cb003414a1a6c3008d3e5f42e00a4fa6e823f01285e326f65ab8c28dd01ec80c3b64fc939b5a8efca911efc72a9bf0d97742544907455cf66f31294d7cfd35f0f824660cc67f5daa005236913472a81d2a7c912074784ce44e54d982647482df0ac32b5a84fa0dcc0e4d7f022d22424e7eecdca973277b33abff7bd49b7f9320ef86d01a67fa8762384f563b71edf2001f11ecfb093cdfd3333fc52ebaf02d6b3477d3805a1df34bc332501199e5cb548bbe3cd7fa79c6e8f128f898983694dab7532be99b28c64526f4eb22fc5a157918afc3524950d485dee7e5f0bee5fc6b1f5746e61f5b437b6c9fbcb1f90dc0df6f6880eeab66ca875de39ac8601f1c563de8be21b1fd44b18c98d559f8478d8f6d8686c9412581f219247cf6e5b9edeb209cb649d2d1c0fabd9c013656f21f27d1159b62f69f94717875a50472f4e37b368f5a16f19e8a8bda2908bedfd59c2165c79650c72588bc68b78ab83710e20d041ac09195d6870c53bcf7dcd722b161aa687cedc5f2cf7c0ed3fe43b5dc9d118be35dd0e2db09f8295c44ef89f88cbaaba97dafe4bec072f2bad18204cee9649e37fbdb697bb49357786256f0d98a02161b48a4699e963ea9e21e40889767f7558cf278a84d9493e86000e5baf21c9153aa8450d7336cd48f8f344107b22b5ecdd71f4920d583f0a27b613b01aeff92fb8cea208ce8c43b636a2a482cfee967298b158b7b9dbbac68079018647c76b331301b01cad692b5575897fb70450dae8f59be01a508bdfa2501be8730f045904a6e4331623e9edf9eab3fd644e276444add8fc9687750537ffa5a2d9fee39d16c10f077837779e1241795798a7276672199dc37f79a2615eab80a6ab276c7da30f43d4684ccdce1c5164ac7ebaf3efcd696fc184854ff689deeab28dfa6a61453d03c55263fc179294299b1eccff974df01a6342f3258c0c5295c05f4bcdc03d12f687043b66002e820fac6db73b894c53175ddae675aa47c18e43b62dae5e6e422267590137130935444ac654e22fc1823b4ec5b6ea59513d5bab62f09b23a70bad2187600a8b73077aa2c2b2f0a241adf1d344e8034976dc38bc42de843652566531ff53276bcd56090284ef9572e165d29a63a911bc9ba327b844585be165e42abf752799e9ce20af27d7d3d5b54e78144628cb5aa0b6f5b5d28d415b1e5acdbcc2b2032febe470ab2ba4cac3467ca2a32a274d838f689f9619db107f1e3fda8631d6d898c4f4a67aee024a051f866e74e102845b78a7dc65ca1ba0ac7100271f9f2b7ecd667ee32e31e1db311dca3bde72df3a0cbaba23201698788f15f3c75627d59b7feb1885fd18326e6c9e02ea1c0fe56dab2b3cfdffdc1f98ce552fd422f4bc06dd359787a5caa080fec61da32031950aa0baa8cd843de94e208cea595d3a9ab1bd1985ff557cf75187e50727c864b943a93f02f92ce9af5b531204f638376c2d4bede897c14145b95efa8f227eefb5d89d66f2ce6464b2a5b8aaac89abdf0e9a7659b48fe73833660e48bfd6d9bdcdce67a31085336041c6cd056e1c1b1d14b50e11d6599937a17bd8ceb70c25737b8ebef66b5d7131736b36f75a7d53c0d79178d804f11e4d1d2beb6813dabba18261b83a15108eeefe07a30ac56ba18b04eb7155625ad9ca184304f11fd823b626a08404652485082fc47948dfd94356aa56d91efc347ab8bec0df012f908ad5a078fddd96992ca9409fec0fae45be845bb23bc87da0aa7e9613889bbf9f96a7790bfd6714823933c50be24403206972949121334ed268a20ae9e56e7d04bc9f2dbf3eca6c1bbfb5c8c512c4f7fdaecd9f2043d8c211a699a0eae49f661b53121ee1d793af77db776ef417cc3cb289d7f1edeca69b37182bb994d57a2de8d87095f8f4c896103a4a28cf8ab5536df8601ed859dbaa8b27f61332690eb35ff0600517ff84ee0e15db1626b22b241d3d24c7a3f98b4c7560f52108de185c2d17b769e94d147b2caa63a6780d504d3d9a31c81b4a865ac43866c1d4bdf283d9b1ca565f8b274a182d660c74615fbedb9ad6ba568c6874104f2ad3f30bf5eb82036ba32ee541be934d55c83dde1edcb5c260ae383df18311872ff346be737d2227c008b72ae2a4e26ac51e438488c2df3ec12546717c4a43b31a0ff628ac80e29348aca14cdb566fe9011b99fed935d32b923aadab57506934f123346415af130d933a4b4c80d6c1eec5326f40147489101019fb176f1a54417cf86dba356f5ce31ee191a7957320740279d921bfd48a227222531279c7eb8d329cafb491dc1bd1b2a4c8185cd5d774d75166456d04ec975c8d5005e71caf505b957421414da30cf3fd6509ec59b1da129bd9b28ba1080c2651e04202a36364ddcab4c1cd2726fb68ff30bf5b0c8e24792c8eda2c0f9ff6c58064716281e44f", 0x1000}], 0x6, &(0x7f0000005040)=[@rights={{0x38, 0x1, 0x1, [r8, r7, r5, 0xffffffffffffffff, r7, r0, r6, r4, r1, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [r5, r8, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0xc0, 0x10}}], 0x3, 0x40094) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) 414.396022ms ago: executing program 1 (id=1231): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0xe60d}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x800, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xc41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff951d, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x76e, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x80000001, 0x40, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x45d0852c, 0xffffffff, 0x4, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400, 0xd}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x185100) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x1, 0x5989}) linkat(r8, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x640000, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000340)=0xff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) 292.809283ms ago: executing program 2 (id=1232): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2000}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 174.204044ms ago: executing program 1 (id=1233): gettid() r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8e54460000", 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffe2f, 0x0, 0x0, 0xe, 0x0, 0x5a40}, 0x50) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x1, 0x0, 0x7, [], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0xfffffeff, 0xfffffffe, 0x1, [0x0], [0x800, 0x0, 0x20], [0x1, 0x0, 0x0, 0x77], [0x10000, 0xa54, 0xd1, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)={r9}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000024140)=[0x0, 0x0, 0x0], &(0x7f00000009c0), 0x42, 0x42, 0x1, 0x0, r1}) 30.100335ms ago: executing program 4 (id=1234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r8 = syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0x8040) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, {0x4, 0xfffffff7, 0x2, 0x9}}) getpid() ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) close_range(r3, r5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) sched_getattr(0x0, &(0x7f0000000140)={0x38}, 0x38, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x902, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r12 = dup3(r11, r10, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r12) pipe2$watch_queue(&(0x7f0000002240), 0x80) 0s ago: executing program 6 (id=1235): gettid() r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x1, 0x0, 0x7, [], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9, 0x0, 0xfffffeff, 0xfffffffe, 0x1, [], [0x800, 0x0, 0x20], [0x1, 0x0, 0x0, 0x77], [0x10000, 0xa54, 0xd1, 0x3]}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000024140)=[0x0, 0x0, 0x0], &(0x7f00000009c0), 0x42, 0x42, 0x1, 0x0, r1}) kernel console output (not intermixed with test programs): vc: denied { append } for pid=9407 comm="syz.3.726" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 399.197687][ T30] audit: type=1400 audit(1754465369.818:852): avc: denied { map } for pid=9407 comm="syz.3.726" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 399.234401][ T30] audit: type=1400 audit(1754465369.818:853): avc: denied { execute } for pid=9407 comm="syz.3.726" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 399.265118][ T30] audit: type=1400 audit(1754465369.858:854): avc: denied { mounton } for pid=9404 comm="syz.4.725" path="/proc/576/task/577/net/netfilter" dev="proc" ino=4026532934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 399.293904][ T30] audit: type=1400 audit(1754465369.858:855): avc: denied { mount } for pid=9404 comm="syz.4.725" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 399.547112][ T30] audit: type=1400 audit(1754465370.218:856): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 399.693452][ T5985] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 399.843184][ T30] audit: type=1400 audit(1754465370.568:857): avc: denied { connect } for pid=9414 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 400.167351][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.185668][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 400.197768][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 400.212508][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.234119][ T5985] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.271058][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.291247][ T51] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 400.641229][ T5985] usb 4-1: config 0 descriptor?? [ 402.025411][ T5985] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 402.048992][ T9441] FAULT_INJECTION: forcing a failure. [ 402.048992][ T9441] name failslab, interval 1, probability 0, space 0, times 0 [ 402.061853][ T9441] CPU: 1 UID: 0 PID: 9441 Comm: syz.4.732 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 402.061879][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.061891][ T9441] Call Trace: [ 402.061897][ T9441] [ 402.061905][ T9441] dump_stack_lvl+0x16c/0x1f0 [ 402.061937][ T9441] should_fail_ex+0x512/0x640 [ 402.061956][ T9441] ? __kmalloc_noprof+0xbf/0x510 [ 402.061978][ T9441] ? kernfs_fop_write_iter+0x237/0x510 [ 402.061997][ T9441] should_failslab+0xc2/0x120 [ 402.062019][ T9441] __kmalloc_noprof+0xd2/0x510 [ 402.062040][ T9441] ? lock_acquire+0x62/0x350 [ 402.062074][ T9441] kernfs_fop_write_iter+0x237/0x510 [ 402.062098][ T9441] vfs_write+0x6c7/0x1150 [ 402.062120][ T9441] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.062142][ T9441] ? __pfx___mutex_lock+0x10/0x10 [ 402.062171][ T9441] ? __pfx_vfs_write+0x10/0x10 [ 402.062211][ T9441] ksys_write+0x12a/0x250 [ 402.062230][ T9441] ? __pfx_ksys_write+0x10/0x10 [ 402.062259][ T9441] do_syscall_64+0xcd/0x4c0 [ 402.062290][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.062310][ T9441] RIP: 0033:0x7fa1a718eb69 [ 402.062325][ T9441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.062344][ T9441] RSP: 002b:00007fa1a7f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.062363][ T9441] RAX: ffffffffffffffda RBX: 00007fa1a73b6160 RCX: 00007fa1a718eb69 [ 402.062376][ T9441] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000008 [ 402.062388][ T9441] RBP: 00007fa1a7f86090 R08: 0000000000000000 R09: 0000000000000000 [ 402.062400][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.062410][ T9441] R13: 0000000000000000 R14: 00007fa1a73b6160 R15: 00007fff94cca158 [ 402.062438][ T9441] [ 402.681027][ T30] audit: type=1400 audit(1754465373.408:858): avc: denied { listen } for pid=9442 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.095920][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 403.628551][ T979] usb 4-1: USB disconnect, device number 7 [ 403.681397][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 403.693659][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 403.712229][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 403.723342][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.744153][ T10] usb 2-1: Product: syz [ 403.748753][ T10] usb 2-1: Manufacturer: syz [ 403.755479][ T10] usb 2-1: SerialNumber: syz [ 404.762162][ T10] usb 2-1: config 0 descriptor?? [ 404.844954][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 404.856632][ T30] audit: type=1400 audit(1754465375.588:859): avc: denied { accept } for pid=9442 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.587470][ T30] audit: type=1804 audit(1754465377.308:860): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.741" name="/newroot/108/file0" dev="tmpfs" ino=583 res=1 errno=0 [ 406.876656][ T30] audit: type=1400 audit(1754465377.608:861): avc: denied { read } for pid=9478 comm="syz.5.742" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 406.932061][ T9479] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=793 sclass=netlink_xfrm_socket pid=9479 comm=syz.5.742 [ 406.964916][ T30] audit: type=1400 audit(1754465377.648:862): avc: denied { open } for pid=9478 comm="syz.5.742" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 407.721106][ T10] gspca_zc3xx: reg_w_i err -71 [ 408.401040][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 408.407446][ T10] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 408.429816][ T10] usb 2-1: USB disconnect, device number 19 [ 409.056715][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 409.081062][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 410.191262][ T30] audit: type=1400 audit(1754465380.918:863): avc: denied { append } for pid=9516 comm="syz.4.751" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 410.401851][ T30] audit: type=1400 audit(1754465380.918:864): avc: denied { name_connect } for pid=9516 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 410.507089][ T9526] ubi: mtd0 is already attached to ubi31 [ 411.308653][ T5969] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 411.491500][ T30] audit: type=1400 audit(1754465382.218:865): avc: denied { create } for pid=9531 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 411.811977][ T30] audit: type=1400 audit(1754465382.358:866): avc: denied { write } for pid=9531 comm="syz.2.755" path="socket:[24513]" dev="sockfs" ino=24513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 411.843731][ T5969] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.869645][ T5969] usb 2-1: config 0 has no interface number 0 [ 411.886053][ T5969] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.941558][ T5969] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.972798][ T5969] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 412.033892][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.063095][ T5969] usb 2-1: config 0 descriptor?? [ 413.111363][ T5969] hid_parser_main: 131 callbacks suppressed [ 413.111382][ T5969] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 413.131588][ T5969] prodikeys 0003:041E:2801.000B: item fetching failed at offset 6/7 [ 413.147018][ T5969] prodikeys 0003:041E:2801.000B: hid parse failed [ 413.153906][ T5969] prodikeys 0003:041E:2801.000B: probe with driver prodikeys failed with error -22 [ 413.644846][ T30] audit: type=1400 audit(1754465384.358:867): avc: denied { write } for pid=9525 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 413.650409][ T5969] usb 2-1: USB disconnect, device number 20 [ 414.154404][ T9565] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 414.163115][ T9565] bridge3: entered allmulticast mode [ 414.387543][ T9568] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input39 [ 415.510249][ T30] audit: type=1400 audit(1754465386.228:868): avc: denied { setopt } for pid=9583 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 415.731147][ T30] audit: type=1400 audit(1754465386.438:869): avc: denied { write } for pid=9583 comm="syz.2.768" path="socket:[25619]" dev="sockfs" ino=25619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 416.010382][ T30] audit: type=1400 audit(1754465386.618:870): avc: denied { bind } for pid=9583 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 416.074784][ T30] audit: type=1400 audit(1754465386.618:871): avc: denied { ioctl } for pid=9583 comm="syz.2.768" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.168081][ T9593] FAULT_INJECTION: forcing a failure. [ 416.168081][ T9593] name failslab, interval 1, probability 0, space 0, times 0 [ 416.235897][ T30] audit: type=1400 audit(1754465386.618:872): avc: denied { set_context_mgr } for pid=9583 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 416.258387][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.5.769 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 416.258413][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.258423][ T9593] Call Trace: [ 416.258430][ T9593] [ 416.258437][ T9593] dump_stack_lvl+0x16c/0x1f0 [ 416.258470][ T9593] should_fail_ex+0x512/0x640 [ 416.258489][ T9593] ? __kmalloc_noprof+0xbf/0x510 [ 416.258509][ T9593] ? video_usercopy+0x1a0/0x1720 [ 416.258533][ T9593] should_failslab+0xc2/0x120 [ 416.258554][ T9593] __kmalloc_noprof+0xd2/0x510 [ 416.258576][ T9593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.258601][ T9593] video_usercopy+0x1a0/0x1720 [ 416.258628][ T9593] ? __pfx___video_do_ioctl+0x10/0x10 [ 416.258654][ T9593] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 416.258681][ T9593] ? __pfx_video_usercopy+0x10/0x10 [ 416.258727][ T9593] v4l2_ioctl+0x1bd/0x250 [ 416.258752][ T9593] ? __pfx_v4l2_ioctl+0x10/0x10 [ 416.258778][ T9593] __x64_sys_ioctl+0x18b/0x210 [ 416.258808][ T9593] do_syscall_64+0xcd/0x4c0 [ 416.258838][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.258858][ T9593] RIP: 0033:0x7f56fc78eb69 [ 416.258873][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.258892][ T9593] RSP: 002b:00007f56fd57c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.258911][ T9593] RAX: ffffffffffffffda RBX: 00007f56fc9b5fa0 RCX: 00007f56fc78eb69 [ 416.258924][ T9593] RDX: 0000200000000100 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 416.258937][ T9593] RBP: 00007f56fd57c090 R08: 0000000000000000 R09: 0000000000000000 [ 416.258948][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.258960][ T9593] R13: 0000000000000000 R14: 00007f56fc9b5fa0 R15: 00007fff8e189098 [ 416.258987][ T9593] [ 416.531142][ T30] audit: type=1400 audit(1754465387.258:873): avc: denied { create } for pid=9595 comm="syz.5.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 416.761101][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 416.924686][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 416.944430][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.161924][ T24] usb 2-1: Product: syz [ 417.166473][ T24] usb 2-1: Manufacturer: syz [ 417.171633][ T24] usb 2-1: SerialNumber: syz [ 417.189287][ T24] usb 2-1: config 0 descriptor?? [ 417.551279][ T5985] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 417.711148][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 417.738900][ T5985] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.762540][ T24] usb 2-1: USB disconnect, device number 21 [ 417.768670][ T5985] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 417.806375][ T5985] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=40.40 [ 417.867062][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.905763][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.932020][ T5985] usb 3-1: Manufacturer: ఄ [ 417.951907][ T5985] usb 3-1: SerialNumber: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡 [ 418.097604][ T9613] overlayfs: failed to resolve './file0': -2 [ 418.342332][ T30] audit: type=1400 audit(1754465389.028:874): avc: denied { ioctl } for pid=9608 comm="syz.3.774" path="pid:[4026532787]" dev="nsfs" ino=4026532787 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 419.165835][ T30] audit: type=1400 audit(1754465389.048:875): avc: denied { name_bind } for pid=9608 comm="syz.3.774" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 419.286016][ T9607] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 419.533253][ T30] audit: type=1400 audit(1754465390.268:876): avc: denied { write } for pid=9602 comm="syz.2.773" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 419.533385][ T51] Bluetooth: hci1: Malformed Event: 0x02 [ 419.724164][ T30] audit: type=1400 audit(1754465390.268:877): avc: denied { ioctl } for pid=9602 comm="syz.2.773" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 420.031306][ T5939] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 420.117762][ T9643] openvswitch: netlink: Flow key attr not present in new flow. [ 420.192866][ T5939] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.221788][ T5939] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.258385][ T5939] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.267288][ T5939] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 420.279791][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.299337][ T5939] usb 2-1: config 0 descriptor?? [ 420.629125][ T5985] usb 3-1: USB disconnect, device number 27 [ 420.925420][ T5939] usb 2-1: string descriptor 0 read error: -22 [ 421.010017][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 421.010031][ T30] audit: type=1400 audit(1754465391.738:879): avc: denied { mounton } for pid=9655 comm="syz.2.784" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 421.052176][ T30] audit: type=1400 audit(1754465391.788:880): avc: denied { setopt } for pid=9655 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 421.132870][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 421.140252][ T5939] uclogic 0003:256C:006D.000C: interface is invalid, ignoring [ 421.170765][ T5939] usb 2-1: USB disconnect, device number 22 [ 421.599109][ T30] audit: type=1400 audit(1754465392.328:881): avc: denied { listen } for pid=9667 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 421.949879][ T30] audit: type=1400 audit(1754465392.458:882): avc: denied { open } for pid=9667 comm="syz.2.786" path="/dev/ttyq8" dev="devtmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 421.985736][ T30] audit: type=1400 audit(1754465392.558:883): avc: denied { ioctl } for pid=9667 comm="syz.2.786" path="socket:[25243]" dev="sockfs" ino=25243 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.232436][ T9676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input40 [ 423.397802][ T9688] FAULT_INJECTION: forcing a failure. [ 423.397802][ T9688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.410927][ T9688] CPU: 0 UID: 0 PID: 9688 Comm: syz.2.792 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 423.410953][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.410967][ T9688] Call Trace: [ 423.410974][ T9688] [ 423.410981][ T9688] dump_stack_lvl+0x16c/0x1f0 [ 423.411013][ T9688] should_fail_ex+0x512/0x640 [ 423.411036][ T9688] _copy_from_user+0x2e/0xd0 [ 423.411058][ T9688] core_sys_select+0x2c8/0xc10 [ 423.411087][ T9688] ? __pfx_core_sys_select+0x10/0x10 [ 423.411138][ T9688] ? set_user_sigmask+0x21b/0x2b0 [ 423.411158][ T9688] ? trace_sched_exit_tp+0xd1/0x120 [ 423.411180][ T9688] ? __pfx_set_user_sigmask+0x10/0x10 [ 423.411209][ T9688] do_pselect.constprop.0+0x19f/0x1e0 [ 423.411232][ T9688] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 423.411258][ T9688] ? __pfx___schedule+0x10/0x10 [ 423.411287][ T9688] __x64_sys_pselect6+0x182/0x240 [ 423.411310][ T9688] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 423.411340][ T9688] do_syscall_64+0xcd/0x4c0 [ 423.411371][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.411390][ T9688] RIP: 0033:0x7fae7fb8eb69 [ 423.411406][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.411424][ T9688] RSP: 002b:00007fae80a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 423.411442][ T9688] RAX: ffffffffffffffda RBX: 00007fae7fdb6080 RCX: 00007fae7fb8eb69 [ 423.411456][ T9688] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 423.411468][ T9688] RBP: 00007fae80a17090 R08: 0000000000000000 R09: 0000000000000000 [ 423.411479][ T9688] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 423.411491][ T9688] R13: 0000000000000000 R14: 00007fae7fdb6080 R15: 00007ffe6d32d1f8 [ 423.411518][ T9688] [ 424.991407][ T30] audit: type=1400 audit(1754465395.728:884): avc: denied { map } for pid=9691 comm="syz.5.793" path="socket:[25357]" dev="sockfs" ino=25357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 425.425589][ T9698] dvmrp0: entered allmulticast mode [ 425.872866][ T9702] dvmrp0: entered allmulticast mode [ 426.455223][ T9712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.798'. [ 426.464722][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 427.098984][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.799'. [ 427.108199][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.799'. [ 428.682090][ T30] audit: type=1400 audit(1754465399.418:885): avc: denied { read write } for pid=9704 comm="syz.2.796" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 428.706150][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.784063][ T30] audit: type=1400 audit(1754465399.518:886): avc: denied { open } for pid=9704 comm="syz.2.796" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 429.237346][ T9731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input41 [ 431.498711][ T30] audit: type=1400 audit(1754465402.228:887): avc: denied { write } for pid=9758 comm="syz.5.810" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.682684][ T30] audit: type=1400 audit(1754465402.418:888): avc: denied { ioctl } for pid=9761 comm="syz.4.811" path="socket:[25564]" dev="sockfs" ino=25564 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.442383][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 435.020466][ T9789] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 435.029492][ T9789] bridge3: entered allmulticast mode [ 435.077728][ T30] audit: type=1400 audit(1754465405.788:889): avc: denied { create } for pid=9786 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 435.533676][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.667988][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.713066][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.756260][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.760222][ T9801] dvmrp0: entered allmulticast mode [ 435.945332][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.049152][ T30] audit: type=1400 audit(1754465406.758:890): avc: denied { mounton } for pid=9795 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 436.359525][ T9796] dvmrp0: entered allmulticast mode [ 437.578182][ T9795] chnl_net:caif_netlink_parms(): no params data found [ 438.062168][ T5856] Bluetooth: hci5: command tx timeout [ 438.251071][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 438.406507][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.417610][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.451640][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 438.483199][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 438.493639][ T9795] bridge_slave_0: entered allmulticast mode [ 438.534878][ T9795] bridge_slave_0: entered promiscuous mode [ 438.543470][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.650826][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.660855][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.832745][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.167266][ T9795] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.174422][ T30] audit: type=1400 audit(1754465409.608:891): avc: denied { map } for pid=9833 comm="syz.5.827" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 439.201408][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 439.218094][ T9795] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.225315][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.234127][ T9795] bridge_slave_1: entered allmulticast mode [ 439.265028][ T30] audit: type=1400 audit(1754465409.608:892): avc: denied { execute } for pid=9833 comm="syz.5.827" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 439.269716][ T9795] bridge_slave_1: entered promiscuous mode [ 439.487495][ T9795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.504876][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 439.512874][ T10] usbtmc 3-1:16.0: can't read capabilities [ 439.771684][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.778028][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.793979][ T9795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.883027][ T9840] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.829'. [ 439.962655][ T5985] usb 3-1: USB disconnect, device number 28 [ 439.985976][ T9839] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.829'. [ 440.000453][ T9795] team0: Port device team_slave_0 added [ 440.008405][ T9795] team0: Port device team_slave_1 added [ 440.131271][ T5856] Bluetooth: hci5: command tx timeout [ 440.155865][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.195606][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.251702][ T9795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.300595][ T9843] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 440.322545][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.329484][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.359870][ T9795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.386389][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.458113][ T9795] hsr_slave_0: entered promiscuous mode [ 440.461629][ T55] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 440.470319][ T9795] hsr_slave_1: entered promiscuous mode [ 440.477424][ T9795] debugfs: 'hsr0' already exists in 'hsr' [ 440.483768][ T9795] Cannot create hsr debugfs directory [ 440.633063][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.650559][ T55] usb 2-1: not running at top speed; connect to a high speed hub [ 440.667523][ T55] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 440.678248][ T55] usb 2-1: config 8 has no interface number 0 [ 440.691558][ T55] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 440.702878][ T55] usb 2-1: config 8 interface 24 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.715708][ T55] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 440.756150][ T55] usb 2-1: config 8 interface 24 has no altsetting 0 [ 441.017436][ T55] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 441.026863][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.039193][ T55] usb 2-1: Product: syz [ 441.043967][ T55] usb 2-1: Manufacturer: syz [ 441.048691][ T55] usb 2-1: SerialNumber: syz [ 441.058667][ T9846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 441.066202][ T9846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 441.096308][ T9857] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input42 [ 441.402244][ T9842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.415829][ T9795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 441.485501][ T9842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.500806][ T9795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 441.529084][ T9795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.613952][ T9795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.764846][ T55] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 441.813340][ T55] usb 2-1: USB disconnect, device number 23 [ 442.037316][ T9795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.079111][ T9795] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.096265][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.103352][ T6258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.127219][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.134291][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.221207][ T5856] Bluetooth: hci5: command tx timeout [ 443.780435][ T9795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.321097][ T5856] Bluetooth: hci5: command tx timeout [ 445.541573][ T9912] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input43 [ 446.867544][ T9795] veth0_vlan: entered promiscuous mode [ 447.148769][ T9795] veth1_vlan: entered promiscuous mode [ 447.356898][ T9795] veth0_macvtap: entered promiscuous mode [ 447.393707][ T9936] Bluetooth: hci6: Frame reassembly failed (-84) [ 447.407905][ T9795] veth1_macvtap: entered promiscuous mode [ 447.415032][ T60] Bluetooth: hci6: Frame reassembly failed (-84) [ 447.674687][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.720324][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.740328][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.749262][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.812880][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.839399][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.141820][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 448.253437][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.265626][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.331085][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 448.342252][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.347565][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 448.358451][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.369712][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 448.390131][ T30] audit: type=1400 audit(1754465419.118:893): avc: denied { mounton } for pid=9795 comm="syz-executor" path="/root/syzkaller.ImZ7pj/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 448.414334][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.423945][ T10] usb 6-1: can't read configurations, error -61 [ 448.451075][ T30] audit: type=1400 audit(1754465419.118:894): avc: denied { mounton } for pid=9795 comm="syz-executor" path="/root/syzkaller.ImZ7pj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 448.477649][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.599246][ T30] audit: type=1400 audit(1754465419.118:895): avc: denied { mounton } for pid=9795 comm="syz-executor" path="/root/syzkaller.ImZ7pj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 448.626725][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.639965][ T30] audit: type=1400 audit(1754465419.168:896): avc: denied { mounton } for pid=9795 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 448.662814][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.669262][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 448.679983][ T30] audit: type=1400 audit(1754465419.168:897): avc: denied { mount } for pid=9795 comm="syz-executor" name="/" dev="gadgetfs" ino=6714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 448.833462][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 448.846121][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 449.213896][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 449.217445][ T30] audit: type=1400 audit(1754465419.168:898): avc: denied { mounton } for pid=9795 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 449.237329][ T10] usb 6-1: can't read configurations, error -61 [ 449.256637][ T10] usb usb6-port1: attempt power cycle [ 449.411251][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 449.430333][ T5856] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 449.645625][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 449.864740][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 449.874242][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 449.883490][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 449.897200][ T10] usb 6-1: can't read configurations, error -61 [ 450.064254][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 450.104267][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 450.347932][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 450.496061][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 450.539777][ T10] usb 6-1: can't read configurations, error -61 [ 450.564381][ T10] usb usb6-port1: unable to enumerate USB device [ 450.658443][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.686058][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.698103][ T9970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.897614][ T9988] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 452.909559][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.862'. [ 453.296089][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.863'. [ 453.465235][T10009] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 453.473957][T10009] bridge4: entered allmulticast mode [ 460.555878][T10046] tmpfs: Unknown parameter 'sched_switch' [ 461.398306][T10066] FAULT_INJECTION: forcing a failure. [ 461.398306][T10066] name failslab, interval 1, probability 0, space 0, times 0 [ 461.417660][T10066] CPU: 0 UID: 0 PID: 10066 Comm: syz.4.880 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 461.417685][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.417711][T10066] Call Trace: [ 461.417718][T10066] [ 461.417725][T10066] dump_stack_lvl+0x16c/0x1f0 [ 461.417757][T10066] should_fail_ex+0x512/0x640 [ 461.417774][T10066] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 461.417799][T10066] should_failslab+0xc2/0x120 [ 461.417820][T10066] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 461.417841][T10066] ? __alloc_skb+0x2b2/0x380 [ 461.417870][T10066] __alloc_skb+0x2b2/0x380 [ 461.417892][T10066] ? __pfx___alloc_skb+0x10/0x10 [ 461.417918][T10066] ? tcp_chrono_stop+0x95/0x420 [ 461.417950][T10066] tcp_stream_alloc_skb+0x34/0x570 [ 461.417973][T10066] tcp_connect+0xe21/0x4e10 [ 461.418011][T10066] ? __pfx_tcp_connect+0x10/0x10 [ 461.418033][T10066] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 461.418074][T10066] ? inet6_hash_connect+0xe2/0x180 [ 461.418098][T10066] tcp_v6_connect+0x157c/0x2170 [ 461.418121][T10066] ? avc_has_perm_noaudit+0x117/0x3b0 [ 461.418157][T10066] ? __pfx_tcp_v6_connect+0x10/0x10 [ 461.418185][T10066] ? register_lock_class+0x41/0x4c0 [ 461.418204][T10066] ? register_lock_class+0x41/0x4c0 [ 461.418263][T10066] ? __lock_acquire+0xb97/0x1ce0 [ 461.418295][T10066] ? __inet_stream_connect+0x917/0xf60 [ 461.418316][T10066] __inet_stream_connect+0x917/0xf60 [ 461.418346][T10066] ? __pfx___inet_stream_connect+0x10/0x10 [ 461.418369][T10066] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 461.418395][T10066] ? __pfx_inet_stream_connect+0x10/0x10 [ 461.418419][T10066] ? __local_bh_enable_ip+0xa4/0x120 [ 461.418446][T10066] ? __pfx_inet_stream_connect+0x10/0x10 [ 461.418467][T10066] inet_stream_connect+0x57/0xa0 [ 461.418492][T10066] __sys_connect_file+0x13e/0x1a0 [ 461.418520][T10066] __sys_connect+0x13b/0x160 [ 461.418542][T10066] ? __pfx___sys_connect+0x10/0x10 [ 461.418576][T10066] ? __pfx_ksys_write+0x10/0x10 [ 461.418604][T10066] __x64_sys_connect+0x72/0xb0 [ 461.418626][T10066] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.418653][T10066] do_syscall_64+0xcd/0x4c0 [ 461.418683][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.418703][T10066] RIP: 0033:0x7fa1a718eb69 [ 461.418719][T10066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.418738][T10066] RSP: 002b:00007fa1a7fc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 461.418757][T10066] RAX: ffffffffffffffda RBX: 00007fa1a73b5fa0 RCX: 00007fa1a718eb69 [ 461.418770][T10066] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 461.418782][T10066] RBP: 00007fa1a7fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 461.418794][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.418806][T10066] R13: 0000000000000000 R14: 00007fa1a73b5fa0 R15: 00007fff94cca158 [ 461.418834][T10066] [ 462.026689][T10079] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 462.039254][T10079] bridge5: entered allmulticast mode [ 462.051247][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 462.142672][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 462.299306][ T10] usb 7-1: device descriptor read/64, error -71 [ 462.791663][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.814872][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.913025][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 462.929708][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.950136][ T9] usb 3-1: SerialNumber: syz [ 462.971189][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 463.141134][ T10] usb 7-1: device descriptor read/64, error -71 [ 463.187426][ T9] usb 3-1: 0:2 : does not exist [ 463.219544][ T9] usb 3-1: unit 1 not found! [ 463.252020][ T10] usb usb7-port1: attempt power cycle [ 463.315806][ T9] usb 3-1: USB disconnect, device number 29 [ 463.377479][T10029] udevd[10029]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.591705][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 463.861274][ T10] usb 7-1: device descriptor read/8, error -71 [ 463.924369][T10100] FAULT_INJECTION: forcing a failure. [ 463.924369][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.081877][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.1.887 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 464.081906][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.081917][T10100] Call Trace: [ 464.081924][T10100] [ 464.081931][T10100] dump_stack_lvl+0x16c/0x1f0 [ 464.081964][T10100] should_fail_ex+0x512/0x640 [ 464.081985][T10100] _copy_to_user+0x32/0xd0 [ 464.082010][T10100] simple_read_from_buffer+0xcb/0x170 [ 464.082033][T10100] proc_fail_nth_read+0x197/0x240 [ 464.082057][T10100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.082082][T10100] ? rw_verify_area+0xcf/0x6c0 [ 464.082110][T10100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.082133][T10100] vfs_read+0x1e4/0xc60 [ 464.082155][T10100] ? __pfx___mutex_lock+0x10/0x10 [ 464.082184][T10100] ? __pfx_vfs_read+0x10/0x10 [ 464.082213][T10100] ? __fget_files+0x20e/0x3c0 [ 464.082248][T10100] ksys_read+0x12a/0x250 [ 464.082268][T10100] ? __pfx_ksys_read+0x10/0x10 [ 464.082297][T10100] do_syscall_64+0xcd/0x4c0 [ 464.082328][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.082348][T10100] RIP: 0033:0x7ffbecd8d57c [ 464.082364][T10100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 464.082383][T10100] RSP: 002b:00007ffbedcc1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.082403][T10100] RAX: ffffffffffffffda RBX: 00007ffbecfb5fa0 RCX: 00007ffbecd8d57c [ 464.082414][T10100] RDX: 000000000000000f RSI: 00007ffbedcc10a0 RDI: 0000000000000004 [ 464.082426][T10100] RBP: 00007ffbedcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 464.082437][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.082447][T10100] R13: 0000000000000000 R14: 00007ffbecfb5fa0 R15: 00007ffc0ac7a8f8 [ 464.082474][T10100] [ 464.364635][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 464.594375][ T10] usb 7-1: device descriptor read/8, error -71 [ 464.844628][ T10] usb usb7-port1: unable to enumerate USB device [ 464.873648][ T30] audit: type=1400 audit(1754465435.608:899): avc: denied { mount } for pid=10106 comm="syz.5.890" name="/" dev="ramfs" ino=27963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 464.903195][T10111] overlay: ./file0 is not a directory [ 467.056559][ T30] audit: type=1400 audit(1754465437.738:900): avc: denied { append } for pid=10138 comm="syz.4.899" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 467.390559][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.756288][ T30] audit: type=1400 audit(1754465438.158:901): avc: denied { write } for pid=10138 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 467.776775][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.839400][T10148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.878290][ T30] audit: type=1400 audit(1754465438.158:902): avc: denied { read } for pid=10138 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 469.231375][ T30] audit: type=1400 audit(1754465439.918:903): avc: denied { getopt } for pid=10170 comm="syz.4.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 469.891256][T10178] netlink: 'syz.2.909': attribute type 8 has an invalid length. [ 471.361679][ T30] audit: type=1400 audit(1754465442.058:904): avc: denied { mount } for pid=10197 comm="syz.6.915" name="/" dev="autofs" ino=28263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 471.383994][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.393704][ T30] audit: type=1400 audit(1754465442.098:905): avc: denied { unmount } for pid=9795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 471.616033][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.917'. [ 471.625315][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 472.112017][T10210] dvmrp0: entered allmulticast mode [ 473.359546][T10218] netlink: 148 bytes leftover after parsing attributes in process `syz.5.920'. [ 474.016650][T10217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.356017][T10235] FAULT_INJECTION: forcing a failure. [ 474.356017][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 474.401246][T10235] CPU: 0 UID: 0 PID: 10235 Comm: syz.1.928 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 474.401274][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.401285][T10235] Call Trace: [ 474.401292][T10235] [ 474.401299][T10235] dump_stack_lvl+0x16c/0x1f0 [ 474.401332][T10235] should_fail_ex+0x512/0x640 [ 474.401349][T10235] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 474.401381][T10235] should_failslab+0xc2/0x120 [ 474.401403][T10235] __kmalloc_cache_noprof+0x6a/0x3e0 [ 474.401440][T10235] ? vcs_poll_data_get.part.0+0x41/0x260 [ 474.401467][T10235] ? __pfx_vcs_poll+0x10/0x10 [ 474.401491][T10235] vcs_poll_data_get.part.0+0x41/0x260 [ 474.401516][T10235] vcs_poll+0x115/0x150 [ 474.401539][T10235] ? __pfx_vcs_poll+0x10/0x10 [ 474.401560][T10235] ep_item_poll+0x13e/0x1f0 [ 474.401583][T10235] do_epoll_ctl+0x1fae/0x3790 [ 474.401616][T10235] ? __pfx_do_epoll_ctl+0x10/0x10 [ 474.401635][T10235] ? find_held_lock+0x2b/0x80 [ 474.401656][T10235] ? __might_fault+0xe3/0x190 [ 474.401674][T10235] ? __might_fault+0xe3/0x190 [ 474.401690][T10235] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 474.401721][T10235] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 474.401741][T10235] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 474.401764][T10235] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 474.401795][T10235] do_syscall_64+0xcd/0x4c0 [ 474.401824][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.401844][T10235] RIP: 0033:0x7ffbecd8eb69 [ 474.401859][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.401877][T10235] RSP: 002b:00007ffbedcc1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 474.401896][T10235] RAX: ffffffffffffffda RBX: 00007ffbecfb5fa0 RCX: 00007ffbecd8eb69 [ 474.401909][T10235] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 474.401920][T10235] RBP: 00007ffbedcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 474.401932][T10235] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.401943][T10235] R13: 0000000000000000 R14: 00007ffbecfb5fa0 R15: 00007ffc0ac7a8f8 [ 474.401970][T10235] [ 474.622685][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.695367][ T5939] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 474.864133][ T5939] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 474.928713][ T5939] usb 3-1: config 0 has no interface number 0 [ 475.034461][ T5939] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.272776][ T5939] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 475.355824][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.449538][ T5939] usb 3-1: Product: syz [ 475.478154][ T5939] usb 3-1: Manufacturer: syz [ 475.600736][ T5939] usb 3-1: SerialNumber: syz [ 476.159234][ T5939] usb 3-1: config 0 descriptor?? [ 476.198841][ T5939] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 476.249858][T10256] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 476.272338][T10257] netlink: 148 bytes leftover after parsing attributes in process `syz.1.934'. [ 477.072985][ T10] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 477.183638][ T24] usb 3-1: USB disconnect, device number 30 [ 477.199802][ T24] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 477.243419][ T10] usb 6-1: config 1 interface 0 altsetting 25 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 477.264788][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 477.276990][ T30] audit: type=1400 audit(1754465448.008:906): avc: denied { create } for pid=10267 comm="syz.6.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 477.301144][ T10] usb 6-1: string descriptor 0 read error: -22 [ 477.301973][T10268] IPv6: sit1: Disabled Multicast RS [ 477.307383][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 477.326311][T10268] sit1: entered allmulticast mode [ 477.333756][ T30] audit: type=1400 audit(1754465448.008:907): avc: denied { bind } for pid=10267 comm="syz.6.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 477.361353][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.398386][T10255] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 477.726003][T10255] IPVS: stopping backup sync thread 10256 ... [ 477.981202][ T30] audit: type=1400 audit(1754465448.678:908): avc: denied { create } for pid=10254 comm="syz.5.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 478.086904][ T30] audit: type=1400 audit(1754465448.688:909): avc: denied { getopt } for pid=10254 comm="syz.5.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 478.183876][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 478.207630][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 478.302897][ T10] usb 6-1: USB disconnect, device number 19 [ 478.325852][T10287] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input44 [ 478.513697][ T30] audit: type=1400 audit(1754465449.238:910): avc: denied { connect } for pid=10291 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.538820][T10292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 478.545507][T10292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 478.585748][T10292] vhci_hcd vhci_hcd.0: Device attached [ 478.879656][ T24] vhci_hcd: vhci_device speed not set [ 479.489427][T10293] vhci_hcd: connection closed [ 479.550279][ T30] audit: type=1400 audit(1754465449.238:911): avc: denied { bind } for pid=10291 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 479.871085][ T24] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 479.924165][ T12] vhci_hcd: stop threads [ 479.929074][ T12] vhci_hcd: release socket [ 480.178713][ T12] vhci_hcd: disconnect device [ 480.193180][ T30] audit: type=1400 audit(1754465449.238:912): avc: denied { connect } for pid=10291 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 480.336372][ T30] audit: type=1400 audit(1754465449.278:913): avc: denied { read write } for pid=10295 comm="syz.1.944" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 480.360954][ T30] audit: type=1400 audit(1754465449.278:914): avc: denied { open } for pid=10295 comm="syz.1.944" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 480.382555][T10306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.946'. [ 480.385283][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.401038][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 480.629476][ T30] audit: type=1400 audit(1754465449.278:915): avc: denied { connect } for pid=10295 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 480.648918][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.321166][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 481.481026][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 481.499472][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.517348][ T10] usb 5-1: config 0 has no interface number 0 [ 481.556772][ T10] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 481.615093][ T10] usb 5-1: config 0 interface 1 has no altsetting 0 [ 481.961866][ T10] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 481.984794][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.993172][ T10] usb 5-1: Product: syz [ 481.997344][ T10] usb 5-1: Manufacturer: syz [ 482.006771][ T10] usb 5-1: SerialNumber: syz [ 482.024526][ T10] usb 5-1: config 0 descriptor?? [ 482.241474][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.250187][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.473086][T10326] FAULT_INJECTION: forcing a failure. [ 482.473086][T10326] name failslab, interval 1, probability 0, space 0, times 0 [ 482.513865][T10326] CPU: 0 UID: 0 PID: 10326 Comm: syz.6.954 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 482.513893][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.513904][T10326] Call Trace: [ 482.513911][T10326] [ 482.513919][T10326] dump_stack_lvl+0x16c/0x1f0 [ 482.513953][T10326] should_fail_ex+0x512/0x640 [ 482.513971][T10326] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 482.513998][T10326] should_failslab+0xc2/0x120 [ 482.514020][T10326] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 482.514043][T10326] ? ip6_setup_cork+0x628/0x1530 [ 482.514072][T10326] kmemdup_noprof+0x29/0x60 [ 482.514093][T10326] ip6_setup_cork+0x628/0x1530 [ 482.514124][T10326] ip6_make_skb+0x25b/0x3f0 [ 482.514150][T10326] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.514182][T10326] ? __pfx_ip6_make_skb+0x10/0x10 [ 482.514219][T10326] ? find_held_lock+0x2b/0x80 [ 482.514243][T10326] ? ip6_dst_hoplimit+0x1a7/0x430 [ 482.514277][T10326] ? udpv6_sendmsg+0x235c/0x2d20 [ 482.514295][T10326] udpv6_sendmsg+0x235c/0x2d20 [ 482.514317][T10326] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.514355][T10326] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 482.514373][T10326] ? avc_has_perm_noaudit+0x149/0x3b0 [ 482.514404][T10326] ? avc_has_perm+0x144/0x1f0 [ 482.514459][T10326] ? __import_iovec+0x1dd/0x650 [ 482.514481][T10326] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 482.514502][T10326] ? inet6_sendmsg+0x105/0x140 [ 482.514517][T10326] inet6_sendmsg+0x105/0x140 [ 482.514539][T10326] ____sys_sendmsg+0x705/0xc70 [ 482.514560][T10326] ? copy_msghdr_from_user+0x10a/0x160 [ 482.514596][T10326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.514622][T10326] ? __pfx__kstrtoull+0x10/0x10 [ 482.514653][T10326] ___sys_sendmsg+0x134/0x1d0 [ 482.514682][T10326] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.514720][T10326] ? find_held_lock+0x2b/0x80 [ 482.514759][T10326] __sys_sendmmsg+0x200/0x420 [ 482.514789][T10326] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.514822][T10326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.514862][T10326] ? fput+0x9b/0xd0 [ 482.514887][T10326] ? ksys_write+0x1ac/0x250 [ 482.514905][T10326] ? __pfx_ksys_write+0x10/0x10 [ 482.514930][T10326] __x64_sys_sendmmsg+0x9c/0x100 [ 482.514955][T10326] ? lockdep_hardirqs_on+0x7c/0x110 [ 482.514982][T10326] do_syscall_64+0xcd/0x4c0 [ 482.515013][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.515032][T10326] RIP: 0033:0x7f5d0c38eb69 [ 482.515048][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.515067][T10326] RSP: 002b:00007f5d0d272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.515086][T10326] RAX: ffffffffffffffda RBX: 00007f5d0c5b5fa0 RCX: 00007f5d0c38eb69 [ 482.515100][T10326] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 482.515112][T10326] RBP: 00007f5d0d272090 R08: 0000000000000000 R09: 0000000000000000 [ 482.515124][T10326] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.515136][T10326] R13: 0000000000000000 R14: 00007f5d0c5b5fa0 R15: 00007ffd5b803888 [ 482.515164][T10326] [ 483.217653][T10339] fuse: Bad value for 'fd' [ 483.841051][ T5963] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 484.341025][ T5963] usb 6-1: device descriptor read/64, error -71 [ 484.377056][ T10] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 484.460580][ T10] cx231xx 5-1:0.1: Not found matching IAD interface [ 484.470590][ T10] usb 5-1: USB disconnect, device number 13 [ 484.565903][T10353] FAULT_INJECTION: forcing a failure. [ 484.565903][T10353] name failslab, interval 1, probability 0, space 0, times 0 [ 484.591202][ T5963] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 484.633382][T10353] CPU: 1 UID: 0 PID: 10353 Comm: syz.4.960 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 484.633413][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.633425][T10353] Call Trace: [ 484.633432][T10353] [ 484.633439][T10353] dump_stack_lvl+0x16c/0x1f0 [ 484.633472][T10353] should_fail_ex+0x512/0x640 [ 484.633490][T10353] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 484.633522][T10353] should_failslab+0xc2/0x120 [ 484.633544][T10353] __kmalloc_cache_noprof+0x6a/0x3e0 [ 484.633572][T10353] ? lockdep_init_map_type+0x5c/0x280 [ 484.633591][T10353] ? exfat_init_fs_context+0x45/0x560 [ 484.633620][T10353] exfat_init_fs_context+0x45/0x560 [ 484.633645][T10353] ? __pfx_exfat_init_fs_context+0x10/0x10 [ 484.633669][T10353] alloc_fs_context+0x54d/0x9c0 [ 484.633699][T10353] __x64_sys_fsopen+0xeb/0x240 [ 484.633726][T10353] do_syscall_64+0xcd/0x4c0 [ 484.633756][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.633776][T10353] RIP: 0033:0x7fa1a718eb69 [ 484.633791][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.633809][T10353] RSP: 002b:00007fa1a7fc8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 484.633827][T10353] RAX: ffffffffffffffda RBX: 00007fa1a73b5fa0 RCX: 00007fa1a718eb69 [ 484.633840][T10353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 484.633853][T10353] RBP: 00007fa1a7fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 484.633865][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.633876][T10353] R13: 0000000000000001 R14: 00007fa1a73b5fa0 R15: 00007fff94cca158 [ 484.633904][T10353] [ 484.809808][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.933662][ T5963] usb 6-1: device descriptor read/64, error -71 [ 485.001067][ T24] vhci_hcd: vhci_device speed not set [ 485.043254][ T5963] usb usb6-port1: attempt power cycle [ 485.453426][ T5963] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 485.800111][ T5963] usb 6-1: device descriptor read/8, error -71 [ 486.494125][T10373] dns_resolver: Unsupported server list version (0) [ 486.532139][ T30] audit: type=1400 audit(1754465457.258:916): avc: denied { write } for pid=10369 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 486.968548][T10368] overlayfs: failed to resolve './file0': -2 [ 489.438463][T10404] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 489.457659][T10404] bridge1: entered allmulticast mode [ 489.821702][T10416] FAULT_INJECTION: forcing a failure. [ 489.821702][T10416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.851053][T10416] CPU: 1 UID: 0 PID: 10416 Comm: syz.2.972 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 489.851070][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.851077][T10416] Call Trace: [ 489.851082][T10416] [ 489.851086][T10416] dump_stack_lvl+0x16c/0x1f0 [ 489.851109][T10416] should_fail_ex+0x512/0x640 [ 489.851123][T10416] _copy_from_iter+0x29f/0x16f0 [ 489.851137][T10416] ? __alloc_skb+0x200/0x380 [ 489.851152][T10416] ? __pfx__copy_from_iter+0x10/0x10 [ 489.851165][T10416] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 489.851187][T10416] netlink_sendmsg+0x829/0xdd0 [ 489.851206][T10416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.851228][T10416] ____sys_sendmsg+0xa95/0xc70 [ 489.851240][T10416] ? copy_msghdr_from_user+0x10a/0x160 [ 489.851255][T10416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.851273][T10416] ___sys_sendmsg+0x134/0x1d0 [ 489.851289][T10416] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.851318][T10416] ? __mutex_unlock_slowpath+0x100/0x800 [ 489.851339][T10416] __sys_sendmsg+0x16d/0x220 [ 489.851354][T10416] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.851379][T10416] do_syscall_64+0xcd/0x4c0 [ 489.851397][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.851408][T10416] RIP: 0033:0x7fae7fb8eb69 [ 489.851418][T10416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.851428][T10416] RSP: 002b:00007fae80a38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.851439][T10416] RAX: ffffffffffffffda RBX: 00007fae7fdb5fa0 RCX: 00007fae7fb8eb69 [ 489.851446][T10416] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000003 [ 489.851453][T10416] RBP: 00007fae80a38090 R08: 0000000000000000 R09: 0000000000000000 [ 489.851459][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.851465][T10416] R13: 0000000000000000 R14: 00007fae7fdb5fa0 R15: 00007ffe6d32d1f8 [ 489.851480][T10416] [ 490.054166][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.753275][T10457] openvswitch: netlink: Flow key attr not present in new flow. [ 492.821163][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 492.961525][ T44] usb 5-1: device descriptor read/64, error -71 [ 493.418773][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 494.352928][T10462] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 494.352928][T10462] program syz.2.982 not setting count and/or reply_len properly [ 494.803050][T10468] /dev/nullb0: Can't open blockdev [ 495.145755][T10475] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 495.154464][T10475] bridge4: entered allmulticast mode [ 496.324122][T10494] netlink: 'syz.6.992': attribute type 21 has an invalid length. [ 499.073019][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.105965][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.512487][T10502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.999811][T10527] FAULT_INJECTION: forcing a failure. [ 500.999811][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 501.020097][T10527] CPU: 1 UID: 0 PID: 10527 Comm: syz.5.1000 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 501.020120][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.020127][T10527] Call Trace: [ 501.020131][T10527] [ 501.020136][T10527] dump_stack_lvl+0x16c/0x1f0 [ 501.020156][T10527] should_fail_ex+0x512/0x640 [ 501.020167][T10527] ? kasan_save_stack+0x33/0x60 [ 501.020180][T10527] should_failslab+0xc2/0x120 [ 501.020193][T10527] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 501.020206][T10527] ? __alloc_skb+0x2b2/0x380 [ 501.020223][T10527] __alloc_skb+0x2b2/0x380 [ 501.020237][T10527] ? __pfx___alloc_skb+0x10/0x10 [ 501.020257][T10527] _sctp_make_chunk+0x51/0x270 [ 501.020272][T10527] sctp_make_control+0x2f/0x2d0 [ 501.020285][T10527] sctp_make_strreset_req+0xe8/0x420 [ 501.020302][T10527] ? __pfx_sctp_make_strreset_req+0x10/0x10 [ 501.020321][T10527] ? rcu_is_watching+0x12/0xc0 [ 501.020336][T10527] ? do_raw_spin_lock+0x12c/0x2b0 [ 501.020349][T10527] ? sctp_stream_outq_is_empty+0x185/0x1f0 [ 501.020365][T10527] sctp_send_reset_streams+0x502/0xf00 [ 501.020381][T10527] ? __local_bh_enable_ip+0xa4/0x120 [ 501.020397][T10527] sctp_setsockopt+0x484c/0xb870 [ 501.020408][T10527] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 501.020426][T10527] ? __pfx_sctp_setsockopt+0x10/0x10 [ 501.020436][T10527] ? find_held_lock+0x2b/0x80 [ 501.020453][T10527] ? selinux_socket_setsockopt+0x6a/0x80 [ 501.020465][T10527] ? sock_common_setsockopt+0x2e/0xf0 [ 501.020475][T10527] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 501.020487][T10527] do_sock_setsockopt+0xf0/0x1d0 [ 501.020500][T10527] __sys_setsockopt+0x1a0/0x230 [ 501.020518][T10527] __x64_sys_setsockopt+0xbd/0x160 [ 501.020531][T10527] ? do_syscall_64+0x91/0x4c0 [ 501.020547][T10527] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.020562][T10527] do_syscall_64+0xcd/0x4c0 [ 501.020579][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.020590][T10527] RIP: 0033:0x7f56fc78eb69 [ 501.020600][T10527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.020610][T10527] RSP: 002b:00007f56fd57c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 501.020621][T10527] RAX: ffffffffffffffda RBX: 00007f56fc9b5fa0 RCX: 00007f56fc78eb69 [ 501.020628][T10527] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 501.020637][T10527] RBP: 00007f56fd57c090 R08: 000000000001000f R09: 0000000000000000 [ 501.020646][T10527] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 501.020654][T10527] R13: 0000000000000000 R14: 00007f56fc9b5fa0 R15: 00007fff8e189098 [ 501.020669][T10527] [ 501.613312][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.645373][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.955949][T10534] FAULT_INJECTION: forcing a failure. [ 501.955949][T10534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.971267][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.4.1005 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 501.971294][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.971306][T10534] Call Trace: [ 501.971313][T10534] [ 501.971320][T10534] dump_stack_lvl+0x16c/0x1f0 [ 501.971352][T10534] should_fail_ex+0x512/0x640 [ 501.971374][T10534] _copy_to_user+0x32/0xd0 [ 501.971409][T10534] simple_read_from_buffer+0xcb/0x170 [ 501.971433][T10534] proc_fail_nth_read+0x197/0x240 [ 501.971456][T10534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.971481][T10534] ? rw_verify_area+0xcf/0x6c0 [ 501.971508][T10534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.971530][T10534] vfs_read+0x1e4/0xc60 [ 501.971554][T10534] ? __pfx___mutex_lock+0x10/0x10 [ 501.971582][T10534] ? __pfx_vfs_read+0x10/0x10 [ 501.971609][T10534] ? __fget_files+0x20e/0x3c0 [ 501.971639][T10534] ksys_read+0x12a/0x250 [ 501.971659][T10534] ? __pfx_ksys_read+0x10/0x10 [ 501.971687][T10534] do_syscall_64+0xcd/0x4c0 [ 501.971718][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.971737][T10534] RIP: 0033:0x7fa1a718d57c [ 501.971753][T10534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 501.971772][T10534] RSP: 002b:00007fa1a7fc8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.971794][T10534] RAX: ffffffffffffffda RBX: 00007fa1a73b5fa0 RCX: 00007fa1a718d57c [ 501.971808][T10534] RDX: 000000000000000f RSI: 00007fa1a7fc80a0 RDI: 0000000000000008 [ 501.971819][T10534] RBP: 00007fa1a7fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 501.971831][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.971843][T10534] R13: 0000000000000000 R14: 00007fa1a73b5fa0 R15: 00007fff94cca158 [ 501.971871][T10534] [ 502.161248][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.407585][T10543] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 503.420272][T10543] bridge2: entered allmulticast mode [ 503.463842][ T30] audit: type=1400 audit(1754465474.178:917): avc: denied { connect } for pid=10532 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 505.097768][T10572] ubi: mtd0 is already attached to ubi31 [ 506.120328][T10584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.446698][ T5969] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 506.681074][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 506.687878][ T5969] usb 5-1: config 6 has an invalid interface number: 171 but max is 0 [ 506.700353][ T5969] usb 5-1: config 6 has no interface number 0 [ 506.711310][ T5969] usb 5-1: config 6 interface 171 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 506.763935][ T5969] usb 5-1: config 6 interface 171 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 506.833262][ T5969] usb 5-1: config 6 interface 171 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 506.924213][ T5969] usb 5-1: config 6 interface 171 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 506.945428][ T5969] usb 5-1: config 6 interface 171 has no altsetting 0 [ 507.080816][ T5969] usb 5-1: Dual-Role OTG device on HNP port [ 507.093403][ T5969] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e [ 507.346505][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.411492][ T5969] usb 5-1: Product: syz [ 507.419581][ T5969] usb 5-1: Manufacturer: syz [ 507.431016][ T5969] usb 5-1: SerialNumber: syz [ 507.978079][ T5969] usb_ehset_test 5-1:6.171: probe with driver usb_ehset_test failed with error -32 [ 507.996080][ T5969] usb 5-1: USB disconnect, device number 16 [ 510.436505][T10622] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1024'. [ 510.555307][T10624] ubi: mtd0 is already attached to ubi31 [ 510.582441][ T30] audit: type=1400 audit(1754465481.318:918): avc: denied { shutdown } for pid=10621 comm="syz.5.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 510.841337][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 510.866038][T10628] FAULT_INJECTION: forcing a failure. [ 510.866038][T10628] name failslab, interval 1, probability 0, space 0, times 0 [ 510.890805][T10628] CPU: 0 UID: 0 PID: 10628 Comm: syz.6.1026 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 510.890833][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.890844][T10628] Call Trace: [ 510.890850][T10628] [ 510.890858][T10628] dump_stack_lvl+0x16c/0x1f0 [ 510.890891][T10628] should_fail_ex+0x512/0x640 [ 510.890909][T10628] ? fs_reclaim_acquire+0xae/0x150 [ 510.890937][T10628] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 510.890961][T10628] should_failslab+0xc2/0x120 [ 510.890992][T10628] __kmalloc_noprof+0xd2/0x510 [ 510.891017][T10628] tomoyo_realpath_from_path+0xc2/0x6e0 [ 510.891043][T10628] ? tomoyo_profile+0x47/0x60 [ 510.891072][T10628] tomoyo_path_number_perm+0x245/0x580 [ 510.891091][T10628] ? tomoyo_path_number_perm+0x237/0x580 [ 510.891114][T10628] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 510.891137][T10628] ? find_held_lock+0x2b/0x80 [ 510.891188][T10628] ? find_held_lock+0x2b/0x80 [ 510.891211][T10628] ? hook_file_ioctl_common+0x145/0x410 [ 510.891245][T10628] ? __fget_files+0x20e/0x3c0 [ 510.891272][T10628] security_file_ioctl+0x9b/0x240 [ 510.891298][T10628] __x64_sys_ioctl+0xb7/0x210 [ 510.891328][T10628] do_syscall_64+0xcd/0x4c0 [ 510.891358][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.891378][T10628] RIP: 0033:0x7f5d0c38eb69 [ 510.891394][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.891413][T10628] RSP: 002b:00007f5d0d272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.891431][T10628] RAX: ffffffffffffffda RBX: 00007f5d0c5b5fa0 RCX: 00007f5d0c38eb69 [ 510.891444][T10628] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 510.891456][T10628] RBP: 00007f5d0d272090 R08: 0000000000000000 R09: 0000000000000000 [ 510.891468][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.891479][T10628] R13: 0000000000000000 R14: 00007f5d0c5b5fa0 R15: 00007ffd5b803888 [ 510.891507][T10628] [ 511.090423][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.137792][T10628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.676351][ T10] usb 6-1: device descriptor read/64, error -71 [ 512.028678][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 512.191818][T10647] FAULT_INJECTION: forcing a failure. [ 512.191818][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 512.204671][T10647] CPU: 0 UID: 0 PID: 10647 Comm: syz.1.1032 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 512.204697][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.204708][T10647] Call Trace: [ 512.204715][T10647] [ 512.204722][T10647] dump_stack_lvl+0x16c/0x1f0 [ 512.204754][T10647] should_fail_ex+0x512/0x640 [ 512.204772][T10647] ? fs_reclaim_acquire+0xae/0x150 [ 512.204800][T10647] ? tomoyo_encode2+0x100/0x3e0 [ 512.204823][T10647] should_failslab+0xc2/0x120 [ 512.204845][T10647] __kmalloc_noprof+0xd2/0x510 [ 512.204871][T10647] ? d_absolute_path+0x136/0x1a0 [ 512.204904][T10647] tomoyo_encode2+0x100/0x3e0 [ 512.204932][T10647] tomoyo_encode+0x29/0x50 [ 512.204954][T10647] tomoyo_realpath_from_path+0x18f/0x6e0 [ 512.204989][T10647] tomoyo_path_number_perm+0x245/0x580 [ 512.205009][T10647] ? tomoyo_path_number_perm+0x237/0x580 [ 512.205032][T10647] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 512.205086][T10647] ? find_held_lock+0x2b/0x80 [ 512.205109][T10647] ? hook_file_ioctl_common+0x145/0x410 [ 512.205143][T10647] ? __fget_files+0x20e/0x3c0 [ 512.205170][T10647] security_file_ioctl+0x9b/0x240 [ 512.205196][T10647] __x64_sys_ioctl+0xb7/0x210 [ 512.205227][T10647] do_syscall_64+0xcd/0x4c0 [ 512.205257][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.205277][T10647] RIP: 0033:0x7ffbecd8eb69 [ 512.205292][T10647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.205311][T10647] RSP: 002b:00007ffbedca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.205329][T10647] RAX: ffffffffffffffda RBX: 00007ffbecfb6080 RCX: 00007ffbecd8eb69 [ 512.205342][T10647] RDX: 0000200000000240 RSI: 0000000040045612 RDI: 000000000000000d [ 512.205354][T10647] RBP: 00007ffbedca0090 R08: 0000000000000000 R09: 0000000000000000 [ 512.205366][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.205377][T10647] R13: 0000000000000000 R14: 00007ffbecfb6080 R15: 00007ffc0ac7a8f8 [ 512.205405][T10647] [ 512.206105][T10647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 512.422953][ T10] usb 6-1: device descriptor read/64, error -71 [ 512.440754][T10647] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 512.896929][ T10] usb usb6-port1: attempt power cycle [ 513.132623][T10652] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 513.132623][T10652] program syz.4.1031 not setting count and/or reply_len properly [ 513.391090][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 513.561053][T10655] FAULT_INJECTION: forcing a failure. [ 513.561053][T10655] name failslab, interval 1, probability 0, space 0, times 0 [ 513.573891][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.5.1034 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 513.573916][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.573923][T10655] Call Trace: [ 513.573928][T10655] [ 513.573932][T10655] dump_stack_lvl+0x16c/0x1f0 [ 513.573953][T10655] should_fail_ex+0x512/0x640 [ 513.573966][T10655] should_failslab+0xc2/0x120 [ 513.573980][T10655] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 513.573992][T10655] ? dst_alloc+0x99/0x1a0 [ 513.574008][T10655] dst_alloc+0x99/0x1a0 [ 513.574023][T10655] ip6_blackhole_route+0x5f/0x4e0 [ 513.574042][T10655] xfrm_lookup_route+0x10e/0x200 [ 513.574054][T10655] ip6_dst_lookup_flow+0x15c/0x1d0 [ 513.574070][T10655] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 513.574083][T10655] ? kasan_record_aux_stack+0xa7/0xc0 [ 513.574099][T10655] ? ip6_sk_dst_lookup_flow+0x162/0x970 [ 513.574112][T10655] ? ip6_sk_dst_lookup_flow+0x19a/0x970 [ 513.574128][T10655] ip6_sk_dst_lookup_flow+0x56d/0x970 [ 513.574145][T10655] udpv6_sendmsg+0x19ef/0x2d20 [ 513.574156][T10655] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 513.574179][T10655] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 513.574189][T10655] ? avc_has_perm_noaudit+0x149/0x3b0 [ 513.574209][T10655] ? avc_has_perm+0x144/0x1f0 [ 513.574241][T10655] ? __import_iovec+0x1dd/0x650 [ 513.574254][T10655] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 513.574266][T10655] ? inet6_sendmsg+0x105/0x140 [ 513.574275][T10655] inet6_sendmsg+0x105/0x140 [ 513.574287][T10655] ____sys_sendmsg+0x705/0xc70 [ 513.574299][T10655] ? copy_msghdr_from_user+0x10a/0x160 [ 513.574314][T10655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.574328][T10655] ? __pfx__kstrtoull+0x10/0x10 [ 513.574347][T10655] ___sys_sendmsg+0x134/0x1d0 [ 513.574363][T10655] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.574386][T10655] ? find_held_lock+0x2b/0x80 [ 513.574410][T10655] __sys_sendmmsg+0x200/0x420 [ 513.574427][T10655] ? __pfx___sys_sendmmsg+0x10/0x10 [ 513.574448][T10655] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 513.574471][T10655] ? fput+0x9b/0xd0 [ 513.574488][T10655] ? ksys_write+0x1ac/0x250 [ 513.574499][T10655] ? __pfx_ksys_write+0x10/0x10 [ 513.574513][T10655] __x64_sys_sendmmsg+0x9c/0x100 [ 513.574528][T10655] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.574543][T10655] do_syscall_64+0xcd/0x4c0 [ 513.574561][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.574572][T10655] RIP: 0033:0x7f56fc78eb69 [ 513.574582][T10655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.574592][T10655] RSP: 002b:00007f56fd55b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 513.574603][T10655] RAX: ffffffffffffffda RBX: 00007f56fc9b6080 RCX: 00007f56fc78eb69 [ 513.574610][T10655] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 513.574617][T10655] RBP: 00007f56fd55b090 R08: 0000000000000000 R09: 0000000000000000 [ 513.574623][T10655] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 513.574629][T10655] R13: 0000000000000000 R14: 00007f56fc9b6080 R15: 00007fff8e189098 [ 513.574644][T10655] [ 514.494204][ T10] usb 6-1: device not accepting address 26, error -71 [ 514.882835][ T30] audit: type=1400 audit(1754465485.588:919): avc: denied { write } for pid=10661 comm="syz.5.1035" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 515.510898][T10669] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 515.523895][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1037'. [ 515.718774][T10678] ubi: mtd0 is already attached to ubi31 [ 516.059434][ T24] IPVS: starting estimator thread 0... [ 516.494128][T10682] IPVS: using max 28 ests per chain, 67200 per kthread [ 517.154303][ T30] audit: type=1400 audit(1754465487.888:920): avc: denied { map } for pid=10693 comm="syz.2.1044" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 523.200525][T10754] binder: BINDER_SET_CONTEXT_MGR already set [ 523.208812][T10754] binder: 10753:10754 ioctl 4018620d 200000000100 returned -16 [ 523.223944][ T30] audit: type=1400 audit(1754465493.928:921): avc: denied { map } for pid=10753 comm="syz.5.1058" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 523.248983][T10760] ubi: mtd0 is already attached to ubi31 [ 527.338336][T10786] ntfs3(nullb0): Primary boot signature is not NTFS. [ 527.345376][T10786] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 527.507287][ T30] audit: type=1400 audit(1754465498.238:922): avc: denied { mounton } for pid=10782 comm="syz.6.1067" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 528.593061][T10810] openvswitch: netlink: Flow key attr not present in new flow. [ 530.025884][T10815] capability: warning: `syz.2.1077' uses 32-bit capabilities (legacy support in use) [ 530.144725][T10820] ubi: mtd0 is already attached to ubi31 [ 530.193643][T10823] netlink: 'syz.5.1080': attribute type 1 has an invalid length. [ 530.256145][T10818] syzkaller0: entered promiscuous mode [ 530.287766][T10818] syzkaller0: entered allmulticast mode [ 531.337103][ T30] audit: type=1400 audit(1754465502.038:923): avc: denied { ioctl } for pid=10830 comm="syz.2.1082" path="socket:[32093]" dev="sockfs" ino=32093 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.519156][T10838] trusted_key: encrypted_key: master key parameter 'userzsyz' is invalid [ 533.036263][ T30] audit: type=1400 audit(1754465503.738:924): avc: denied { remount } for pid=10845 comm="syz.4.1084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 534.347360][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1086'. [ 534.653570][T10866] openvswitch: netlink: Flow key attr not present in new flow. [ 534.662800][ T979] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 535.307702][T10861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input46 [ 535.377633][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 535.513473][ T979] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 535.578157][ T979] usb 5-1: config 0 has no interface number 0 [ 535.623109][ T979] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 535.642190][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.650244][ T979] usb 5-1: Product: syz [ 535.654455][ T979] usb 5-1: Manufacturer: syz [ 535.659041][ T979] usb 5-1: SerialNumber: syz [ 535.688274][ T979] usb 5-1: config 0 descriptor?? [ 536.405430][ T979] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 536.721140][ T979] usb 5-1: No streaming interface found for terminal 6. [ 536.735163][ T979] usb 5-1: Failed to initialize entity for entity 5 [ 536.749929][ T979] usb 5-1: Failed to register entities (-22). [ 536.807458][ T979] usb 5-1: USB disconnect, device number 17 [ 536.922329][ T30] audit: type=1400 audit(1754465507.648:925): avc: denied { write } for pid=10884 comm="syz.6.1094" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 537.757467][ T30] audit: type=1400 audit(1754465508.468:926): avc: denied { create } for pid=10890 comm="syz.2.1095" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.192196][ T30] audit: type=1400 audit(1754465508.498:927): avc: denied { write } for pid=10890 comm="syz.2.1095" name="file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.425138][ T30] audit: type=1400 audit(1754465508.498:928): avc: denied { open } for pid=10890 comm="syz.2.1095" path="/214/file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.591375][ T30] audit: type=1400 audit(1754465508.498:929): avc: denied { ioctl } for pid=10890 comm="syz.2.1095" path="/214/file0" dev="tmpfs" ino=1163 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.635722][T10900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1096'. [ 538.666829][T10900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1096'. [ 538.787559][T10906] 9pnet_fd: Insufficient options for proto=fd [ 538.846154][T10908] sctp: [Deprecated]: syz.6.1100 (pid 10908) Use of int in max_burst socket option. [ 538.846154][T10908] Use struct sctp_assoc_value instead [ 539.141083][ T30] audit: type=1400 audit(1754465509.868:930): avc: denied { unlink } for pid=5848 comm="syz-executor" name="file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.356899][T10922] openvswitch: netlink: Flow key attr not present in new flow. [ 543.496261][ T30] audit: type=1400 audit(1754465514.088:931): avc: denied { watch watch_reads } for pid=10965 comm="syz.4.1115" path="/230" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 543.880032][T10972] netlink: 'syz.4.1115': attribute type 21 has an invalid length. [ 543.888170][T10972] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1115'. [ 545.230844][T10987] netlink: 'syz.6.1120': attribute type 10 has an invalid length. [ 545.244480][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.252696][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.291873][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1120'. [ 545.319258][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.326428][T10987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.333798][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.340848][T10987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.979051][T10987] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 546.004979][T10989] bridge_slave_1: left allmulticast mode [ 546.231319][T10989] bridge_slave_1: left promiscuous mode [ 546.253217][T10989] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.357181][T10989] bridge_slave_0: left allmulticast mode [ 546.366399][T10989] bridge_slave_0: left promiscuous mode [ 546.400403][T10989] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.434501][T11002] netlink: 'syz.2.1122': attribute type 21 has an invalid length. [ 546.570921][T11004] netlink: 'syz.1.1123': attribute type 21 has an invalid length. [ 546.578838][T11004] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1123'. [ 546.849667][T10989] bond0: (slave bridge0): Releasing backup interface [ 546.958303][T11004] netlink: 'syz.1.1123': attribute type 4 has an invalid length. [ 546.982381][T11004] netlink: 'syz.1.1123': attribute type 3 has an invalid length. [ 546.990136][T11004] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1123'. [ 547.305156][T11009] netlink: 'syz.4.1125': attribute type 17 has an invalid length. [ 548.247361][ T30] audit: type=1400 audit(1754465518.978:932): avc: denied { bind } for pid=11014 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.186746][T11039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input48 [ 549.494342][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880563fe400: rx timeout, send abort [ 549.729006][ T30] audit: type=1400 audit(1754465520.458:933): avc: denied { read } for pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 549.759340][ T30] audit: type=1400 audit(1754465520.458:934): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.790965][T10879] libceph: connect (1)[c::]:6789 error -101 [ 549.802696][T10879] libceph: mon0 (1)[c::]:6789 connect error [ 549.825002][ T30] audit: type=1400 audit(1754465520.458:935): avc: denied { append } for pid=5199 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 549.847988][ T30] audit: type=1400 audit(1754465520.458:936): avc: denied { open } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 549.938367][T11042] ceph: No mds server is up or the cluster is laggy [ 549.973280][ T30] audit: type=1400 audit(1754465520.458:937): avc: denied { getattr } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 550.002669][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880563fe400: abort rx timeout. Force session deactivation [ 550.330464][T11053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.406073][ T979] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 550.833041][ T979] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 550.842813][ T979] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 550.884012][ T979] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.953210][ T979] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 550.962519][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 550.988092][ T979] usb 6-1: Product: syz [ 551.005493][ T979] usb 6-1: Manufacturer: syz [ 551.036147][ T979] usb 6-1: SerialNumber: syz [ 551.120003][ T30] audit: type=1400 audit(1754465521.848:938): avc: denied { relabelfrom } for pid=11058 comm="syz.2.1138" name="NETLINK" dev="sockfs" ino=32633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.120659][T11059] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 551.262394][ T979] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 551.288313][ T30] audit: type=1400 audit(1754465521.948:939): avc: denied { relabelto } for pid=11058 comm="syz.2.1138" name="NETLINK" dev="sockfs" ino=32633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:hald_exec_t:s0" [ 551.338230][T11064] tipc: Started in network mode [ 551.343479][T11064] tipc: Node identity 3e26421156ad, cluster identity 4711 [ 551.350841][T11064] tipc: Enabled bearer , priority 0 [ 551.367086][T11064] syzkaller0: entered promiscuous mode [ 551.374958][T11064] syzkaller0: entered allmulticast mode [ 551.401934][ T30] audit: type=1400 audit(1754465521.968:940): avc: denied { write } for pid=11054 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 551.440795][T11064] syzkaller0: mtu less than device minimum [ 551.463928][T11061] tipc: Resetting bearer [ 551.572692][ T30] audit: type=1400 audit(1754465522.198:941): avc: denied { read write } for pid=11049 comm="syz.5.1134" name="lp0" dev="devtmpfs" ino=3166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 551.596933][ T30] audit: type=1400 audit(1754465522.198:942): avc: denied { open } for pid=11049 comm="syz.5.1134" path="/dev/usb/lp0" dev="devtmpfs" ino=3166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 551.643662][T11061] tipc: Disabling bearer [ 551.910418][ T979] usb 6-1: USB disconnect, device number 28 [ 551.957635][ T979] usblp0: removed [ 552.400331][T11079] overlayfs: failed to resolve './file0': -2 [ 552.588589][T11084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input49 [ 553.643663][T11098] tipc: Started in network mode [ 553.648655][T11098] tipc: Node identity 22112b488b04, cluster identity 4711 [ 553.656239][T11098] tipc: Enabled bearer , priority 0 [ 553.663868][T11098] syzkaller0: entered promiscuous mode [ 553.669429][T11098] syzkaller0: entered allmulticast mode [ 553.826839][T11101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.847520][T11098] FAULT_INJECTION: forcing a failure. [ 553.847520][T11098] name failslab, interval 1, probability 0, space 0, times 0 [ 553.883471][T11098] CPU: 1 UID: 0 PID: 11098 Comm: syz.4.1147 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 553.883497][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.883508][T11098] Call Trace: [ 553.883514][T11098] [ 553.883520][T11098] dump_stack_lvl+0x16c/0x1f0 [ 553.883551][T11098] should_fail_ex+0x512/0x640 [ 553.883568][T11098] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 553.883588][T11098] should_failslab+0xc2/0x120 [ 553.883609][T11098] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 553.883626][T11098] ? __alloc_skb+0x2b2/0x380 [ 553.883654][T11098] __alloc_skb+0x2b2/0x380 [ 553.883676][T11098] ? __pfx___alloc_skb+0x10/0x10 [ 553.883703][T11098] ? if_nlmsg_size+0x475/0xaf0 [ 553.883733][T11098] rtmsg_ifinfo_build_skb+0x81/0x280 [ 553.883755][T11098] rtnetlink_event+0xf3/0x1f0 [ 553.883774][T11098] notifier_call_chain+0xbc/0x410 [ 553.883799][T11098] ? __pfx_rtnetlink_event+0x10/0x10 [ 553.883819][T11098] call_netdevice_notifiers_info+0xbe/0x140 [ 553.883842][T11098] netif_set_mtu_ext+0x590/0x7d0 [ 553.883868][T11098] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 553.883892][T11098] ? __lock_acquire+0xb97/0x1ce0 [ 553.883928][T11098] netif_set_mtu+0x98/0x140 [ 553.883953][T11098] ? __pfx_netif_set_mtu+0x10/0x10 [ 553.883992][T11098] ? full_name_hash+0xbc/0x110 [ 553.884020][T11098] dev_set_mtu+0xb2/0x260 [ 553.884039][T11098] dev_ifsioc+0xd28/0x1f70 [ 553.884075][T11098] ? __pfx_dev_ifsioc+0x10/0x10 [ 553.884100][T11098] ? __pfx___mutex_lock+0x10/0x10 [ 553.884136][T11098] ? dev_load+0x8e/0x240 [ 553.884167][T11098] dev_ioctl+0x223/0x10e0 [ 553.884193][T11098] sock_do_ioctl+0x19d/0x280 [ 553.884212][T11098] ? __pfx_sock_do_ioctl+0x10/0x10 [ 553.884236][T11098] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 553.884262][T11098] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 553.884291][T11098] sock_ioctl+0x227/0x6b0 [ 553.884311][T11098] ? __pfx_sock_ioctl+0x10/0x10 [ 553.884326][T11098] ? hook_file_ioctl_common+0x145/0x410 [ 553.884361][T11098] ? selinux_file_ioctl+0x180/0x270 [ 553.884382][T11098] ? selinux_file_ioctl+0xb4/0x270 [ 553.884405][T11098] ? __pfx_sock_ioctl+0x10/0x10 [ 553.884425][T11098] __x64_sys_ioctl+0x18b/0x210 [ 553.884453][T11098] do_syscall_64+0xcd/0x4c0 [ 553.884482][T11098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.884501][T11098] RIP: 0033:0x7fa1a718eb69 [ 553.884517][T11098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.884535][T11098] RSP: 002b:00007fa1a7fc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.884552][T11098] RAX: ffffffffffffffda RBX: 00007fa1a73b5fa0 RCX: 00007fa1a718eb69 [ 553.884565][T11098] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 553.884576][T11098] RBP: 00007fa1a7fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 553.884587][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.884599][T11098] R13: 0000000000000000 R14: 00007fa1a73b5fa0 R15: 00007fff94cca158 [ 553.884627][T11098] [ 554.199094][T11098] tipc: Resetting bearer [ 554.207530][T11097] tipc: Resetting bearer [ 554.231694][T11097] tipc: Disabling bearer [ 554.331367][ T979] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 554.482097][ T5969] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 554.514503][ T979] usb 7-1: Using ep0 maxpacket: 32 [ 554.531056][T11082] Bluetooth: hci2: command 0x0406 tx timeout [ 554.532740][ T979] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 554.596155][ T979] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.741893][ T979] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 554.755765][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.783868][ T5969] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 554.796891][ T979] usb 7-1: Product: syz [ 554.804689][ T5969] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.910659][ T979] usb 7-1: Manufacturer: syz [ 554.921287][ T979] usb 7-1: SerialNumber: syz [ 555.061298][T10879] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 555.062973][ T5969] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 555.165954][ T979] usb 7-1: config 0 descriptor?? [ 555.211513][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.267338][ T5969] usbtmc 3-1:16.0: bulk endpoints not found [ 555.331093][T10879] usb 5-1: Using ep0 maxpacket: 16 [ 555.347319][T10879] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 555.355576][T10879] usb 5-1: config 0 has no interface number 0 [ 555.365846][T10879] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 555.375142][T10879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.383352][T10879] usb 5-1: Product: syz [ 555.387558][T10879] usb 5-1: Manufacturer: syz [ 555.392221][T10879] usb 5-1: SerialNumber: syz [ 555.402199][ T5969] usb 7-1: USB disconnect, device number 6 [ 555.408266][T10879] usb 5-1: config 0 descriptor?? [ 555.421729][T10879] hub 5-1:0.132: bad descriptor, ignoring hub [ 555.435833][T10879] hub 5-1:0.132: probe with driver hub failed with error -5 [ 555.447026][T10879] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input50 [ 555.861577][ T979] usb 5-1: USB disconnect, device number 18 [ 556.117359][T11127] overlayfs: failed to resolve './file0': -2 [ 556.969446][T11142] netlink: 'syz.5.1158': attribute type 4 has an invalid length. [ 556.990282][T11139] netlink: 'syz.5.1158': attribute type 4 has an invalid length. [ 557.033616][T11139] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1158'. [ 557.233893][ T5913] usb 3-1: USB disconnect, device number 31 [ 557.336909][T11149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input51 [ 557.357235][ T30] audit: type=1400 audit(1754465528.088:943): avc: denied { accept } for pid=11147 comm="syz.5.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 558.107442][T11161] SELinux: policydb magic number 0x3eec5ae3 does not match expected magic number 0xf97cff8c [ 558.118854][T11161] SELinux: failed to load policy [ 558.125285][ T30] audit: type=1400 audit(1754465528.828:944): avc: denied { load_policy } for pid=11159 comm="syz.6.1164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 558.824436][T11166] overlayfs: failed to resolve './file0': -2 [ 559.088454][ T30] audit: type=1400 audit(1754465529.818:945): avc: denied { ioctl } for pid=11168 comm="syz.6.1167" path="socket:[34847]" dev="sockfs" ino=34847 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 559.113834][T11179] FAULT_INJECTION: forcing a failure. [ 559.113834][T11179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.149438][T11179] CPU: 1 UID: 0 PID: 11179 Comm: syz.5.1168 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 559.149457][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.149463][T11179] Call Trace: [ 559.149467][T11179] [ 559.149472][T11179] dump_stack_lvl+0x16c/0x1f0 [ 559.149492][T11179] should_fail_ex+0x512/0x640 [ 559.149506][T11179] _copy_to_user+0x32/0xd0 [ 559.149519][T11179] simple_read_from_buffer+0xcb/0x170 [ 559.149533][T11179] proc_fail_nth_read+0x197/0x240 [ 559.149547][T11179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.149560][T11179] ? rw_verify_area+0xcf/0x6c0 [ 559.149577][T11179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.149589][T11179] vfs_read+0x1e4/0xc60 [ 559.149602][T11179] ? __pfx___mutex_lock+0x10/0x10 [ 559.149618][T11179] ? __pfx_vfs_read+0x10/0x10 [ 559.149633][T11179] ? __fget_files+0x20e/0x3c0 [ 559.149650][T11179] ksys_read+0x12a/0x250 [ 559.149661][T11179] ? __pfx_ksys_read+0x10/0x10 [ 559.149676][T11179] do_syscall_64+0xcd/0x4c0 [ 559.149696][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.149707][T11179] RIP: 0033:0x7f56fc78d57c [ 559.149716][T11179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 559.149727][T11179] RSP: 002b:00007f56fd55b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.149738][T11179] RAX: ffffffffffffffda RBX: 00007f56fc9b6080 RCX: 00007f56fc78d57c [ 559.149745][T11179] RDX: 000000000000000f RSI: 00007f56fd55b0a0 RDI: 0000000000000004 [ 559.149752][T11179] RBP: 00007f56fd55b090 R08: 0000000000000000 R09: 0000000000000000 [ 559.149758][T11179] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 559.149764][T11179] R13: 0000000000000001 R14: 00007f56fc9b6080 R15: 00007fff8e189098 [ 559.149779][T11179] [ 559.432817][T11184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'. [ 559.972553][T11169] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 560.669386][T11169] bridge7: entered allmulticast mode [ 561.438738][T11195] loop3: detected capacity change from 0 to 8 [ 561.631867][T11196] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input52 [ 561.691393][ T30] audit: type=1400 audit(1754465532.378:946): avc: denied { execute } for pid=11193 comm="syz.5.1172" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 561.724162][T11203] FAULT_INJECTION: forcing a failure. [ 561.724162][T11203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.821408][T11203] CPU: 1 UID: 0 PID: 11203 Comm: syz.6.1173 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 561.821430][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.821437][T11203] Call Trace: [ 561.821442][T11203] [ 561.821447][T11203] dump_stack_lvl+0x16c/0x1f0 [ 561.821467][T11203] should_fail_ex+0x512/0x640 [ 561.821481][T11203] _copy_from_user+0x2e/0xd0 [ 561.821494][T11203] copy_msghdr_from_user+0x98/0x160 [ 561.821510][T11203] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 561.821533][T11203] ___sys_sendmsg+0xfe/0x1d0 [ 561.821548][T11203] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.821576][T11203] ? __mutex_unlock_slowpath+0x100/0x800 [ 561.821600][T11203] __sys_sendmsg+0x16d/0x220 [ 561.821616][T11203] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.821641][T11203] do_syscall_64+0xcd/0x4c0 [ 561.821659][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.821671][T11203] RIP: 0033:0x7f5d0c38eb69 [ 561.821680][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.821690][T11203] RSP: 002b:00007f5d0d272038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.821701][T11203] RAX: ffffffffffffffda RBX: 00007f5d0c5b5fa0 RCX: 00007f5d0c38eb69 [ 561.821708][T11203] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 561.821715][T11203] RBP: 00007f5d0d272090 R08: 0000000000000000 R09: 0000000000000000 [ 561.821722][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.821728][T11203] R13: 0000000000000000 R14: 00007f5d0c5b5fa0 R15: 00007ffd5b803888 [ 561.821742][T11203] [ 562.359738][T11195] Dev loop3: unable to read RDB block 8 [ 562.365614][T11195] loop3: unable to read partition table [ 562.371401][T11195] loop3: partition table beyond EOD, truncated [ 562.377544][T11195] loop_reread_partitions: partition scan of loop3 (Cjmmý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 562.623484][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.629797][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.795340][T11218] FAULT_INJECTION: forcing a failure. [ 562.795340][T11218] name failslab, interval 1, probability 0, space 0, times 0 [ 562.973563][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.2.1178 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 562.973596][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.973607][T11218] Call Trace: [ 562.973614][T11218] [ 562.973622][T11218] dump_stack_lvl+0x16c/0x1f0 [ 562.973651][T11218] should_fail_ex+0x512/0x640 [ 562.973667][T11218] ? fs_reclaim_acquire+0xae/0x150 [ 562.973692][T11218] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 562.973714][T11218] should_failslab+0xc2/0x120 [ 562.973736][T11218] __kmalloc_noprof+0xd2/0x510 [ 562.973763][T11218] tomoyo_realpath_from_path+0xc2/0x6e0 [ 562.973792][T11218] ? tomoyo_profile+0x47/0x60 [ 562.973822][T11218] tomoyo_path_number_perm+0x245/0x580 [ 562.973841][T11218] ? tomoyo_path_number_perm+0x237/0x580 [ 562.973866][T11218] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.973890][T11218] ? find_held_lock+0x2b/0x80 [ 562.973937][T11218] ? find_held_lock+0x2b/0x80 [ 562.973957][T11218] ? hook_file_ioctl_common+0x145/0x410 [ 562.974001][T11218] ? __fget_files+0x20e/0x3c0 [ 562.974025][T11218] security_file_ioctl+0x9b/0x240 [ 562.974050][T11218] __x64_sys_ioctl+0xb7/0x210 [ 562.974076][T11218] do_syscall_64+0xcd/0x4c0 [ 562.974105][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.974121][T11218] RIP: 0033:0x7fae7fb8eb69 [ 562.974135][T11218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.974150][T11218] RSP: 002b:00007fae80a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.974167][T11218] RAX: ffffffffffffffda RBX: 00007fae7fdb6080 RCX: 00007fae7fb8eb69 [ 562.974178][T11218] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000005 [ 562.974189][T11218] RBP: 00007fae80a17090 R08: 0000000000000000 R09: 0000000000000000 [ 562.974199][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.974208][T11218] R13: 0000000000000000 R14: 00007fae7fdb6080 R15: 00007ffe6d32d1f8 [ 562.974232][T11218] [ 563.248917][T11218] ERROR: Out of memory at tomoyo_realpath_from_path. [ 564.424664][ T30] audit: type=1400 audit(1754465535.158:947): avc: denied { watch watch_reads } for pid=11250 comm="syz.2.1186" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 564.675556][T11261] FAULT_INJECTION: forcing a failure. [ 564.675556][T11261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.700612][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.5.1188 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 564.700642][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.700653][T11261] Call Trace: [ 564.700659][T11261] [ 564.700667][T11261] dump_stack_lvl+0x16c/0x1f0 [ 564.700699][T11261] should_fail_ex+0x512/0x640 [ 564.700722][T11261] _copy_from_iter+0x29f/0x16f0 [ 564.700747][T11261] ? __alloc_skb+0x200/0x380 [ 564.700773][T11261] ? __pfx__copy_from_iter+0x10/0x10 [ 564.700797][T11261] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 564.700837][T11261] netlink_sendmsg+0x829/0xdd0 [ 564.700872][T11261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.700912][T11261] ____sys_sendmsg+0xa95/0xc70 [ 564.700940][T11261] ? copy_msghdr_from_user+0x10a/0x160 [ 564.700966][T11261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.700998][T11261] ___sys_sendmsg+0x134/0x1d0 [ 564.701026][T11261] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.701079][T11261] ? __mutex_unlock_slowpath+0x100/0x800 [ 564.701116][T11261] __sys_sendmsg+0x16d/0x220 [ 564.701143][T11261] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.701187][T11261] do_syscall_64+0xcd/0x4c0 [ 564.701217][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.701236][T11261] RIP: 0033:0x7f56fc78eb69 [ 564.701251][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.701269][T11261] RSP: 002b:00007f56fd57c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.701288][T11261] RAX: ffffffffffffffda RBX: 00007f56fc9b5fa0 RCX: 00007f56fc78eb69 [ 564.701301][T11261] RDX: 0000000000000000 RSI: 0000200000007040 RDI: 0000000000000003 [ 564.701312][T11261] RBP: 00007f56fd57c090 R08: 0000000000000000 R09: 0000000000000000 [ 564.701324][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.701334][T11261] R13: 0000000000000000 R14: 00007f56fc9b5fa0 R15: 00007fff8e189098 [ 564.701358][T11261] [ 565.119690][ T5913] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 565.179418][T11264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input53 [ 565.302492][ T5913] usb 3-1: config 16 has an invalid descriptor of length 49, skipping remainder of the config [ 565.321394][T11224] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 565.321394][T11224] program syz.6.1176 not setting count and/or reply_len properly [ 565.342303][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.395162][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.558225][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.613926][ T5913] usbtmc 3-1:16.0: bulk endpoints not found [ 566.643021][T11282] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1193'. [ 566.712486][T11282] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1193'. [ 566.820150][T11282] netlink: 'syz.5.1193': attribute type 6 has an invalid length. [ 566.936937][T11282] netlink: 'syz.5.1193': attribute type 5 has an invalid length. [ 566.946675][T11282] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1193'. [ 567.110112][T11292] program syz.6.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.131281][ T30] audit: type=1400 audit(1754465538.508:948): avc: denied { setopt } for pid=11250 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 568.160184][T11289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1194'. [ 568.238364][T11289] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1194'. [ 568.412039][T11289] netlink: 'syz.1.1194': attribute type 6 has an invalid length. [ 568.515050][T11289] netlink: 'syz.1.1194': attribute type 5 has an invalid length. [ 568.729618][T11289] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1194'. [ 568.923428][T11304] netlink: 'syz.6.1197': attribute type 21 has an invalid length. [ 568.931401][T11304] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1197'. [ 568.941431][T11304] netlink: 'syz.6.1197': attribute type 4 has an invalid length. [ 568.949261][T11304] netlink: 'syz.6.1197': attribute type 3 has an invalid length. [ 568.957117][T11304] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1197'. [ 569.352008][ T5963] usb 3-1: USB disconnect, device number 32 [ 569.596772][T11315] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1198'. [ 569.606153][T11315] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1198'. [ 569.691150][T11315] netlink: 'syz.4.1198': attribute type 6 has an invalid length. [ 570.496157][T11315] netlink: 'syz.4.1198': attribute type 5 has an invalid length. [ 571.753960][T11331] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 571.763015][T11331] bridge4: entered allmulticast mode [ 572.592118][T11344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.641056][T11344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.675106][T11344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.710442][T11344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.881728][T11350] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input55 [ 573.063112][T11353] netlink: 'syz.5.1210': attribute type 12 has an invalid length. [ 573.072243][ T30] audit: type=1400 audit(1754465543.798:949): avc: denied { getopt } for pid=11352 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 573.739835][T11366] FAULT_INJECTION: forcing a failure. [ 573.739835][T11366] name failslab, interval 1, probability 0, space 0, times 0 [ 573.756562][T11366] CPU: 0 UID: 0 PID: 11366 Comm: syz.6.1215 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 573.756591][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.756601][T11366] Call Trace: [ 573.756608][T11366] [ 573.756615][T11366] dump_stack_lvl+0x16c/0x1f0 [ 573.756648][T11366] should_fail_ex+0x512/0x640 [ 573.756666][T11366] ? fs_reclaim_acquire+0xae/0x150 [ 573.756693][T11366] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 573.756718][T11366] should_failslab+0xc2/0x120 [ 573.756740][T11366] __kmalloc_noprof+0xd2/0x510 [ 573.756767][T11366] tomoyo_realpath_from_path+0xc2/0x6e0 [ 573.756794][T11366] ? tomoyo_profile+0x47/0x60 [ 573.756823][T11366] tomoyo_path_number_perm+0x245/0x580 [ 573.756843][T11366] ? tomoyo_path_number_perm+0x237/0x580 [ 573.756867][T11366] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 573.756890][T11366] ? find_held_lock+0x2b/0x80 [ 573.756940][T11366] ? find_held_lock+0x2b/0x80 [ 573.756962][T11366] ? hook_file_ioctl_common+0x145/0x410 [ 573.756997][T11366] ? __fget_files+0x20e/0x3c0 [ 573.757029][T11366] security_file_ioctl+0x9b/0x240 [ 573.757055][T11366] __x64_sys_ioctl+0xb7/0x210 [ 573.757086][T11366] do_syscall_64+0xcd/0x4c0 [ 573.757116][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.757136][T11366] RIP: 0033:0x7f5d0c38eb69 [ 573.757152][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.757170][T11366] RSP: 002b:00007f5d0d272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.757188][T11366] RAX: ffffffffffffffda RBX: 00007f5d0c5b5fa0 RCX: 00007f5d0c38eb69 [ 573.757201][T11366] RDX: 0000200000000080 RSI: 000000000000540f RDI: 0000000000000003 [ 573.757212][T11366] RBP: 00007f5d0d272090 R08: 0000000000000000 R09: 0000000000000000 [ 573.757224][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.757235][T11366] R13: 0000000000000000 R14: 00007f5d0c5b5fa0 R15: 00007ffd5b803888 [ 573.757262][T11366] [ 573.757270][T11366] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.603401][ T30] audit: type=1400 audit(1754465545.098:950): avc: denied { bind } for pid=11363 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 575.379072][ T30] audit: type=1326 audit(1754465546.048:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 576.128501][ T30] audit: type=1326 audit(1754465546.048:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 576.360126][ T30] audit: type=1326 audit(1754465546.108:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 577.272057][ T30] audit: type=1326 audit(1754465546.108:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 577.295442][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.389641][ T30] audit: type=1326 audit(1754465546.108:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 577.400778][T11404] netlink: 'syz.5.1223': attribute type 1 has an invalid length. [ 577.413018][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.480633][ T30] audit: type=1326 audit(1754465546.108:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 577.504900][ T30] audit: type=1326 audit(1754465546.108:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 577.530459][ T30] audit: type=1326 audit(1754465546.108:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a718eb69 code=0x7ffc0000 [ 577.597505][T11404] bond1: (slave geneve2): making interface the new active one [ 577.652640][T11415] FAULT_INJECTION: forcing a failure. [ 577.652640][T11415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.667600][T11404] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 577.681319][T11414] netlink: 'syz.2.1225': attribute type 21 has an invalid length. [ 577.707016][T11415] CPU: 0 UID: 0 PID: 11415 Comm: syz.5.1223 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 577.707047][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.707058][T11415] Call Trace: [ 577.707065][T11415] [ 577.707072][T11415] dump_stack_lvl+0x16c/0x1f0 [ 577.707106][T11415] should_fail_ex+0x512/0x640 [ 577.707130][T11415] _copy_from_iter+0x29f/0x16f0 [ 577.707156][T11415] ? __alloc_skb+0x200/0x380 [ 577.707182][T11415] ? __pfx__copy_from_iter+0x10/0x10 [ 577.707206][T11415] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 577.707244][T11415] netlink_sendmsg+0x829/0xdd0 [ 577.707278][T11415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.707318][T11415] ____sys_sendmsg+0xa95/0xc70 [ 577.707340][T11415] ? copy_msghdr_from_user+0x10a/0x160 [ 577.707367][T11415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.707402][T11415] ___sys_sendmsg+0x134/0x1d0 [ 577.707430][T11415] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.707485][T11415] ? __mutex_unlock_slowpath+0x100/0x800 [ 577.707522][T11415] __sys_sendmsg+0x16d/0x220 [ 577.707550][T11415] ? __pfx___sys_sendmsg+0x10/0x10 [ 577.707597][T11415] do_syscall_64+0xcd/0x4c0 [ 577.707627][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.707646][T11415] RIP: 0033:0x7f56fc78eb69 [ 577.707660][T11415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.707678][T11415] RSP: 002b:00007f56fd55b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.707695][T11415] RAX: ffffffffffffffda RBX: 00007f56fc9b6080 RCX: 00007f56fc78eb69 [ 577.707709][T11415] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 577.707720][T11415] RBP: 00007f56fd55b090 R08: 0000000000000000 R09: 0000000000000000 [ 577.707732][T11415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.707744][T11415] R13: 0000000000000000 R14: 00007f56fc9b6080 R15: 00007fff8e189098 [ 577.707772][T11415] [ 577.707975][ T6258] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 577.978781][T11413] __nla_validate_parse: 5 callbacks suppressed [ 577.978802][T11413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1226'. [ 578.033898][T11413] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1226'. [ 578.051297][T11413] netlink: 'syz.1.1226': attribute type 6 has an invalid length. [ 578.090061][T11413] netlink: 'syz.1.1226': attribute type 5 has an invalid length. [ 578.100337][T11413] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1226'. [ 578.138377][ T6258] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 578.152498][ T6258] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 578.200398][ T6258] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 578.653953][T11434] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 578.860957][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1229'. [ 578.874051][T11438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.941061][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 578.941076][ T30] audit: type=1400 audit(1754465549.518:986): avc: denied { accept } for pid=11433 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 579.126172][ T30] audit: type=1400 audit(1754465549.858:987): avc: denied { read } for pid=11441 comm="syz.1.1231" dev="sockfs" ino=35474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 579.172221][T11436] bond1: (slave geneve2): making interface the new active one [ 579.242342][T11436] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 579.263651][ T6258] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 579.273493][ T30] audit: type=1400 audit(1754465549.898:988): avc: denied { write } for pid=11441 comm="syz.1.1231" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 579.302945][ T6258] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 579.455568][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 579.473888][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 579.731582][ T30] audit: type=1400 audit(1754465550.468:989): avc: denied { read write } for pid=11451 comm="syz.2.1232" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 580.389402][ T30] audit: type=1400 audit(1754465550.468:990): avc: denied { open } for pid=11451 comm="syz.2.1232" path="/236/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 580.411550][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.541556][ T31] INFO: task syz.3.774:9609 blocked for more than 143 seconds. [ 580.771010][ T31] Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 [ 580.801586][T11461] syz.4.1234: attempt to access beyond end of device [ 580.801586][T11461] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 580.819415][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.828218][T11461] XFS (nbd4): SB validate failed with error -5. [ 580.836509][ T31] task:syz.3.774 state:D stack:25080 pid:9609 tgid:9608 ppid:5859 task_flags:0x400140 flags:0x00004006 [ 580.849157][ T31] Call Trace: [ 580.854466][ T31] [ 580.857409][ T31] __schedule+0x1190/0x5de0 [ 580.867166][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 580.888177][ T31] ? __pfx___schedule+0x10/0x10 [ 580.907244][ T31] ? find_held_lock+0x2b/0x80 [ 580.920336][ T31] ? schedule+0x2d7/0x3a0 [ 580.931565][ T31] schedule+0xe7/0x3a0 [ 580.938568][ T31] schedule_timeout+0x257/0x290 [ 580.966851][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 580.996272][ T30] audit: type=1400 audit(1754465551.718:991): avc: denied { write } for pid=11447 comm="syz.4.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 581.202470][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 581.219994][ T31] __wait_for_common+0x2fc/0x4e0 [ 581.238686][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 581.266420][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 581.290474][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 581.319193][ T31] disable_device+0x16f/0x280 [ 581.333226][ T31] ? __pfx_disable_device+0x10/0x10 [ 581.339734][ T31] __ib_unregister_device+0x2b4/0x480 [ 581.348613][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 581.366450][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 581.376058][ T31] nldev_dellink+0x21f/0x320 [ 581.380649][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 581.386671][ T31] ? cap_capable+0xb3/0x250 [ 581.393860][ T31] ? bpf_lsm_capable+0x9/0x10 [ 581.398840][ T31] ? security_capable+0x7e/0x260 [ 581.404273][ T31] ? ns_capable+0xd7/0x110 [ 581.408847][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 581.422121][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 581.427074][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 581.436275][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 581.442038][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 581.448607][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 581.458000][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 581.463627][ T31] ? selinux_netlink_send+0x578/0x830 [ 581.469154][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 581.482626][ T31] netlink_unicast+0x5aa/0x870 [ 581.489662][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 581.499124][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 581.515151][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 581.526719][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.537397][ T31] ____sys_sendmsg+0xa95/0xc70 [ 581.543525][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 581.554791][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.560151][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 581.584244][ T31] ___sys_sendmsg+0x134/0x1d0 [ 581.603978][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.621127][ T31] __sys_sendmsg+0x16d/0x220 [ 581.639573][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 581.650314][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 581.658788][ T31] do_syscall_64+0xcd/0x4c0 [ 581.663666][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.669634][ T31] RIP: 0033:0x7f18a158eb69 [ 581.674619][ T31] RSP: 002b:00007f18a2449038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.683604][ T31] RAX: ffffffffffffffda RBX: 00007f18a17b5fa0 RCX: 00007f18a158eb69 [ 581.703031][ T31] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 000000000000000c [ 581.719923][ T31] RBP: 00007f18a1611df1 R08: 0000000000000000 R09: 0000000000000000 [ 581.730489][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.738693][ T31] R13: 0000000000000000 R14: 00007f18a17b5fa0 R15: 00007fff62181c58 [ 581.751104][ T31] [ 581.754515][ T31] [ 581.754515][ T31] Showing all locks held in the system: [ 581.769828][ T31] 1 lock held by pool_workqueue_/3: [ 581.793100][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 581.807645][ T31] 1 lock held by khungtaskd/31: [ 581.816412][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 581.830578][ T31] 2 locks held by kworker/0:3/979: [ 581.836380][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 581.857737][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 581.870851][ T31] 4 locks held by kworker/u8:7/3582: [ 581.878502][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 581.894906][ T31] #1: ffffc9000d547d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 581.909080][ T31] #2: ffffffff90367df0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 581.925639][ T31] #3: ffff88807e994700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 581.947255][ T31] 2 locks held by getty/5615: [ 581.952595][ T31] #0: ffff8880363180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 581.966240][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 581.976478][ T31] 1 lock held by syz-executor/5848: [ 581.984555][ T31] #0: ffffffff8e5cc6f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 581.994691][ T31] 2 locks held by syz.3.774/9609: [ 581.999703][ T31] #0: ffffffff9b190b18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 582.010173][ T31] #1: ffff88807e994700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 582.021703][ T31] 1 lock held by syz.5.1230/11439: [ 582.026802][ T31] #0: ffffffff8e5cc5c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 582.036837][ T31] 2 locks held by dhcpcd/11469: [ 582.041750][ T31] #0: ffff88807ddda008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 582.052984][ T31] #1: ffffffff8e5cc6f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 582.063121][ T31] 1 lock held by dhcpcd/11470: [ 582.067875][ T31] #0: ffff8880329dc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 582.077688][ T31] [ 582.080035][ T31] ============================================= [ 582.080035][ T31] [ 582.100789][ T31] NMI backtrace for cpu 0 [ 582.100803][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 582.100824][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.100834][ T31] Call Trace: [ 582.100841][ T31] [ 582.100848][ T31] dump_stack_lvl+0x116/0x1f0 [ 582.100877][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 582.100897][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 582.100922][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 582.100949][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 582.100976][ T31] watchdog+0xf0e/0x1260 [ 582.101000][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.101017][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 582.101043][ T31] ? __kthread_parkme+0x19e/0x250 [ 582.101069][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.101087][ T31] kthread+0x3c5/0x780 [ 582.101105][ T31] ? __pfx_kthread+0x10/0x10 [ 582.101124][ T31] ? rcu_is_watching+0x12/0xc0 [ 582.101145][ T31] ? __pfx_kthread+0x10/0x10 [ 582.101162][ T31] ret_from_fork+0x5d4/0x6f0 [ 582.101178][ T31] ? __pfx_kthread+0x10/0x10 [ 582.101196][ T31] ret_from_fork_asm+0x1a/0x30 [ 582.101229][ T31] [ 582.218645][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.225604][ T31] Sending NMI from CPU 0 to CPUs 1: [ 582.230976][ C1] NMI backtrace for cpu 1 [ 582.230990][ C1] CPU: 1 UID: 101 PID: 5511 Comm: dhcpcd Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 582.231013][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.231025][ C1] RIP: 0010:tomoyo_domain+0x0/0x150 [ 582.231059][ C1] Code: e8 a5 60 80 fd 48 8b 34 24 e9 f7 fe ff ff e8 97 60 80 fd e9 ca fe ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 55 41 54 55 53 65 48 8b 2d 96 18 34 0f e8 99 0b 1a [ 582.231079][ C1] RSP: 0018:ffffc90003397c18 EFLAGS: 00000293 [ 582.231095][ C1] RAX: 0000000000000000 RBX: ffffc90003397cb0 RCX: 0000000000000000 [ 582.231108][ C1] RDX: ffff888026a5c880 RSI: ffffffff84a1cb51 RDI: ffffc90003397d00 [ 582.231122][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 582.231134][ C1] R10: ffffc90003397cb0 R11: 0000000000000000 R12: 0000000000000012 [ 582.231146][ C1] R13: ffff888032c85900 R14: 0000000000000004 R15: ffffc90003397c90 [ 582.231158][ C1] FS: 00007f4fb8dfe740(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 582.231176][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.231189][ C1] CR2: 00007ffcb1bc4260 CR3: 0000000075321000 CR4: 00000000003526f0 [ 582.231200][ C1] Call Trace: [ 582.231206][ C1] [ 582.231212][ C1] tomoyo_init_request_info+0x1e6/0x370 [ 582.231234][ C1] tomoyo_path_number_perm+0x174/0x580 [ 582.231255][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 582.231276][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 582.231320][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 582.231355][ C1] security_file_ioctl+0x9b/0x240 [ 582.231380][ C1] __x64_sys_ioctl+0xb7/0x210 [ 582.231409][ C1] do_syscall_64+0xcd/0x4c0 [ 582.231440][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.231459][ C1] RIP: 0033:0x7f4fb8efe378 [ 582.231473][ C1] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 582.231498][ C1] RSP: 002b:00007ffcb1bc3af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.231515][ C1] RAX: ffffffffffffffda RBX: 0000564bc9ce5a10 RCX: 00007f4fb8efe378 [ 582.231527][ C1] RDX: 00007ffcb1bc3b00 RSI: 0000000000008921 RDI: 000000000000000f [ 582.231539][ C1] RBP: 00007ffcb1bc3b00 R08: 0000000000000000 R09: 0000000000000000 [ 582.231551][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564bc9ce8c60 [ 582.231562][ C1] R13: 0000564bc9ce5a10 R14: 0000564bc9ce8c60 R15: 00007ffcb1bc3d50 [ 582.231582][ C1] [ 582.238272][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 582.238288][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 582.238311][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.238322][ T31] Call Trace: [ 582.238328][ T31] [ 582.238336][ T31] dump_stack_lvl+0x3d/0x1f0 [ 582.238367][ T31] vpanic+0x6e8/0x7a0 [ 582.238395][ T31] ? __pfx_vpanic+0x10/0x10 [ 582.238425][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 582.238451][ T31] panic+0xca/0xd0 [ 582.238477][ T31] ? __pfx_panic+0x10/0x10 [ 582.238503][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 582.238531][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 582.238554][ T31] ? watchdog+0xd78/0x1260 [ 582.238574][ T31] ? watchdog+0xd6b/0x1260 [ 582.238595][ T31] watchdog+0xd89/0x1260 [ 582.238620][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.238639][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 582.238666][ T31] ? __kthread_parkme+0x19e/0x250 [ 582.238694][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.238713][ T31] kthread+0x3c5/0x780 [ 582.238732][ T31] ? __pfx_kthread+0x10/0x10 [ 582.238753][ T31] ? rcu_is_watching+0x12/0xc0 [ 582.238776][ T31] ? __pfx_kthread+0x10/0x10 [ 582.238796][ T31] ret_from_fork+0x5d4/0x6f0 [ 582.238813][ T31] ? __pfx_kthread+0x10/0x10 [ 582.238832][ T31] ret_from_fork_asm+0x1a/0x30 [ 582.238866][ T31] [ 582.619074][ T31] Kernel Offset: disabled [ 582.623373][ T31] Rebooting in 86400 seconds..