last executing test programs: 13m22.260654597s ago: executing program 32 (id=397): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) (async) futex_waitv(0x0, 0x1, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000704712e767582100"], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtclass={0x54, 0x28, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0xb}, {0x1, 0xfff2}, {0xb, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x7}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x10000}}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_red={0x8}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) (async) close(0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) mlockall(0x4) 9m52.238619442s ago: executing program 1 (id=1114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007528"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 9m52.151208352s ago: executing program 1 (id=1116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="000000789dcd2e7a0c54883d6071", 0x0, 0x4bc7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) socket$inet6(0xa, 0x400000000001, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8000, 0x8000, 0xffff, 0x0, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x64, 0x0, 0xe, 0x2f, 0x0, @local, @remote, {[@noop]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1300000000040000020000000600000000400000", @ANYRES32, @ANYBLOB="060500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="010000000200000000000000000040000000e5ffffff000000000000"], 0x50) 9m51.403630045s ago: executing program 1 (id=1117): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480003001400190d09004beafd0d8c560a84476080ffe00600000200590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 9m51.202444372s ago: executing program 1 (id=1119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x6, &(0x7f0000000040)={0x2008, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000080c33f40f70a0101622d000000010902120001000000000904000000cb355200"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_FD(r6, 0x4c05, r6) dup2(r5, r3) 9m47.868200113s ago: executing program 1 (id=1131): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) get_mempolicy(0x0, 0xffffffffffffffff, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsopen(0x0, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0xffff8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) 9m47.654809636s ago: executing program 0 (id=1132): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 9m47.593279452s ago: executing program 1 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x20}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2$9p(0x0, 0x0) 9m47.396319291s ago: executing program 33 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x20}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2$9p(0x0, 0x0) 9m45.532824571s ago: executing program 0 (id=1142): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="abab3b842f4a32c702afd6a3e288acd1a13115fb0816c3e5f71e50b6ca2389d874d3022f4838f5f5cc1656f097abbb9ee425cd7e3acc5b202d6540", 0x3b}, {&(0x7f0000000500)="c2b923c50b96a2a4d447062faa6acb4aae34c98667a231e92d517c804eacc3d0680879bbc03b82e20dd437b2f8b9e18bf94bec32e06ebbe1d8039a2b76528bf2a9b2f596b2e190ca6d4d0755eee6e25d9ebd9f6981e68376ac7bdd33247598fdd89b826b691b37c2689c0200b4d30af1fc73a2bf3830b90c35932fffbab2ea8a2f682be123da5434f8bf04aa3fead502db646476f4f4ace510678f6f67c8feb1c1e5a79182bfd2a0af29731b32b471411135cbe69f9dac5453ecc33809d04ce6231fe6acea334fddc3", 0xc9}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000600)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f00000007c0)="366a35b6f0a94801d64a78e89d70e23501a0052b36360f4df2547aa636982d33494edf44a36c2b0a5b87a52aa50acf63fee990df4def554f309187a8fe422c22b6014e44a971ac40aa24cf7117ebac7c37b77fd8751a10048b398e6ee0d2df7aac78ff", 0x63}, {&(0x7f0000000840)="48b3ff51eb5204e667207520afaa56345de440b527bfe642d45014afc790176d1c0dab7a51d5c6316d4d1327cba3a0a3ff082af634d542f8ccd07943934787d3e87ef05cc02b751d6eaf10680e64af195df7bce6e3f73cf91f93a68e43b78486ada7b42b1d42faa6d1f3ccdb88111a3b78ed079b7ac46463964a728333ac279710a718e6f35e6d83e691074cad45e351660b5eddeb837601d683bf963dc19557d951", 0xa2}], 0x2}}], 0x2, 0x20000090) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xc0000000000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x404d018}, 0x2000c000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 9m43.101302347s ago: executing program 0 (id=1148): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) mount(0x0, 0x0, 0x0, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async, rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30001000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf2514000000080001000100000008000100020000000c0006000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) (rerun: 64) ioctl(r2, 0x2201, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034700)=""/102400, 0x19000) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r7], 0x0}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ffff"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) (async) syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c2000002ffffffffffff86dd608a370900142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a01"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 9m41.941694228s ago: executing program 0 (id=1151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x6, &(0x7f0000000040)={0x2008, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000080c33f40f70a0101622d000000010902120001000000000904000000cb355200"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_FD(r5, 0x4c05, r5) dup2(r4, r2) 9m38.802678019s ago: executing program 0 (id=1161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = getpid() io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x7962f000) 9m37.797598719s ago: executing program 0 (id=1165): r0 = socket(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1a427c0a39e5baca, 0x0, 0xfffffffffffffffe}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1a, &(0x7f0000000680)=@raw=[@alu={0x7, 0x1, 0xd, 0x2, 0x0, 0x18, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x6}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x783}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000001}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14}}, 0xd8}}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 9m37.456030198s ago: executing program 34 (id=1165): r0 = socket(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1a427c0a39e5baca, 0x0, 0xfffffffffffffffe}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1a, &(0x7f0000000680)=@raw=[@alu={0x7, 0x1, 0xd, 0x2, 0x0, 0x18, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x6}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x783}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000001}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14}}, 0xd8}}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 8m7.074574735s ago: executing program 5 (id=1440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x500, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0x9}, {0x29}, 0x1, 0x192, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) inotify_init1(0x100000) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000c80)) (async) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000c80)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a00010c20200030100000000000000000a000002060007400000000004000280"], 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) (async) preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000302000a000000000b0a01020000000000000500000614000000110001000000000000230000030014b5e919ecf01acc3f7605194dec0000000000000000000059e7b96150827e6020ac1dab7c693151359d587757ad018d5d0de7ac7dcc14e09a8180dac516f8bc8590d1b71fd41c10ddf0eb56500a7fade75a47f1a7a992e5aeacc30784f749a0"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r7, 0x89f0, &(0x7f0000000080)=0x59b) (async) ioctl$TIOCSSOFTCAR(r7, 0x89f0, &(0x7f0000000080)=0x59b) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 8m5.514585687s ago: executing program 5 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 8m4.736799599s ago: executing program 5 (id=1449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000000aff"], 0x1c}}, 0x0) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x100, 0x2}) 8m4.190587175s ago: executing program 5 (id=1451): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() prlimit64(r0, 0x6, &(0x7f0000000040)={0x2008, 0xc}, 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000080c33f40f70a0101622d000000010902120001000000000904000000cb355200"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r4, 0x4c05, r4) dup2(r3, r1) 8m2.503655064s ago: executing program 5 (id=1456): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x33c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000045}, 0x20084010) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x21, @empty, 0x4e23, 0x0, 'nq\x00', 0x1, 0xfffffffe, 0x41}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x1, 0x4, 0x10001005, 0x8}}, 0x44) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x8001, 0x4}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0xfffffffffffff1c7, 0xff}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 7m58.074643034s ago: executing program 5 (id=1460): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x65c083, 0x0) socket(0x22, 0x2, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0) 7m57.074663251s ago: executing program 35 (id=1460): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x65c083, 0x0) socket(0x22, 0x2, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0) 5m47.916335659s ago: executing program 8 (id=1889): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x19, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5m44.324266514s ago: executing program 8 (id=1901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="abab3b842f4a32c702afd6a3e288acd1a13115fb0816c3e5f71e50b6ca2389d874d3022f4838f5f5cc1656f097abbb9ee425cd7e3acc5b202d6540", 0x3b}], 0x1, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000600)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f00000007c0)="366a35b6f0a94801d64a78e89d70e23501a0052b36360f4df2547aa636982d33494edf44a36c2b0a5b87a52aa50acf63fee990df4def554f309187a8fe422c22b6014e44a971ac40aa24cf7117ebac7c37b77fd8751a10048b398e6ee0d2df7aac78ff", 0x63}, {&(0x7f0000000840)="48b3ff51eb5204e667207520afaa56345de440b527bfe642d45014afc790176d1c0dab7a51d5c6316d4d1327cba3a0a3ff082af634d542f8ccd07943934787d3e87ef05cc02b751d6eaf10680e64af195df7bce6e3f73cf91f93a68e43b78486ada7b42b1d42faa6d1f3ccdb88111a3b78ed079b7ac46463964a728333ac279710a718e6f35e6d83e691074cad45e351660b5eddeb837601d683bf963dc19557d9515ff68071b5", 0xa7}], 0x2}}], 0x2, 0x20000090) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xc0000000000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x404d018}, 0x2000c000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5m42.948856295s ago: executing program 2 (id=1907): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e2ffffffffffffff00000000000000003ee09a801fa5914d6fb9ee8ec48ba4f993ba49e16bdb1e11715bfe0946a1b5bf45f7869342"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r6 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r5, 0xb, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r6, 0x3513, 0x217, 0xa1, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2a92751dc9979bbbb000005db731b5fa7898ab47a4e0649a89be400499fc900000006000000000000000000000000c903520ada7495a08a6897e5f9b8b91809a25fc41b532baac7460ae91201840fce76cc25020999ed2c9df112927aaf2afccb037f0be8112faaaadab687a42019249fb70b6c1b3311a5f0a71003eb72b441fb661eb5103a85a09d6263d80fc89014b49845e9606febe11628df6ee37cae93d025e7b1ae5fbda5b1948b6214ed49a4a1b41583818e08855ff6d9f7e9f15b216051bc24ab4a5b56c9381e3888bb683aae26"], 0x50) 5m42.942416507s ago: executing program 8 (id=1908): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xd4000003, 0x0, {[0x3]}}, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x148, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x0, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd28, 0x4}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x10) recvmmsg(r1, &(0x7f0000003f40)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000000)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/139, 0x8b}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f00000017c0)=""/192, 0xc0}], 0x5}, 0x3}, {{&(0x7f0000001900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/106, 0x6a}], 0x1, &(0x7f0000001a00)=""/157, 0x9d}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001ac0)=""/127, 0x7f}, {&(0x7f0000001b40)=""/44, 0x2c}, {&(0x7f0000001b80)=""/173, 0xad}], 0x3, &(0x7f0000001c80)=""/127, 0x7f}, 0x9}, {{&(0x7f0000001d00)=@nl=@proc, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/39, 0x27}, {&(0x7f0000002dc0)=""/49, 0x31}, {&(0x7f0000002e00)=""/251, 0xfb}], 0x4, &(0x7f0000002f40)=""/4096, 0x1000}, 0xffffff00}], 0x5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004080), 0x5d1140, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000040c0)={'vxcan1\x00'}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 5m41.850744419s ago: executing program 8 (id=1914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0x6, &(0x7f0000000040)={0x2008, 0xc}, 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000080c33f40f70a0101622d000000010902120001000000000904000000cb355200"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r4, 0x4c05, r4) dup2(r3, r1) 5m40.714510645s ago: executing program 2 (id=1916): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r0) r1 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) syz_emit_ethernet(0xfdef, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "3b580e", 0x44, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @empty}, {[], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0x1, 0x15, 0x0, 0x4e21, 0x4e24, 0x0, 0x1, 0x0, 0x0, 0x1}, [{0x9, 0x6, 0x1, 0x9, 0x40000, 0x1000, 0x7, 0x5}]}}}}}}, &(0x7f0000000200)={0x1, 0x2, [0xa09, 0x1, 0xa7a, 0x7d0]}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034700)=""/102400, 0x19000) unshare(0x20020680) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x97c, 0x3180, 0x1, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000001500)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x41, 0x0, @fd_index=0x6, 0x10003, 0x0, 0x7, 0x5, 0x1}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xbc2ff2423105fe56) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1000000000008}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000006) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x50009405, &(0x7f0000000180)) r9 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5m38.8405089s ago: executing program 8 (id=1920): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'erspan0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x7, 0x7800, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x24, 0x38, 0x66, 0x0, 0x83, 0x29, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x6, 0x2}, @timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x9, [{@multicast2, 0x2}, {@remote, 0x7}, {@local}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x9, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x79}, @alu={0x4, 0x1, 0xd, 0xb, 0x1, 0x80, 0xfffffffffffffffc}, @ldst={0x0, 0x2, 0x2, 0x4, 0x7, 0x6, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, 0x0, 0x3ff, 0x5d, &(0x7f0000000640)=""/93, 0x41000, 0x4, '\x00', r3, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x763, 0x80000000}, 0x10, 0x0, r2, 0x5, &(0x7f0000000b80)=[r4], &(0x7f0000000bc0)=[{0x2, 0x1, 0x2, 0x7}, {0x3, 0x4, 0xa, 0x7}, {0x0, 0x4, 0xc, 0x7}, {0x4, 0x3, 0x6, 0x6}, {0x2, 0x1, 0x5, 0x5}], 0x10, 0x5b4d}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d00)={0x0, 0xffffff15, 0x20}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r7}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) socket$inet_tcp(0x2, 0x1, 0x0) 5m38.362981617s ago: executing program 2 (id=1921): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000010c0)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', 0x0, 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 5m37.514452644s ago: executing program 8 (id=1925): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)}, {&(0x7f0000000500)="c2b923c50b96a2a4d447062faa6acb4aae34c98667a231e92d517c804eacc3d0680879bbc03b82e20dd437b2f8b9e18bf94bec32e06ebbe1d8039a2b76528bf2a9b2f596b2e190ca6d4d0755eee6e25d9ebd9f6981e68376ac7bdd33247598fdd89b826b691b37c2689c0200b4d30af1fc73a2bf3830b90c35932fffbab2ea8a2f682be123da5434f8bf04aa3fead502db646476f4f4ace510678f6f67c8feb1c1e5a79182bfd2a0af29731b32b471411135cbe69f9dac5453ecc33809", 0xbd}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000600)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f00000007c0)="366a35b6f0a94801d64a78e89d70e23501a0052b36360f4df2547aa636982d33494edf44a36c2b0a5b87a52aa50acf63fee990df4def554f309187a8fe422c22b6014e44a971ac40aa24cf7117ebac7c37b77fd8751a10048b398e6ee0d2df7aac78ff", 0x63}, {&(0x7f0000000840)="48b3ff51eb5204e667207520afaa56345de440b527bfe642d45014afc790176d1c0dab7a51d5c6316d4d1327cba3a0a3ff082af634d542f8ccd07943934787d3e87ef05cc02b751d6eaf10680e64af195df7bce6e3f73cf91f93a68e43b78486ada7b42b1d42faa6d1f3ccdb88111a3b78ed079b7ac46463964a728333ac279710a718e6f35e6d83e691074cad45e351660b5eddeb837601d683bf963dc19557d9515ff68071b5", 0xa7}], 0x2}}], 0x2, 0x20000090) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xc0000000000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x404d018}, 0x2000c000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5m37.237719829s ago: executing program 36 (id=1925): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)}, {&(0x7f0000000500)="c2b923c50b96a2a4d447062faa6acb4aae34c98667a231e92d517c804eacc3d0680879bbc03b82e20dd437b2f8b9e18bf94bec32e06ebbe1d8039a2b76528bf2a9b2f596b2e190ca6d4d0755eee6e25d9ebd9f6981e68376ac7bdd33247598fdd89b826b691b37c2689c0200b4d30af1fc73a2bf3830b90c35932fffbab2ea8a2f682be123da5434f8bf04aa3fead502db646476f4f4ace510678f6f67c8feb1c1e5a79182bfd2a0af29731b32b471411135cbe69f9dac5453ecc33809", 0xbd}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000600)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f00000007c0)="366a35b6f0a94801d64a78e89d70e23501a0052b36360f4df2547aa636982d33494edf44a36c2b0a5b87a52aa50acf63fee990df4def554f309187a8fe422c22b6014e44a971ac40aa24cf7117ebac7c37b77fd8751a10048b398e6ee0d2df7aac78ff", 0x63}, {&(0x7f0000000840)="48b3ff51eb5204e667207520afaa56345de440b527bfe642d45014afc790176d1c0dab7a51d5c6316d4d1327cba3a0a3ff082af634d542f8ccd07943934787d3e87ef05cc02b751d6eaf10680e64af195df7bce6e3f73cf91f93a68e43b78486ada7b42b1d42faa6d1f3ccdb88111a3b78ed079b7ac46463964a728333ac279710a718e6f35e6d83e691074cad45e351660b5eddeb837601d683bf963dc19557d9515ff68071b5", 0xa7}], 0x2}}], 0x2, 0x20000090) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xc0000000000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x404d018}, 0x2000c000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5m37.221480576s ago: executing program 2 (id=1930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0x6, &(0x7f0000000040)={0x2008, 0xc}, 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000080c33f40f70a0101622d000000010902120001000000000904000000cb355200"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r4, 0x4c05, r4) dup2(r3, r1) 5m35.437818342s ago: executing program 2 (id=1937): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) msgctl$IPC_RMID(0x0, 0x0) getpid() mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x280) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x810) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x3}, 0x10}}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0x1}, {0xd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010102, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xffdffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0xc, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x400000, 0x1f, 0xfffffffffffffffe}, {0x3, 0xfffffffc, 0x2}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x851, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 5m34.813553089s ago: executing program 2 (id=1942): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newchain={0x70c, 0x64, 0x110, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xc}, {0x0, 0x4}, {0xfff2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xaa}}, @filter_kind_options=@f_route={{0xa}, {0x420, 0x2, [@TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb8, 0x8, 0x36, 0x8, 0x6c9, 0x0, 0x101, 0xd, 0x4, 0x2, 0x7, 0x8, 0x6, 0x0, 0x742, 0x3, 0x6, 0x35c7, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x401, 0x9, 0x10000, 0x6, 0x72b1, 0x9a69, 0xfcdf, 0x687, 0x5, 0x8, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x8001, 0xd, 0x80, 0x5, 0xaf4, 0x3, 0x37d, 0x1020000, 0x1, 0x400, 0x3, 0x7, 0x2, 0xf, 0xfff, 0x7, 0xffffffff, 0x9, 0x8, 0x7ff, 0x10000, 0x3, 0x2, 0x5, 0x0, 0x0, 0x4, 0xfffff51b, 0xefa4, 0xa04, 0xd, 0x5, 0x9, 0x8, 0x0, 0x100, 0x4000, 0x17, 0x8, 0x145, 0x5, 0x7, 0x9, 0x400, 0x9, 0x7ff, 0x343, 0xf6, 0x9, 0x7, 0x1f1, 0x86c8, 0xffff0000, 0x80, 0x8001, 0x7fff, 0x7, 0xc, 0xfabe, 0x3b, 0x8, 0x4, 0x4, 0x9, 0x2, 0xb5f, 0x9, 0x9, 0x4, 0x5, 0x7, 0x2, 0xfffffffc, 0xfffffffb, 0x4, 0x4, 0x7fffffff, 0x8, 0x7, 0x6, 0x5, 0xffff, 0xe0000000, 0x6c6, 0x0, 0x9, 0x800, 0x3, 0xc84f, 0x111d, 0x9, 0x7, 0x0, 0x8, 0x4, 0x3, 0x9, 0x7, 0x73c2, 0xffff, 0xff, 0x1, 0x8, 0x3, 0x83, 0x7, 0x8bd, 0x2, 0x80000000, 0xfffffff1, 0x7, 0x2, 0x3, 0x5, 0x6, 0x6, 0x2, 0x7, 0x1, 0x7, 0xcc7, 0x9, 0x7fff, 0x6, 0x2, 0x4, 0x401, 0x8, 0x1, 0x8, 0x9, 0x8, 0x800, 0x4cff023e, 0x6, 0x401, 0x7ff, 0x1, 0x3, 0xe, 0x200, 0x1ff, 0x100, 0x8, 0x1095, 0x5, 0x3, 0x100, 0x8, 0x4, 0x4, 0x1000, 0xea, 0x6, 0x200, 0x6, 0x0, 0x2, 0x7, 0x80000001, 0xfffffff7, 0x5, 0x8, 0x9, 0xfffffffa, 0x2d6, 0xff, 0x9, 0xd, 0x87d, 0x7, 0x7, 0x0, 0x4, 0x3, 0x7fff, 0xffffffff, 0x854, 0x0, 0x2, 0xd69a, 0x7fff, 0x6, 0x3, 0x5, 0x7, 0x1, 0x80000001, 0x2d, 0x3, 0x9, 0x80000001, 0x9, 0xd, 0x2, 0x4, 0x7, 0x2, 0x800, 0x3, 0x1, 0x3, 0x7ff, 0x9, 0x7, 0x0, 0x9, 0x11, 0x7, 0x200, 0x80000001, 0x2, 0x4, 0x7fffffff, 0x80000000, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc00000}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x294, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x280, 0x2, [@m_tunnel_key={0x12c, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}]}, {0xe8, 0x6, "02c62dcdfcb19526611206417e6be8e792a637e8bf352a4510aeea84c1d3cc3b312e11dd693acf5062f8fc2e13766e49eba443d2d09168acbf362fb45bf789a4e5cb1e396820c10a9405ce5961640be672e6d5123eb3e4b41d54fe6ba97e6749133260eddd4b1438ca8949f23a16042c3c9719d691f6bdc4fd472e05310957571d91d34d4451e0c6b1e7f02d68500ade2d0c3ac29a7895475eebf9afbc09fd10ffdb923de356e0e7623daa4a9fd7b24f5651485a0f24e933dafc388ff8970c24980641468c15cc8447413bb3af962384404103b503feede39d1f3d74a17c806bbeef1271"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x150, 0x1, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x1a, 0x3, 'freezer.self_freezing\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x4, 0x4, 0x7, 0x6e8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x800, 0xfffffffffffffffc, 0x8, 0x8e3}}, @TCA_DEF_DATA={0x8, 0x3, '\\-\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x400, 0x26d771c002d8da57, 0x7, 0xccb9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x100, 0x20000000, 0x806, 0xfffffff5}}]}, {0x9e, 0x6, "441088b222476e39cf332a1247b83f3f2464def65cf39b11de5624c9a108111be6460f37ff12d9d6d1a426b21a9ec6cb3dc3d132cdddca33129c0675cafd5f068a0050568a450696598152ed2abad824fe3b529e884b645b2b2e7e91ef72f242da1c9d9369aacf1efcc08d2781eac45d15ed72f89f89b320c9e52e4f64aaf82b6e1d14b58cc88d59334b45990f1a6eff190ee9b86a0613a40974"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x70c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18) r1 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), &(0x7f0000000780), &(0x7f0000000340), {0x2a}, &(0x7f0000000980)=""/73, 0x49, &(0x7f0000000480)=""/196, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000280)="52fe09baaa10c3825e0de45843e8", &(0x7f0000000800)=""/147, &(0x7f00000008c0)="bd740481ce436c61fcf7ccedea58d6db9d53cfd312687304d7e3844363ba9c828c17df82efd1aa6ad00cf567555f7a7188ff2486065d178adbe2936e9ce77ebcbffd38ca918a74548c9bf997704e8f062bb721e709fe667222dfdaf5c09ca34401c8da3181e8e1552f75aea287a00367056cc3052678962d0c2726eabd5392f2e067c06715871dc0a0f0ecd71366010ef2fbd5b7260d5dcb4f02", &(0x7f0000001140)="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", 0x5, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x41624800ab11328a, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x2, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="ea00", 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 5m34.280892711s ago: executing program 37 (id=1942): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newchain={0x70c, 0x64, 0x110, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xc}, {0x0, 0x4}, {0xfff2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xaa}}, @filter_kind_options=@f_route={{0xa}, {0x420, 0x2, [@TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb8, 0x8, 0x36, 0x8, 0x6c9, 0x0, 0x101, 0xd, 0x4, 0x2, 0x7, 0x8, 0x6, 0x0, 0x742, 0x3, 0x6, 0x35c7, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x401, 0x9, 0x10000, 0x6, 0x72b1, 0x9a69, 0xfcdf, 0x687, 0x5, 0x8, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x8001, 0xd, 0x80, 0x5, 0xaf4, 0x3, 0x37d, 0x1020000, 0x1, 0x400, 0x3, 0x7, 0x2, 0xf, 0xfff, 0x7, 0xffffffff, 0x9, 0x8, 0x7ff, 0x10000, 0x3, 0x2, 0x5, 0x0, 0x0, 0x4, 0xfffff51b, 0xefa4, 0xa04, 0xd, 0x5, 0x9, 0x8, 0x0, 0x100, 0x4000, 0x17, 0x8, 0x145, 0x5, 0x7, 0x9, 0x400, 0x9, 0x7ff, 0x343, 0xf6, 0x9, 0x7, 0x1f1, 0x86c8, 0xffff0000, 0x80, 0x8001, 0x7fff, 0x7, 0xc, 0xfabe, 0x3b, 0x8, 0x4, 0x4, 0x9, 0x2, 0xb5f, 0x9, 0x9, 0x4, 0x5, 0x7, 0x2, 0xfffffffc, 0xfffffffb, 0x4, 0x4, 0x7fffffff, 0x8, 0x7, 0x6, 0x5, 0xffff, 0xe0000000, 0x6c6, 0x0, 0x9, 0x800, 0x3, 0xc84f, 0x111d, 0x9, 0x7, 0x0, 0x8, 0x4, 0x3, 0x9, 0x7, 0x73c2, 0xffff, 0xff, 0x1, 0x8, 0x3, 0x83, 0x7, 0x8bd, 0x2, 0x80000000, 0xfffffff1, 0x7, 0x2, 0x3, 0x5, 0x6, 0x6, 0x2, 0x7, 0x1, 0x7, 0xcc7, 0x9, 0x7fff, 0x6, 0x2, 0x4, 0x401, 0x8, 0x1, 0x8, 0x9, 0x8, 0x800, 0x4cff023e, 0x6, 0x401, 0x7ff, 0x1, 0x3, 0xe, 0x200, 0x1ff, 0x100, 0x8, 0x1095, 0x5, 0x3, 0x100, 0x8, 0x4, 0x4, 0x1000, 0xea, 0x6, 0x200, 0x6, 0x0, 0x2, 0x7, 0x80000001, 0xfffffff7, 0x5, 0x8, 0x9, 0xfffffffa, 0x2d6, 0xff, 0x9, 0xd, 0x87d, 0x7, 0x7, 0x0, 0x4, 0x3, 0x7fff, 0xffffffff, 0x854, 0x0, 0x2, 0xd69a, 0x7fff, 0x6, 0x3, 0x5, 0x7, 0x1, 0x80000001, 0x2d, 0x3, 0x9, 0x80000001, 0x9, 0xd, 0x2, 0x4, 0x7, 0x2, 0x800, 0x3, 0x1, 0x3, 0x7ff, 0x9, 0x7, 0x0, 0x9, 0x11, 0x7, 0x200, 0x80000001, 0x2, 0x4, 0x7fffffff, 0x80000000, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc00000}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x294, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x280, 0x2, [@m_tunnel_key={0x12c, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}]}, {0xe8, 0x6, "02c62dcdfcb19526611206417e6be8e792a637e8bf352a4510aeea84c1d3cc3b312e11dd693acf5062f8fc2e13766e49eba443d2d09168acbf362fb45bf789a4e5cb1e396820c10a9405ce5961640be672e6d5123eb3e4b41d54fe6ba97e6749133260eddd4b1438ca8949f23a16042c3c9719d691f6bdc4fd472e05310957571d91d34d4451e0c6b1e7f02d68500ade2d0c3ac29a7895475eebf9afbc09fd10ffdb923de356e0e7623daa4a9fd7b24f5651485a0f24e933dafc388ff8970c24980641468c15cc8447413bb3af962384404103b503feede39d1f3d74a17c806bbeef1271"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x150, 0x1, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x1a, 0x3, 'freezer.self_freezing\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x4, 0x4, 0x7, 0x6e8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x800, 0xfffffffffffffffc, 0x8, 0x8e3}}, @TCA_DEF_DATA={0x8, 0x3, '\\-\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x400, 0x26d771c002d8da57, 0x7, 0xccb9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x100, 0x20000000, 0x806, 0xfffffff5}}]}, {0x9e, 0x6, "441088b222476e39cf332a1247b83f3f2464def65cf39b11de5624c9a108111be6460f37ff12d9d6d1a426b21a9ec6cb3dc3d132cdddca33129c0675cafd5f068a0050568a450696598152ed2abad824fe3b529e884b645b2b2e7e91ef72f242da1c9d9369aacf1efcc08d2781eac45d15ed72f89f89b320c9e52e4f64aaf82b6e1d14b58cc88d59334b45990f1a6eff190ee9b86a0613a40974"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x70c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18) r1 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), &(0x7f0000000780), &(0x7f0000000340), {0x2a}, &(0x7f0000000980)=""/73, 0x49, &(0x7f0000000480)=""/196, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000280)="52fe09baaa10c3825e0de45843e8", &(0x7f0000000800)=""/147, &(0x7f00000008c0)="bd740481ce436c61fcf7ccedea58d6db9d53cfd312687304d7e3844363ba9c828c17df82efd1aa6ad00cf567555f7a7188ff2486065d178adbe2936e9ce77ebcbffd38ca918a74548c9bf997704e8f062bb721e709fe667222dfdaf5c09ca34401c8da3181e8e1552f75aea287a00367056cc3052678962d0c2726eabd5392f2e067c06715871dc0a0f0ecd71366010ef2fbd5b7260d5dcb4f02", &(0x7f0000001140)="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", 0x5, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x41624800ab11328a, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x2, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="ea00", 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 9.746502526s ago: executing program 4 (id=2953): r0 = socket$igmp6(0xa, 0x3, 0x2) fcntl$setpipe(r0, 0x407, 0x100000001) syz_clone(0xc2424000, &(0x7f0000000000)="ba60f7c25f425738b36d3c6385135b443b7554c3edca089b07ffe0a767039e3dc11f37c6f90b3d4691c98687d1a8b497b2e5a44573c1f7acf638", 0x3a, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="2f8b82d4ee2d50c5419733e5c5cea83b36153a5a273288b1160c74f0") r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x7fffffff, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000180)={{r1}, 0x1, &(0x7f0000000140)=[0x6], 0x0, 0x4, 0x1}) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x20000, &(0x7f0000000300)={[{@uuid_off}], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', r2}}]}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0\x00'}) sendto$ax25(r5, &(0x7f00000003c0)="2352a151d276d6268ef4fb967062d699a55eb16074f8802c80f4ba13dffc00c9698ce34f54f23bed70bc676924cd87ca3d61b0b9a6fe4120a8f85a1579792e2cb5b25fa376534114f995cbcfde5365ff353ebc4f72d3e181417ae1c7422b87c16bc59a15ec7f4c8ccfdb519492be502872efbf3c09857f25c695f9c99efdd8a9395697aad63274f7268739c295e5eff701fa6efa691291a4a526d3f24f7c15c7540675ba12bf9935d20d9a055353addc66c4027f30bf466b92973f4a1bb592cd5b1446c27d86625bc0d9ad55056da9bd2a29a025702e51845a0d0d8aa3e1a661d1b4b75cf8f0ef497a912879", 0xec, 0x800, &(0x7f00000004c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x2a8840, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000008c0)={&(0x7f0000001000)={[{&(0x7f00000005c0)="0efdd1093cf741ec50e069dcc4f47215de923ed372d203c5dd6a103aeaafbe5dca2c09460aeaf8681802fd8c7f84cb07f24ea0ed89ef55efacd9ce33a5eb60b9c7d7108560cd2e9997065f1c0f703261d5f168fbfb7ef72fed5a48ca933c75bb66a7604b425c6268ef21dafeeab581573afca9f27efba0b5d53c698e0703984db4953d33374d7141c0507263afc35c0af03ead5d364cf714915eb965c094e7955f4eb8a579507d45f79a88c4458dc486281496017d3ee9afffe12cea914438ad1f5a93c6c7f3a077e09bd355c6774a8c95415483", 0xd4, 0x3}, {&(0x7f00000006c0)="fba09e04ebe9ebd95e528fb0e81274a74b398de57d08e78987baa1ddae7edf9f173ea9bce9353eab308298f93e7215ed7995694afed4de57080b3ec8a855001696c3e85469656166ce99354040aadf49601fd1c3ad36c6ffa40c471402c7f50b681a5ce58a8d5e4556be137a619871069c1960c619302e5827431210358bd1c2cfd5d828327cf5914ac70d41bf4700d2f8c52e3988e28cbd3e2aab1ba99c6aaf509744ba4835c25a4c3548948d9100f7c3d556391462facc463bdfbd281b9c055a06e122b2a584bd85b9aa774db067bb02e2", 0xd2, 0x2}, {&(0x7f00000007c0)="184b027f99e7aeccd38bd9ef03538e08505646b7dedea1ff585e33ea92952ea0b1dbbd0d091ca3b04369ecabc55d88cb0144722111cd567044f9e6e9f671574ae3295ea8317ed5c68378b201c24c9ebb", 0x50, 0x1}, {&(0x7f0000000840)="b7b3c7e6d9eadd26dc19c0240824bf9c406dfc53af25348376572c524ec2a5c29f8dc8492a8aa972591ec55dc4e55cee22e0553aa4b4c8ee2cc3b4103ce7d6b26550e0d1ec2dbaac72daab1632", 0x4d, 0x1}]}, 0x4}, 0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000002000)={0x80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "c99582944f90e0"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000003000)={r9, 0x0, "11ba6767a8c395fef61602df0a23a60fa9643b25bdab21518aa5998f5ecc7f418b1cd32bbd7772e6ed81622b3af43d3481644b022361404ae60eccda138ce01e7c4b972e5cf3383e9b9e7c6e3622f48e4ee0ba42511eae7ae3c92a75223be93ee00e24efe4eb389313bdcff43628b16bea6fe0dd7e470c56b1f51dc079bd1abd3305ce40359384e04202b8e09e4259dcedf87d22ca0f03d2e6a35c43352845fcee11c474d28afe3a25911c7ddf3fb701dde32386d00d1f67ac4f3f4a97c70fb4f0444e118bf57a3ba40be99ba9a2744e7b441defaf6d76074946dca6a3cce73f1c8cd92ad306aefb9ddebdc4f702cec20ccedfeb8b62890d8a3d024b01e61e79", "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"}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000900)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000980)={r10, 0xfffffffffffff001, 0x101}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r1, {0x1, 0x5}}, './file0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000a00)={'bond_slave_1\x00', 0x10}) (async) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000a40)={"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"}) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000e40)={0x0, 0xdc, 0x30}, &(0x7f0000000e80)=0xc) (async) r12 = open$dir(&(0x7f0000000ec0)='./file0/file0\x00', 0x90000, 0x90) renameat(r12, &(0x7f0000000f00)='./file0\x00', r5, &(0x7f0000000f40)='./file0\x00') (async) accept4(r0, &(0x7f0000000f80)=@phonet, &(0x7f0000004000)=0x80, 0x800) (async) mount$fuse(0x0, &(0x7f0000004040)='./file0\x00', &(0x7f0000004080), 0x80, &(0x7f00000040c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80}}, {@allow_other}, {@allow_other}], [{@seclabel}, {@measure}, {@subj_user={'subj_user', 0x3d, ':'}}]}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004200), 0x8801) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x28, r13, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9170, 0x1d}}}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="19db"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x240080c1) getsockopt$bt_hci(r11, 0x0, 0x3, &(0x7f0000004380)=""/150, &(0x7f0000004440)=0x96) (async) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x135a) 8.950487291s ago: executing program 3 (id=2957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x40010, 0x24114}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c000780180001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 8.705604339s ago: executing program 3 (id=2958): r0 = socket$inet6(0xa, 0x2, 0x0) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400090020010000000000000000000000000000140035007767310000"], 0x50}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000006180)=@newtaction={0x6368, 0x30, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{0x54c, 0x1, [@m_ct={0x124, 0x1e, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x5, 0x1, 0x8, 0x4}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_PARMS={0x18, 0x1, {0x7fff, 0x8, 0x10000000, 0x972, 0x8001}}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x8}]}, {0x88, 0x6, "3b0359015e10489e7921e1857839d003485e3736b15b18e3d27ed2bf46fcd47edc0a9a62937fea67e6e9eec1a284c6f61e424c0d31c1cc397fe1711d6014b774c475e6b31e2520b94c8dd9c1a520e92ad00cd294eb2db4a77369e82ccffe1d68ade1d08b369f1076a699f71cd973ec7b086887d4bf399d6b2a58aee29d9e515d29b2e59e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x150, 0xe, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x20000000, 0xa1}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x5, 0x5, 0x0, 0x8}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x98d3, 0xbaf9, 0x0, 0x4, 0x2}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x7, 0x7, 0x6}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40000000, 0x1200, 0x20000000, 0x3, 0xd92}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x7, 0x1, 0x9, 0x6a3de454}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x29, 0xfffffff7, 0x10000000, 0x4, 0x2}, 0x1f}}]}, {0x5d, 0x6, "7203200f860760dd0cd78cee2b8f8458761d7a9b6821d02c6c74a05ad90075be332c091e561fcbc41152172883818cb818dbbd270cb382091e5239802e90a7565f92a2d94d623e7ac818fb53660a8f327f64c3d4069bdd2e2e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0xf0, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x2, 0xffffffffffffffff, 0x0, 0xb986}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x168b, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x80000001, 0xffffffffffffffff, 0x80000000, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x12000, 0x3, 0x5, 0x1}}]}, {0x70, 0x6, "9168e355d71ba3daba72d90606c2a98458b38317c8491823cf10d5f528df6d76dab101df123d00ee827e26e54868f845f126e3223ce10acad79ff908bb9e140f9055bb04f4c9f3fd53ee9ceb122f65860368689b71a50ea9973ccd74d092916839f8cdbe9e7735890020847a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x88, 0xd, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xa2f55089f44d541f}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0xfffffffa, 0x0, 0x6, 0xe923}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7}}]}, {0x2b, 0x6, "e722a9d438a3499ad88452e0f5212ce5cfc79b3382b3ab62c0bf479f7202175fe1897f43f89544"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x15c, 0x18, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8000, 0x8, 0x0, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x7fffffff, 0x10000000, 0x6, 0xd}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4e67, 0x0, 0x7, 0x4, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x98}]}, {0xc0, 0x6, "a720f99484be9b2f10a1f66c9f724e6c398862ec9883bc0ac9163b450093ddbcd5e8a8c9d50172cf65aaf89645276257bb2bb287bff91c0a4b4fcea58abc1e9002c00f7f03725d4f28ef0b61877613ca83e623210362b2d32ef5f1641ff97ca4c53222c35e31e714691ec2d046347dd01ef7c8dbad4714a1060b9e5375d9a29211999849815bf9ad0dae3d22a8a00339e0848e86cc39438d5d55ee0f1fdc4d20625450d4258a848b2286397b1e32b6fb815f64109e049dbcea9961bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x1644, 0x1, [@m_nat={0x190, 0x7, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0xffffffffffffffff, 0x1, 0x4}, @remote, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x5, 0x4, 0x8001, 0x3}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x2, 0x9}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x200, 0x4, 0x5107fbac, 0x80000001}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9e8a83e5, 0x7, 0x8, 0x8, 0x9}, @loopback, @loopback, 0xffffffff}}]}, {0x9d, 0x6, "b754c29e5813e0cd125a21b45b5077bee25ecd3a6699d37a82f2a7880f5826b7815242f1825b44ed70596dec84365353aeaeeff92649b00829481064ad477e20a46857b120c194d53e9ee20206d031d288e2afe06293316ffaf6b2d0c7e2e44a8949a78dca8acbfb4950ac0f215f248194f9d91037a7c6ca1f2f29b4af29253ac228ab57cc5a9fd892526fb2b28034f1d624b943deee5e7136"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1044, 0x1, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x168, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x6, 0x1, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x792, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1eac, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe3b, 0x1, 0x0, 0x1, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffcf, 0xffff, 0x30000000, 0x4f1, 0x3}}]}, {0xdc, 0x6, "27bdb9e37e4f5e1276e1e1b0d9e61aafdf49987bcce681a6708efb423a4370bba0554414132142c7bd6824493e3b64e8a4bd8719e122b64ce3ba8f0739c25514c547e5cada408c57b09cc956f8053cb4eaa55964f95b1210c422879cd51ae855b25fe3c8be756723e10a2498434b67a7917e0ff2eade2dfa92b0c1f2fc92e6c4bff414cc8fb3a90371973fd2cfbc016c97e3f25d4bcd2390022d60d9f0e27c49131e61d8eed64c8af7e41974fbe5a99ee1f5bb74d29ce9263177ba78031ca2ea35ede499686b71664fd07294811e1e5ee364eb285871b802"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x184, 0xe, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x6, 0x2, 0x6}, 0xf8a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3a7, 0x7}, 0xbff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0xfffffffffffffff8, 0xffffffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffd49b, 0x9, 0x8, 0x5, 0x3}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x1, 0x3, 0x1}, 0x9}}]}, {0xc5, 0x6, "41baedfff35e848f9230106a0f55654c433e76ab6a3790f8758475979a341476ff5e667e4ebbf402c6b4cd3402afcdf986120e76b51418792d0a7d1fde345e1f6bc614266222b460931be9b76d20fa7683eb738d5624aceba7b4e69b56aac4e3cccc45fbd08bf6b736e32bfef7b3d6ce2df01d795e3c5ec35a6b957f77f17387e8ddb1a5c120a1c8cdfb3ce5e2e901e93d923e7b6063017492bcf84f6b9825686848a391e3219e10db5a679043d04133a3dc6b3a4fb6d4b6085dee7a6fade2d975"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x180, 0xd, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'fuse\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xd, 0x3, '^^/+:.#\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2000000, 0x20b1, 0x2, 0x8, 0xa1}}, @TCA_DEF_DATA={0x6, 0x3, '$\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'u]\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0xffffffffffffffff, 0x800, 0xc}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb81, 0x8, 0x20000000, 0x7fff, 0x3}}, @TCA_DEF_DATA={0xf, 0x3, '/dev/iommu\x00'}]}, {0xc0, 0x6, "04b37cab7a5deeb9b2d7cf7855be0c0a2463a526027ee47d4b30c8abf0cfedea794147923eafb764960140388558e0b053291e1ab3395726844c3b35c70f32f65180151f2835f05623e245e57c0adc305e125b14a5eaa49bb470a8a1844e89d75d3f330643dc52d2a5b62ac3a4cc456ca55c8e664042a44e1fa8408a593501921b1e5d0d0f8fb52d58deb5fcd9d7709864140222696185905d72651ac86a51a430ede2f2cfb23f68c9233b5f403ee275ebaf0f57d0a6ec0fd88425d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x47c4, 0x1, [@m_simple={0x458, 0x13, 0x0, 0x0, {{0xb}, {0x374, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5dc0, 0x2, 0xffffffffffffffff, 0x83, 0xfffffffe}}, @TCA_DEF_DATA={0x189, 0x3, '//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r9, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.615364042s ago: executing program 6 (id=2959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000440)=""/193, 0xc1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x45b9) ptrace$setopts(0xc60a, r3, 0x99a, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaabaaaa0086dd60003a0400000000008000000000000000000000000000bbff02000000000080000000000000000102009078000000006050835900000000fc010000000000000000000000000000fe880000000000000000001000000001abd5e199efaa513b8c7083bc93bbdcc8d2705b132fd9c1e7f9767e561b707dcd75fdd171e950ed3d243fe6120cfed7785f"], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r6 = epoll_create1(0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) getitimer(0x0, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x0, &(0x7f0000000380)}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0xd}, 0x1c) 8.434348698s ago: executing program 4 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1000000004000000000000ee88a21f57f5d5ea465be993cf923a063a4a5b55668f002e155fe0f4cb3f72879f4e980000873bf51453a43cd8578bbb7e61507bc959d71454783c7fe6eb3000"/93, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e2b, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @empty, 0x2}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) get_robust_list(r1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r6, 0x509, 0x70bd29, 0x25cfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x0, 0xcb, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044000) 7.152771358s ago: executing program 4 (id=2962): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x18, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x0) kcmp(0x0, 0x0, 0x4, r2, r9) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x22020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r8, 0x25, 0x5, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4048010) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) 7.138284658s ago: executing program 3 (id=2963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000000000000000000000000000099b2ada670693501"], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @loopback, 0x4}, {0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, r5, 0x3}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500), r5, 0x0, 0x2, 0x4}}, 0x20) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ufshcd_exception_event\x00', r7, 0x0, 0x8a4}, 0x18) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) (async) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x104) 6.739138448s ago: executing program 4 (id=2966): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x8, 0x101}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x303a40, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 5.953582061s ago: executing program 6 (id=2971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x81, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}]}}}]}, 0x3c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) munmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') r4 = memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r4, &(0x7f0000002140)='ic', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x6, 0x3}, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000240)={0x1, @raw_data="f4327592b8fc28d65259d09bb849bb73ae5864f794149923950f58e23a9431fc2a0885812e84fc77e4f32192534302daed7df61bc4e3783d2c85bd4f2e50f347f3f1207e8dcde26a5192555feb175ea9a2c3cb5f86b708a8d7372ecbeae7d618f8433a9d436b4f68f4213d6bd747afffa01f883e6b83596a0279d745c42ba57ea4e6695d44b7bc5e31a80a3965fb769e0a5fcc7a0af93b73d519a63c331be9f695883cb4f4d96168485ab0bd57325bf76d1dcd78a3f86870f3f8fd61a23ff192738ddc22bc6d8d61"}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 5.226339402s ago: executing program 3 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1000000004000000000000ee88a21f57f5d5ea465be993cf923a063a4a5b55668f002e155fe0f4cb3f72879f4e980000873bf51453a43cd8578bbb7e61507bc959d71454783c7fe6eb3000"/93, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e2b, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @empty, 0x2}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) get_robust_list(r1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r6, 0x509, 0x70bd29, 0x25cfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x0, 0xcb, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044000) 4.921085741s ago: executing program 6 (id=2977): syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd733, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000f0000000085000000720000009500"/81], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r8, 0x0, 0x800}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(0xffffffffffffffff, r9) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000600)=0xf) 4.246988163s ago: executing program 9 (id=2980): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) clock_adjtime(0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010, 0x0, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x5, &(0x7f00000003c0)={0xfff, 0x5, 0x9, 0x400, 0x4, 0x8, 0x2, 0x101, 0x800000000000, 0x6, 0x1, 0xd14, 0x2, 0x7, 0x200, 0xb8, 0x1c4, 0x10001, 0xfffffffffffffff0, 0x9, 0x3, 0xffffffff80000000, 0x10000, 0x2, 0x401, 0x7}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) r4 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x465d, 0x800, 0x6, 0x14a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x507, 0x966, 0x21, &(0x7f0000000000)={[0x10000]}, 0x8) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 3.194660823s ago: executing program 6 (id=2981): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x2, 0x2}) 3.121011268s ago: executing program 4 (id=2983): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'dt2811\x00', [0x2f00, 0x5, 0xd09a, 0xfff80003, 0x2, 0x8, 0x20000044, 0x4000006, 0xffe, 0x9, 0x8, 0x11001, 0x11, 0x5, 0x1, 0x3, 0x1100005, 0x40000009, 0x830, 0x8, 0x7fffffff, 0x800002, 0x800, 0xe2dc, 0x2, 0x4, 0x7, 0x8, 0x4, 0xf358, 0x70f, 0x1000]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300000020"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000480)={'erspan0\x00', @random="fc26396df740"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 3.021657403s ago: executing program 6 (id=2984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0xffffffffffffffc9) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8af2}, 0x8) chdir(&(0x7f0000000600)='./file0\x00') add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) 3.005317877s ago: executing program 9 (id=2985): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = epoll_create1(0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000004c0)="40eb7456f3f1229ffe57a9f05e9b2c1084d8710c157dbcffec7a7ca77bb25ff8290ce3b428267ddc0dc63d64fe697908398e029c7bd34b07fdc29d15e182bb3359a22c1d6237254b4641239463015f18186e0c9acb44dfe1e92a03fe0b24f81ead7c41608effb1f646499aa63a977058c8591860c867b91e75140a9014214a4aabb1a9327f04769ad85f61e4f720d257eea3edd39400d0251cab103ea9f972afce49d76a1c161b8cfc5cba026e5e2c86b8287a0e8c9be82c3233960144fe0c755063", 0xc2}, {&(0x7f0000000340)="a7af6c0e90dd6c6c49aa7b77adc6aa4b68077e98bec1ab75b7774d5a61de04117fca39b408daacaf3bf151e8c2bcaa3a08c94b8f9075008d88c73877bffd49f4a231e9c2a0a232a1d1c84efdfc3a4b4abe5f608a9c648c5c962c7e34cd3b67c7d5147574ca8326a1c58388dd1d5e82335dd9787a3927a1a7c460eb1158b5174ca78f56210dfe5fff5f00a5", 0x8b}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x81ba6000) syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.617091289s ago: executing program 9 (id=2986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x10) 2.581645696s ago: executing program 9 (id=2987): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x65c083, 0x0) socket(0x22, 0x2, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0) close_range(r2, r8, 0x0) 2.47815824s ago: executing program 3 (id=2988): socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) recvmsg$can_raw(r5, &(0x7f0000000380)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/186, 0xba}], 0x1, &(0x7f0000000300)=""/32, 0x20}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002fed5a99", @ANYRES16=r7, @ANYBLOB="1b062dbd7000ffdbdf2508000000"], 0x14}}, 0x4000) 2.130547293s ago: executing program 7 (id=2989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x7f, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x200000000000000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.039636507s ago: executing program 7 (id=2990): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x101000) r1 = getpgid(0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x90400) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) r3 = syz_pidfd_open(r1, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) pidfd_send_signal(r4, 0x1a, &(0x7f0000000180)={0x4, 0x3, 0x80}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x800000a, 0x6576, 0x84}) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) mmap(&(0x7f00003eb000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x43dee000) 2.000894099s ago: executing program 7 (id=2991): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x18, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x0) kcmp(0x0, 0x0, 0x4, r2, r9) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x22020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r8, 0x25, 0x5, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4048010) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) 1.83589523s ago: executing program 7 (id=2992): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000), 0x1c) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00', @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r9, @ANYBLOB="08002dbd7000fddbdf253900000088005a80340003801400030006000700050007fc07002400910701000500070001000000140003fda100000008009900ff00050005000700440000801b0001006003603009480c030b010530031201161824031236043600050007000200000005000700000000001200010001600230096c12480b24300c361600000c000180050007000000000064005a80040001805c0000801400050009000e00f0ff0800010005000000ff03140001000403041b2406030c0c1636120605050605000400020000002700020012094e1010243f3f25223b4b00013a29140c4e3f13051840102952163c263c011f0a1600d0005a80740000801400050003007f00fbff0080ff7f0180040009000500070001000000140003000900090001000000140500100800020005000400000000000500070002000000110001000c1605050b18241618026c004800000014000300090002000010090003006ba609000104050004000100000028000380050004000100000014000500730307000100ff0f0400f8ff2d0f09000500060002000000300002800e0002001913511b1f251856382a0000140003002000000205000000800004000080080005000600000000007c005a8014000180070001003004480005000600010000000c0000800500060001000000180001800c000100006c0403063601060500060002000000400001801d00010036180102120b3012000c021b36360b0b040c0b026c30010009000000050006000200000014000500b90005000500ffff030005000800fcc5"], 0x24c}, 0x1, 0x0, 0x0, 0x44041}, 0x24004000) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) 871.881623ms ago: executing program 3 (id=2993): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) socket$kcm(0x21, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r4, 0x2000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000040)={{@my=0x1, 0xf}, 0x7, 0x6, 0x80, 0x800, 0x0, 0x2, 0x7419}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x5, 0x0) ptrace(0x4206, r2) ptrace(0x4208, r2) ptrace(0x4207, r2) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 798.562462ms ago: executing program 7 (id=2994): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x8, 0x101}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x303a40, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 693.447397ms ago: executing program 9 (id=2995): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x2, 0x2}) 620.693998ms ago: executing program 9 (id=2996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8}) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x2eda, 0xc040, 0x1, 0xc1}) io_uring_enter(r2, 0x1002215, 0x7721, 0x16, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x25, 0x800, 0x9) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x30101) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_init(0x8, 0x400) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f00000003c0)={0x3, 0x0, '\x00', {0x0, @bt={0x1a8, 0x0, 0x0, 0x3, 0xb, 0x1, 0xfffffff7, 0x6, 0x1, 0x5, 0x0, 0x7d8, 0x1, 0x2, 0x10, 0x30, {0x9c73, 0x1}, 0x3, 0x67}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000002c0)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 190.658394ms ago: executing program 6 (id=2997): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) (fail_nth: 2) 82.856856ms ago: executing program 4 (id=2998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x10) 0s ago: executing program 7 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=""/250, 0x0, 0xfa, 0x0, 0x4}, 0x28) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="a0f6e3981194ec490ad773bdc297ad417a", 0x11}, {&(0x7f00000000c0)="0fd46d65e3da3a097b08e213752b27c473fc1af2d38f2c8f426b7c0c469de314268c6fa59c8945f29c66718e6384971271cd8d5e58820dca4f434955322e34f8fe86913f0d540ca422e33c83fd5fb35479d1f4283314951704d8c7214dcd517db66e290396b44807ea7749147d0c67d336c3e604c9d00ae380176503ed90401913bb71d1c8acdee665de96f7e065d35c2552bce975156f8748183d85890ec4e6ea17e09b86a36f2b6628d11627095d4ae067", 0xb2}, {&(0x7f0000000180)="d191bd35950d25ab9c2f8933a7274ecd52811fa8db5a9a2257e2c6b231", 0x1d}, {&(0x7f00000002c0)="fabccb6f7c60b8640f4ddc2c70f81026ff39fb26e388723f74abd954479a18211a4013d6c3bf9b040e8eb2dd44424b75effb5383ba68998546cbcc69ef2aa0445dcfd4d2408cf2142dc46105712906b408ca74372fb0aabd65e28a1913b813dea4123f5518fb53a679cc6c314053f839bc15831c2edd9ce4803b9cbfec1b5092547d1b1e98cb2dc55d5a6b398f16f5245d298b027d91e26f9dfe793ef418a51bee2a44bbb573806113f07cf48ed0e12049e0723fd710201d32b5fdcc4dfa40d6c93b", 0xc2}, {&(0x7f00000004c0)="41df6d8ea5cecf80741e768619a8d968dc7c22f722c6a30dd7c567e81171c1a11db4d7bbc44572cfcce0dcdc9878dd9c28f162437ab1c5c72262dbc0912e3a20b1220d998fa11735225b42ea5cf2016a5ed27220b20baf93fe8312000d5eeb1b89509c93ed98d9fe65a583795c05777e5a97f010454df9c87c414861a93094d560189ee31af734c179313047f73221c7f74e6c76a9f41bb4723981225916c17a94533106e49d7b251471c8787ad435262a9c4a8a11de011e895dcfad7ad71bca6f588715324a712d52fe2bcc", 0xcc}], 0x5}}], 0x1, 0x240808d4) kernel console output (not intermixed with test programs): omm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 891.697142][ T30] audit: type=1326 audit(2000000834.439:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 891.796584][ T30] audit: type=1326 audit(2000000834.439:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 891.881007][ T5894] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 891.881152][ T30] audit: type=1326 audit(2000000834.439:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 892.411648][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 892.648053][T10400] Process accounting resumed [ 892.677770][ T30] audit: type=1326 audit(2000000834.449:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 892.772456][ T5894] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 892.774390][ T30] audit: type=1326 audit(2000000834.449:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 892.782609][ T5894] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 892.840978][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.856722][ T5894] usb 7-1: Product: syz [ 892.860909][ T5894] usb 7-1: Manufacturer: syz [ 892.871952][ T5894] usb 7-1: SerialNumber: syz [ 892.902900][ T5894] usb 7-1: config 0 descriptor?? [ 892.913355][ T5894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 892.921491][ T5894] usb 7-1: setting power ON [ 892.926055][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 892.936998][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 892.947851][ T5894] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 892.963058][ T5894] usb 7-1: media controller created [ 892.970563][ T30] audit: type=1326 audit(2000000834.449:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 893.051265][ T30] audit: type=1326 audit(2000000834.449:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dd38f6c9 code=0x7ffc0000 [ 893.111347][T15597] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:0 [ 893.186501][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 893.252083][ T5894] usb 7-1: selecting invalid altsetting 6 [ 893.388197][ T5894] usb 7-1: digital interface selection failed (-22) [ 893.459097][ T5894] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 893.545212][ T5894] usb 7-1: setting power OFF [ 893.563540][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 893.607572][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 893.630997][ T5894] (NULL device *): no alternate interface [ 893.742327][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 893.798531][ T5894] usb 7-1: USB disconnect, device number 32 [ 894.326866][T15613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2504'. [ 895.015354][ T5947] net_ratelimit: 4 callbacks suppressed [ 895.015368][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.029046][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.037868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.431398][T13970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.439752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.588774][T15624] openvswitch: netlink: Flow actions attr not present in new flow. [ 895.717040][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 896.021085][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 896.032805][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 896.056947][ T10] usb 4-1: config 0 has no interface number 0 [ 896.072712][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.081059][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.122158][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 896.141050][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.151512][ T10] usb 4-1: Product: syz [ 896.155697][ T10] usb 4-1: Manufacturer: syz [ 896.174436][ T10] usb 4-1: SerialNumber: syz [ 896.197930][ T10] usb 4-1: config 0 descriptor?? [ 896.228792][T15633] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2510'. [ 896.245284][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 896.438148][ T5947] Process accounting resumed [ 896.631693][ T6486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.640015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.070984][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 897.115288][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.142877][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 897.598491][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 897.598508][ T30] audit: type=1400 audit(2000000840.589:1163): avc: denied { ioctl } for pid=15617 comm="syz.6.2507" path="socket:[55448]" dev="sockfs" ino=55448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 897.641239][ T5894] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 897.652582][T15644] ptrace attach of "./syz-executor exec"[10518] was attempted by ""[15644] [ 897.917248][ T10] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 897.928828][ T10] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 897.936325][ T10] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 897.995732][ T5894] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 898.012502][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 898.013493][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.032637][ T5894] usb 5-1: Product: syz [ 898.036823][ T5894] usb 5-1: Manufacturer: syz [ 898.038567][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 898.045862][ T5894] usb 5-1: SerialNumber: syz [ 898.050830][T10399] em28xx 4-1:0.132: Registering V4L2 extension [ 898.084219][ T10] usb 4-1: USB disconnect, device number 19 [ 898.097205][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 898.164148][T10399] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 898.173573][T10399] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 898.180793][T10399] em28xx 4-1:0.132: No AC97 audio processor [ 898.189303][T10399] usb 4-1: Decoder not found [ 898.194027][T10399] em28xx 4-1:0.132: failed to create media graph [ 898.200364][T10399] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 898.208638][T10399] em28xx 4-1:0.132: Remote control support is not available for this card. [ 898.218059][ T10] em28xx 4-1:0.132: Closing input extension [ 898.227380][ T10] em28xx 4-1:0.132: Freeing device [ 898.311028][T15656] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 898.471823][T15656] usb 7-1: Using ep0 maxpacket: 8 [ 898.481079][ T5894] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 898.482011][T15656] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 898.674194][T15656] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 898.684121][T15656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.692271][T15656] usb 7-1: Product: syz [ 898.696446][T15656] usb 7-1: Manufacturer: syz [ 898.702746][T15656] usb 7-1: SerialNumber: syz [ 898.710682][T15656] usb 7-1: config 0 descriptor?? [ 898.719030][T15656] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 898.727391][T15656] usb 7-1: setting power ON [ 898.736265][T15656] dvb-usb: bulk message failed: -22 (2/0) [ 898.758517][T15656] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.788890][T15665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2518'. [ 898.809362][T15656] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 898.818258][T15656] usb 7-1: media controller created [ 899.044118][T15656] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.157323][T15656] usb 7-1: selecting invalid altsetting 6 [ 899.163344][T15656] usb 7-1: digital interface selection failed (-22) [ 899.169999][T15656] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 899.185309][T15656] usb 7-1: setting power OFF [ 899.190104][T15656] dvb-usb: bulk message failed: -22 (2/0) [ 899.203382][T15656] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 899.213137][T15656] (NULL device *): no alternate interface [ 899.236674][T15656] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 899.257792][T15656] usb 7-1: USB disconnect, device number 33 [ 899.281294][ T1189] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 899.442452][ T1189] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 899.459273][ T1189] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.470697][ T1189] usb 10-1: config 0 has no interface number 0 [ 899.478864][ T1189] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 899.491119][ T1189] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.829256][ T1189] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 899.839844][ T1189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.859359][ T1189] usb 10-1: Product: syz [ 899.888255][T15674] input: syz1 as /devices/virtual/input/input83 [ 899.928681][ T1189] usb 10-1: Manufacturer: syz [ 899.944300][ T1189] usb 10-1: SerialNumber: syz [ 899.962609][ T1189] usb 10-1: config 0 descriptor?? [ 899.970097][ T5894] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 900.297785][ T5819] net_ratelimit: 6 callbacks suppressed [ 900.297803][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.276740][ T5894] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 901.290032][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.298453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.309161][ T5819] Process accounting resumed [ 901.336675][ T5894] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 901.351563][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.364012][ T5894] usb 5-1: USB disconnect, device number 60 [ 901.388041][ T10] usb 10-1: USB disconnect, device number 30 [ 901.751441][ T8000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.759784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.001012][ T5894] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 902.139540][T15700] ucma_write: process 364 (syz.9.2530) changed security contexts after opening file descriptor, this is not allowed. [ 902.181048][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 902.192581][ T5894] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 902.202316][ T5894] usb 5-1: config 0 has no interface number 0 [ 902.210205][ T5894] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 902.223613][ T5894] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 902.233952][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.242490][ T5894] usb 5-1: Product: syz [ 902.246929][ T5894] usb 5-1: Manufacturer: syz [ 902.252433][ T5894] usb 5-1: SerialNumber: syz [ 902.297841][ T5894] usb 5-1: config 0 descriptor?? [ 902.329338][ T5894] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 902.353436][ T5894] em28xx 5-1:0.132: Video interface 132 found: [ 902.398926][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.911073][ T5819] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 903.482498][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.572576][ T10] Process accounting resumed [ 903.611785][ T5894] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 903.671169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.791052][ T5819] usb 7-1: Using ep0 maxpacket: 8 [ 903.797674][ T5819] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 903.808156][ T5819] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 903.817291][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.841237][ T5819] usb 7-1: Product: syz [ 903.851002][ T5819] usb 7-1: Manufacturer: syz [ 903.864966][ T5819] usb 7-1: SerialNumber: syz [ 903.896334][ T5819] usb 7-1: config 0 descriptor?? [ 903.913919][ T5819] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 903.931081][ T5819] usb 7-1: setting power ON [ 903.981030][ T5819] dvb-usb: bulk message failed: -22 (2/0) [ 904.004632][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 904.014636][ T5819] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 904.171302][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2536'. [ 904.225577][ T5819] usb 7-1: media controller created [ 904.350072][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.454586][ T5894] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 904.623281][ T5894] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 904.629853][ T5894] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 904.682761][ T30] audit: type=1400 audit(2000000847.669:1164): avc: denied { mount } for pid=15731 comm="syz.3.2538" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 904.857933][ T5819] usb 7-1: selecting invalid altsetting 6 [ 904.870715][ T5819] usb 7-1: digital interface selection failed (-22) [ 904.888897][ T5819] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 904.906118][T15738] 9pnet_fd: Insufficient options for proto=fd [ 904.913003][T15738] trusted_key: encrypted_key: insufficient parameters specified [ 904.930180][ T5819] usb 7-1: setting power OFF [ 904.935120][ T5894] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 904.951112][ T5819] dvb-usb: bulk message failed: -22 (2/0) [ 904.987668][ T5894] em28xx 5-1:0.132: analog set to bulk mode. [ 905.005071][ T5819] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 905.021862][ T5947] em28xx 5-1:0.132: Registering V4L2 extension [ 905.044071][ T5894] usb 5-1: USB disconnect, device number 61 [ 905.062235][ T5819] (NULL device *): no alternate interface [ 905.075790][ T5894] em28xx 5-1:0.132: Disconnecting em28xx [ 905.516383][T15734] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 906.221788][ T5819] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 906.281588][ T5819] usb 7-1: USB disconnect, device number 34 [ 906.749229][T15758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.006303][ T5947] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 907.054027][ T5947] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 907.080976][ T5947] em28xx 5-1:0.132: No AC97 audio processor [ 907.128183][ T5947] usb 5-1: Decoder not found [ 907.150215][ T5947] em28xx 5-1:0.132: failed to create media graph [ 907.168643][ T5947] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 907.188932][ T5947] em28xx 5-1:0.132: Remote control support is not available for this card. [ 907.199318][ T5894] em28xx 5-1:0.132: Closing input extension [ 907.786805][ T5894] em28xx 5-1:0.132: Freeing device [ 908.574006][T15751] Process accounting resumed [ 908.650391][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2545'. [ 909.144981][T15779] FAULT_INJECTION: forcing a failure. [ 909.144981][T15779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.159050][T15779] CPU: 1 UID: 0 PID: 15779 Comm: syz.9.2546 Not tainted syzkaller #0 PREEMPT(full) [ 909.159077][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 909.159087][T15779] Call Trace: [ 909.159093][T15779] [ 909.159101][T15779] dump_stack_lvl+0x16c/0x1f0 [ 909.159135][T15779] should_fail_ex+0x512/0x640 [ 909.159161][T15779] _copy_from_user+0x2e/0xd0 [ 909.159184][T15779] copy_msghdr_from_user+0x98/0x160 [ 909.159209][T15779] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 909.159248][T15779] ___sys_sendmsg+0xfe/0x1d0 [ 909.159291][T15779] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.159315][T15779] ? __lock_acquire+0x622/0x1c90 [ 909.159371][T15779] __sys_sendmsg+0x16d/0x220 [ 909.159396][T15779] ? __pfx___sys_sendmsg+0x10/0x10 [ 909.159439][T15779] do_syscall_64+0xcd/0xfa0 [ 909.159462][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.159482][T15779] RIP: 0033:0x7fe0b298f6c9 [ 909.159498][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.159518][T15779] RSP: 002b:00007fe0b388e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.159537][T15779] RAX: ffffffffffffffda RBX: 00007fe0b2be5fa0 RCX: 00007fe0b298f6c9 [ 909.159552][T15779] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 909.159570][T15779] RBP: 00007fe0b388e090 R08: 0000000000000000 R09: 0000000000000000 [ 909.159583][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.159594][T15779] R13: 00007fe0b2be6038 R14: 00007fe0b2be5fa0 R15: 00007fff7a776128 [ 909.159624][T15779] [ 909.321055][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.486383][T15787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 911.637330][ T30] audit: type=1400 audit(2000000854.629:1165): avc: denied { ioctl } for pid=15821 comm="syz.4.2558" path="socket:[55789]" dev="sockfs" ino=55789 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 912.029853][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2559'. [ 914.754703][T15852] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2564'. [ 915.042060][T15860] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2567'. [ 915.071668][ T5894] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 915.147249][T15862] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2568'. [ 915.211294][ T5894] usb 7-1: device descriptor read/64, error -71 [ 915.271477][T15865] Process accounting resumed [ 915.511092][ T5894] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 915.531074][T15656] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 915.604477][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2571'. [ 916.022933][T15656] usb 4-1: Using ep0 maxpacket: 8 [ 916.060299][T15656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.061002][ T5894] usb 7-1: device descriptor read/64, error -71 [ 916.092128][T15656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.108490][ T30] audit: type=1400 audit(2000000859.099:1166): avc: denied { getopt } for pid=15870 comm="syz.9.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 916.211787][ T5894] usb usb7-port1: attempt power cycle [ 916.221547][T15656] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 916.237531][T15656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.253320][T15656] usb 4-1: config 0 descriptor?? [ 916.472333][T15879] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 916.561885][ T5894] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 916.654417][ T5894] usb 7-1: device descriptor read/8, error -71 [ 916.891236][ T5894] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 916.922418][ T5894] usb 7-1: device descriptor read/8, error -71 [ 917.031886][ T5894] usb usb7-port1: unable to enumerate USB device [ 917.573539][T15897] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2577'. [ 918.253328][T15906] FAULT_INJECTION: forcing a failure. [ 918.253328][T15906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 918.420197][T15908] cgroup2: Unknown parameter 'kmem_cache_free' [ 918.434242][T15908] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 918.468805][ T30] audit: type=1326 audit(2000000861.419:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 918.860794][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.4.2581 Not tainted syzkaller #0 PREEMPT(full) [ 918.860821][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 918.860831][T15906] Call Trace: [ 918.860838][T15906] [ 918.860846][T15906] dump_stack_lvl+0x16c/0x1f0 [ 918.860877][T15906] should_fail_ex+0x512/0x640 [ 918.860906][T15906] should_fail_alloc_page+0xe7/0x130 [ 918.860930][T15906] prepare_alloc_pages+0x3c2/0x610 [ 918.860957][T15906] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 918.860984][T15906] ? find_held_lock+0x2b/0x80 [ 918.861008][T15906] ? is_bpf_text_address+0x8a/0x1a0 [ 918.861029][T15906] ? bpf_ksym_find+0x127/0x1c0 [ 918.861055][T15906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 918.861080][T15906] ? is_bpf_text_address+0x94/0x1a0 [ 918.861103][T15906] ? kernel_text_address+0x8d/0x100 [ 918.861126][T15906] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 918.861153][T15906] ? arch_stack_walk+0xa6/0x100 [ 918.861180][T15906] ? chacha_permute+0x5ae/0x6d0 [ 918.861208][T15906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 918.861234][T15906] ? policy_nodemask+0xea/0x4e0 [ 918.861261][T15906] alloc_pages_mpol+0x1fb/0x550 [ 918.861283][T15906] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 918.861312][T15906] ___kmalloc_large_node+0xed/0x160 [ 918.861339][T15906] __kmalloc_large_node_noprof+0x1c/0x70 [ 918.861363][T15906] __kmalloc_noprof.cold+0xc/0x62 [ 918.861389][T15906] ? encrypted_instantiate+0x158/0xa80 [ 918.861421][T15906] ? encrypted_instantiate+0x158/0xa80 [ 918.861445][T15906] encrypted_instantiate+0x158/0xa80 [ 918.861470][T15906] ? __pfx___might_resched+0x10/0x10 [ 918.861495][T15906] ? rcu_is_watching+0x12/0xc0 [ 918.861520][T15906] ? __pfx_encrypted_instantiate+0x10/0x10 [ 918.861548][T15906] ? __mutex_lock+0x1c5/0x1060 [ 918.861568][T15906] ? mark_held_locks+0x49/0x80 [ 918.861586][T15906] ? irqentry_exit+0x3b/0x90 [ 918.861621][T15906] ? _raw_spin_unlock+0x28/0x50 [ 918.861657][T15906] ? key_alloc+0xac0/0x1330 [ 918.861687][T15906] __key_instantiate_and_link+0x11a/0x520 [ 918.861716][T15906] ? __pfx___key_instantiate_and_link+0x10/0x10 [ 918.861740][T15906] ? bpf_lsm_key_permission+0x9/0x10 [ 918.861762][T15906] ? security_key_permission+0x79/0x240 [ 918.861792][T15906] __key_create_or_update+0x759/0xe10 [ 918.861822][T15906] ? __pfx___key_create_or_update+0x10/0x10 [ 918.861848][T15906] ? lookup_user_key+0x2ce/0x1300 [ 918.861878][T15906] ? rcu_is_watching+0x12/0xc0 [ 918.861909][T15906] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 918.861933][T15906] ? __pfx_keyring_search_iterator+0x10/0x10 [ 918.861965][T15906] key_create_or_update+0x42/0x60 [ 918.861994][T15906] __do_sys_add_key+0x29d/0x470 [ 918.862024][T15906] ? __pfx___do_sys_add_key+0x10/0x10 [ 918.862048][T15906] ? ksys_write+0x1ac/0x250 [ 918.862079][T15906] do_syscall_64+0xcd/0xfa0 [ 918.862100][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.862121][T15906] RIP: 0033:0x7fb0dd38f6c9 [ 918.862138][T15906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.862158][T15906] RSP: 002b:00007fb0de1d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 918.862177][T15906] RAX: ffffffffffffffda RBX: 00007fb0dd5e5fa0 RCX: 00007fb0dd38f6c9 [ 918.862191][T15906] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000000 [ 918.862205][T15906] RBP: 00007fb0de1d1090 R08: 0000000011211b5f R09: 0000000000000000 [ 918.862217][T15906] R10: 0000000000003c0a R11: 0000000000000246 R12: 0000000000000002 [ 918.862230][T15906] R13: 00007fb0dd5e6038 R14: 00007fb0dd5e5fa0 R15: 00007ffe2c206948 [ 918.862260][T15906] [ 919.301151][ T30] audit: type=1326 audit(2000000861.429:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 919.325800][ T30] audit: type=1326 audit(2000000861.429:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 919.407602][ T30] audit: type=1400 audit(2000000861.439:1170): avc: denied { relabelto } for pid=15900 comm="syz.6.2579" name="276" dev="tmpfs" ino=1484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 919.434926][ T30] audit: type=1400 audit(2000000861.439:1171): avc: denied { associate } for pid=15900 comm="syz.6.2579" name="276" dev="tmpfs" ino=1484 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 919.462409][ T30] audit: type=1326 audit(2000000861.439:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 919.486037][ T30] audit: type=1326 audit(2000000861.439:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 919.511587][ T30] audit: type=1326 audit(2000000861.449:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 919.535742][ T30] audit: type=1326 audit(2000000861.449:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 919.559641][ T30] audit: type=1326 audit(2000000861.449:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.6.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a38f6c9 code=0x7ffc0000 [ 920.598752][T15928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 921.388176][ T5865] Process accounting resumed [ 921.511146][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 921.695258][ T10] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 921.758941][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.831825][T15656] usbhid 4-1:0.0: can't add hid device: -32 [ 921.846628][T15656] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 921.861059][ T10] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 921.895524][ T10] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 921.927786][ T10] usb 10-1: Manufacturer: syz [ 921.937307][ T10] usb 10-1: config 0 descriptor?? [ 921.951274][ T5894] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 922.111019][ T10] rc_core: IR keymap rc-hauppauge not found [ 922.123186][ T10] Registered IR keymap rc-empty [ 922.123507][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 922.142396][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 922.144387][ T5894] usb 5-1: config 0 has no interface number 0 [ 922.162143][ T5894] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 922.171612][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.175688][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input87 [ 922.181072][ T5894] usb 5-1: Product: syz [ 922.197190][ T5894] usb 5-1: Manufacturer: syz [ 922.202256][ T5894] usb 5-1: SerialNumber: syz [ 922.225450][ T5894] usb 5-1: config 0 descriptor?? [ 922.445352][ T5894] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 922.502338][ T5894] usb 5-1: USB disconnect, device number 62 [ 924.449134][T15971] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.534877][T15971] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.929547][T15971] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.935253][ T5894] usb 10-1: USB disconnect, device number 31 [ 925.039070][T15971] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.287518][ T8000] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.423386][ T8000] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.667278][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.679653][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.194763][T16008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2603'. [ 927.239946][T16008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 927.616961][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2604'. [ 928.525543][ T5894] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 928.681033][ T5865] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 928.693207][ T5894] usb 10-1: Using ep0 maxpacket: 8 [ 928.715352][ T5894] usb 10-1: config 0 has an invalid interface number: 176 but max is 3 [ 928.735133][ T5894] usb 10-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 928.760508][ T5894] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 928.782625][ T5894] usb 10-1: config 0 has no interface number 0 [ 928.798643][ T5894] usb 10-1: config 0 has no interface number 1 [ 928.814027][ T5894] usb 10-1: config 0 interface 176 altsetting 6 endpoint 0x2 has an invalid bInterval 76, changing to 7 [ 928.832538][ T5865] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 928.853843][ T5894] usb 10-1: config 0 interface 176 altsetting 6 endpoint 0x2 has invalid maxpacket 1552, setting to 1024 [ 928.856590][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.892192][ T5894] usb 10-1: config 0 interface 176 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 928.906725][ T5865] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 928.913641][ T5894] usb 10-1: config 0 interface 176 altsetting 6 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 928.916112][ T5865] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 928.943041][ T5894] usb 10-1: config 0 interface 176 altsetting 6 endpoint 0x4 has an invalid bInterval 253, changing to 11 [ 928.952554][ T5865] usb 7-1: Manufacturer: syz [ 928.971826][ T5865] usb 7-1: config 0 descriptor?? [ 928.982656][ T5894] usb 10-1: config 0 interface 176 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 929.007655][ T5894] usb 10-1: config 0 interface 176 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 929.030530][ T5894] usb 10-1: config 0 interface 176 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 929.058689][ T5894] usb 10-1: config 0 interface 176 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 929.080733][ T5894] usb 10-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 929.082192][ T5865] rc_core: IR keymap rc-hauppauge not found [ 929.109106][ T5894] usb 10-1: config 0 interface 176 has no altsetting 0 [ 929.116346][ T5865] Registered IR keymap rc-empty [ 929.123526][ T5894] usb 10-1: config 0 interface 2 has no altsetting 0 [ 929.129108][ T5865] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 929.144269][ T5894] usb 10-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=c7.5d [ 929.153684][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.167985][ T5865] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input88 [ 929.170962][ T5894] usb 10-1: Product: syz [ 929.196319][ T5894] usb 10-1: Manufacturer: syz [ 929.201292][ T5894] usb 10-1: SerialNumber: syz [ 929.376962][ T5894] usb 10-1: config 0 descriptor?? [ 929.508174][T16035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2611'. [ 929.548026][T16035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.902453][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 929.958496][ T5894] usb 10-1: USB disconnect, device number 32 [ 930.461062][ T5819] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 930.632969][ T5819] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 930.657601][T16052] fuse: Bad value for 'fd' [ 930.662419][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.742502][ T5819] usb 5-1: config 0 descriptor?? [ 930.772214][ T5819] usb 5-1: selecting invalid altsetting 1 [ 930.792623][ T5819] flexcop_usb: set interface failed. [ 930.803976][ T5819] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 931.015319][T16038] fuse: Bad value for 'fd' [ 931.040796][ T5819] usb 5-1: USB disconnect, device number 63 [ 931.372958][T16060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2619'. [ 931.446551][ T5865] usb 7-1: USB disconnect, device number 39 [ 931.790709][T16070] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 932.803367][T16085] FAULT_INJECTION: forcing a failure. [ 932.803367][T16085] name failslab, interval 1, probability 0, space 0, times 0 [ 932.845271][T16085] CPU: 1 UID: 0 PID: 16085 Comm: syz.3.2627 Not tainted syzkaller #0 PREEMPT(full) [ 932.845299][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 932.845311][T16085] Call Trace: [ 932.845318][T16085] [ 932.845326][T16085] dump_stack_lvl+0x16c/0x1f0 [ 932.845362][T16085] should_fail_ex+0x512/0x640 [ 932.845386][T16085] ? __kmalloc_cache_noprof+0x5f/0x780 [ 932.845418][T16085] should_failslab+0xc2/0x120 [ 932.845441][T16085] __kmalloc_cache_noprof+0x72/0x780 [ 932.845470][T16085] ? kobject_uevent_env+0x265/0x1870 [ 932.845500][T16085] ? kobject_uevent_env+0x265/0x1870 [ 932.845523][T16085] kobject_uevent_env+0x265/0x1870 [ 932.845547][T16085] ? __pfx_dev_uevent_name+0x10/0x10 [ 932.845587][T16085] lo_ioctl+0xcc6/0x1cb0 [ 932.845627][T16085] ? __pfx_lo_ioctl+0x10/0x10 [ 932.845653][T16085] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 932.845683][T16085] ? kasan_quarantine_put+0x10a/0x240 [ 932.845703][T16085] ? lockdep_hardirqs_on+0x7c/0x110 [ 932.845725][T16085] ? blk_get_meta_cap+0xbc/0x700 [ 932.845756][T16085] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 932.845792][T16085] ? blkdev_common_ioctl+0x1d6/0x2470 [ 932.845824][T16085] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 932.845857][T16085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 932.845885][T16085] ? do_vfs_ioctl+0x128/0x14f0 [ 932.845913][T16085] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 932.845940][T16085] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 932.845976][T16085] ? __pfx_lo_ioctl+0x10/0x10 [ 932.846005][T16085] blkdev_ioctl+0x277/0x6d0 [ 932.846032][T16085] ? __pfx_blkdev_ioctl+0x10/0x10 [ 932.846058][T16085] ? selinux_file_ioctl+0x180/0x270 [ 932.846080][T16085] ? selinux_file_ioctl+0xb4/0x270 [ 932.846104][T16085] ? __pfx_blkdev_ioctl+0x10/0x10 [ 932.846133][T16085] __x64_sys_ioctl+0x18e/0x210 [ 932.846162][T16085] do_syscall_64+0xcd/0xfa0 [ 932.846183][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.846204][T16085] RIP: 0033:0x7ff043b8f6c9 [ 932.846221][T16085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.846241][T16085] RSP: 002b:00007ff044ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.846260][T16085] RAX: ffffffffffffffda RBX: 00007ff043de5fa0 RCX: 00007ff043b8f6c9 [ 932.846275][T16085] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 932.846287][T16085] RBP: 00007ff044ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 932.846303][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.846315][T16085] R13: 00007ff043de6038 R14: 00007ff043de5fa0 R15: 00007ffd9af002a8 [ 932.846346][T16085] [ 933.110279][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.847601][T13527] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 933.984444][T16111] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2633'. [ 934.016052][T16111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.068355][T13527] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 934.361083][T13527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.374409][T13527] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 934.385528][T13527] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 934.393864][T13527] usb 10-1: Manufacturer: syz [ 934.403466][T13527] usb 10-1: config 0 descriptor?? [ 934.432016][ T5865] IPVS: starting estimator thread 0... [ 934.447453][T16112] tipc: Started in network mode [ 934.452477][T16112] tipc: Node identity ac1414aa, cluster identity 4711 [ 934.460000][T16112] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 934.473944][T13527] rc_core: IR keymap rc-hauppauge not found [ 934.479854][T13527] Registered IR keymap rc-empty [ 934.497362][T16112] tipc: Enabled bearer , priority 10 [ 934.507005][T13527] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 934.591363][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 934.629491][T13527] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input90 [ 934.651077][T16114] IPVS: using max 32 ests per chain, 76800 per kthread [ 934.731510][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 934.871041][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 935.011019][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 935.161031][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 935.311038][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 935.461016][ T5819] tipc: Node number set to 2886997162 [ 935.611000][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 935.891038][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 936.556404][T16132] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2639'. [ 937.093669][ T5819] usb 10-1: USB disconnect, device number 33 [ 937.372945][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.401017][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.431045][ C1] net_ratelimit: 1 callbacks suppressed [ 937.431066][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 937.733086][T16138] input: syz1 as /devices/virtual/input/input91 [ 938.091217][ T5865] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 938.241048][ T5865] usb 10-1: Using ep0 maxpacket: 16 [ 938.258579][ T5865] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.371573][ T5865] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 938.383122][ T5865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.406307][ T5865] usb 10-1: config 0 descriptor?? [ 938.471067][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 939.511034][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 940.066610][ T5819] Process accounting resumed [ 940.231461][ T5865] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 940.484522][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 940.484538][ T30] audit: type=1400 audit(2000000883.469:1192): avc: denied { mounton } for pid=16147 comm="syz.9.2645" path="/124/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 940.551060][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 940.616709][ T5819] usb 10-1: USB disconnect, device number 34 [ 940.968684][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2652'. [ 941.011903][T16182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.422447][ T30] audit: type=1400 audit(2000000884.419:1193): avc: denied { unmount } for pid=13405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 941.601015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 941.603733][T16186] vxcan1: entered promiscuous mode [ 942.176639][T16191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.631067][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 942.885844][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.013717][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.671051][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 944.711042][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 945.324431][ T5865] IPVS: starting estimator thread 0... [ 945.381046][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 945.421306][T16226] IPVS: using max 42 ests per chain, 100800 per kthread [ 945.549835][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.761013][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 945.897695][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.058470][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 946.144994][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.365852][ T10] usb 7-1: config 0 descriptor?? [ 946.791048][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 946.961295][T13527] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 947.406605][T16239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.418507][T16239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.672123][T13527] usb 5-1: Using ep0 maxpacket: 32 [ 947.684136][T13527] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 947.701192][T13527] usb 5-1: config 0 has no interface number 0 [ 947.717477][T13527] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.739800][T13527] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 947.759106][T13527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.781927][T13527] usb 5-1: Product: syz [ 947.792934][T13527] usb 5-1: Manufacturer: syz [ 947.803299][T13527] usb 5-1: SerialNumber: syz [ 947.831047][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 947.997065][T13527] usb 5-1: config 0 descriptor?? [ 948.007902][T13527] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 948.017726][T13527] em28xx 5-1:0.132: Video interface 132 found: [ 948.051047][ T5865] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 948.311363][ T5865] usb 10-1: Using ep0 maxpacket: 32 [ 948.323999][ T5865] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 948.332434][ T5865] usb 10-1: config 0 has no interface number 0 [ 948.338935][ T5865] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 948.372552][ T5865] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 948.382555][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.424399][ T5865] usb 10-1: Product: syz [ 948.431869][ T5865] usb 10-1: Manufacturer: syz [ 948.446665][ T5865] usb 10-1: SerialNumber: syz [ 948.508663][ T5865] usb 10-1: config 0 descriptor?? [ 948.524331][T13527] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 948.526401][ T5865] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 948.541661][ T5865] em28xx 10-1:0.132: Video interface 132 found: [ 948.726600][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 948.732861][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 948.871038][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 948.952598][ T10] usb 7-1: USB disconnect, device number 40 [ 949.241416][T10399] Process accounting resumed [ 949.681064][ T5865] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 949.825022][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2677'. [ 949.868974][T13527] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 949.899104][T13527] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 949.906124][T13527] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 949.915295][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 950.011032][T13527] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 950.028852][T13527] em28xx 5-1:0.132: analog set to bulk mode. [ 950.037262][ T5894] em28xx 5-1:0.132: Registering V4L2 extension [ 950.077611][T13527] usb 5-1: USB disconnect, device number 64 [ 950.121441][T13527] em28xx 5-1:0.132: Disconnecting em28xx [ 950.342912][T16277] xt_TCPMSS: Only works on TCP SYN packets [ 950.417575][ T5894] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 950.437818][ T5894] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 950.460860][ T5894] em28xx 5-1:0.132: No AC97 audio processor [ 950.479776][ T5894] usb 5-1: Decoder not found [ 950.489173][ T5865] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 950.490071][ T5894] em28xx 5-1:0.132: failed to create media graph [ 950.505639][ T5865] em28xx 10-1:0.132: board has no eeprom [ 950.526910][ T5894] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 950.562217][ T5894] em28xx 5-1:0.132: Remote control support is not available for this card. [ 950.581639][T13527] em28xx 5-1:0.132: Closing input extension [ 950.584585][ T5865] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 950.630192][ T5865] em28xx 10-1:0.132: analog set to bulk mode. [ 950.641198][T16281] tmpfs: Unknown parameter 'grpquota_' [ 950.656688][T13527] em28xx 5-1:0.132: Freeing device [ 950.661947][ T10] em28xx 10-1:0.132: Registering V4L2 extension [ 950.721114][ T5865] usb 10-1: USB disconnect, device number 35 [ 950.757421][ T5865] em28xx 10-1:0.132: Disconnecting em28xx [ 950.951468][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 951.334329][ T30] audit: type=1400 audit(2000000894.079:1194): avc: denied { compute_member } for pid=16283 comm="syz.4.2680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 952.001015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 952.937310][ T10] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 952.944610][ T10] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 952.968498][ T10] em28xx 10-1:0.132: No AC97 audio processor [ 953.031764][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 953.054433][ T10] usb 10-1: Decoder not found [ 953.067378][ T10] em28xx 10-1:0.132: failed to create media graph [ 953.084143][ T10] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 953.117439][ T10] em28xx 10-1:0.132: Remote control support is not available for this card. [ 953.156657][ T5865] em28xx 10-1:0.132: Closing input extension [ 953.167416][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2684'. [ 953.187119][ T5865] em28xx 10-1:0.132: Freeing device [ 953.696060][T16315] tmpfs: Unknown parameter 'grpquota_' [ 953.721213][ T5865] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 953.991556][ T5819] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 954.039725][ T5865] usb 10-1: Using ep0 maxpacket: 32 [ 954.071055][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 954.092800][T16323] FAULT_INJECTION: forcing a failure. [ 954.092800][T16323] name failslab, interval 1, probability 0, space 0, times 0 [ 954.092833][T16323] CPU: 1 UID: 0 PID: 16323 Comm: syz.3.2690 Not tainted syzkaller #0 PREEMPT(full) [ 954.092846][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 954.092854][T16323] Call Trace: [ 954.092858][T16323] [ 954.092863][T16323] dump_stack_lvl+0x16c/0x1f0 [ 954.092884][T16323] should_fail_ex+0x512/0x640 [ 954.092898][T16323] ? fs_reclaim_acquire+0xae/0x150 [ 954.092913][T16323] should_failslab+0xc2/0x120 [ 954.092927][T16323] __kmalloc_noprof+0xdd/0x880 [ 954.092943][T16323] ? tomoyo_encode2+0x100/0x3e0 [ 954.092959][T16323] ? tomoyo_encode2+0x100/0x3e0 [ 954.092971][T16323] tomoyo_encode2+0x100/0x3e0 [ 954.092996][T16323] tomoyo_encode+0x29/0x50 [ 954.093008][T16323] tomoyo_realpath_from_path+0x18f/0x6e0 [ 954.093026][T16323] tomoyo_path_number_perm+0x245/0x580 [ 954.093037][T16323] ? tomoyo_path_number_perm+0x237/0x580 [ 954.093049][T16323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 954.093061][T16323] ? find_held_lock+0x2b/0x80 [ 954.093090][T16323] ? find_held_lock+0x2b/0x80 [ 954.093103][T16323] ? hook_file_ioctl_common+0x145/0x410 [ 954.093122][T16323] ? __fget_files+0x20e/0x3c0 [ 954.093136][T16323] security_file_ioctl+0x9b/0x240 [ 954.093150][T16323] __x64_sys_ioctl+0xb7/0x210 [ 954.093167][T16323] do_syscall_64+0xcd/0xfa0 [ 954.093179][T16323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.093190][T16323] RIP: 0033:0x7ff043b8f6c9 [ 954.093200][T16323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.093211][T16323] RSP: 002b:00007ff044aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.093222][T16323] RAX: ffffffffffffffda RBX: 00007ff043de6090 RCX: 00007ff043b8f6c9 [ 954.093232][T16323] RDX: 0000200000000300 RSI: 0000000000005600 RDI: 0000000000000003 [ 954.093240][T16323] RBP: 00007ff044aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 954.093247][T16323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.093254][T16323] R13: 00007ff043de6128 R14: 00007ff043de6090 R15: 00007ffd9af002a8 [ 954.093270][T16323] [ 954.093281][T16323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 954.152647][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 954.163860][ T5819] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 954.163884][ T5819] usb 7-1: config 0 has no interface number 0 [ 954.163907][ T5819] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 954.222748][ T5819] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 954.227427][ T5865] usb 10-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 954.510978][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.511297][ T5819] usb 7-1: Product: syz [ 954.511316][ T5819] usb 7-1: Manufacturer: syz [ 954.511335][ T5819] usb 7-1: SerialNumber: syz [ 954.534820][ T5819] usb 7-1: config 0 descriptor?? [ 954.547472][ T5819] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 954.547494][ T5819] em28xx 7-1:0.132: Video interface 132 found: [ 954.836757][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.850236][ T5865] usb 10-1: Product: syz [ 954.855050][ T5865] usb 10-1: Manufacturer: syz [ 954.861258][ T5865] usb 10-1: SerialNumber: syz [ 954.868303][ T5865] usb 10-1: config 0 descriptor?? [ 954.903921][ T5865] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 954.984800][ T5819] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 955.121037][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 955.421280][ T5865] gspca_vc032x: reg_w err -110 [ 955.426176][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.018456][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.023868][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.029183][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.034567][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.039836][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.045276][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.050547][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.055982][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.061369][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.066724][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.072890][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.078243][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.083553][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.088910][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.094347][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.099696][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.109908][ T5894] Process accounting resumed [ 956.151012][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 956.160721][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.170734][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 956.180545][ T5865] gspca_vc032x: Unknown sensor... [ 956.185870][ T5865] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 956.566989][ T5819] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 956.597965][ T5819] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 956.605093][ T5819] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 956.926880][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 956.980994][ T5819] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 957.101811][ T5819] em28xx 7-1:0.132: analog set to bulk mode. [ 957.112103][T13527] em28xx 7-1:0.132: Registering V4L2 extension [ 957.170327][ T5819] usb 7-1: USB disconnect, device number 41 [ 957.182045][ T6486] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.192814][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 957.212294][ T5819] em28xx 7-1:0.132: Disconnecting em28xx [ 957.636002][T13527] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 958.231035][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 958.322046][T13527] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 958.329973][T13527] em28xx 7-1:0.132: No AC97 audio processor [ 958.340707][T13527] usb 7-1: Decoder not found [ 958.361068][T13527] em28xx 7-1:0.132: failed to create media graph [ 958.371294][T13527] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 958.393750][T13527] em28xx 7-1:0.132: Remote control support is not available for this card. [ 958.429873][ T5819] em28xx 7-1:0.132: Closing input extension [ 958.453816][ T6486] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.464500][ T5819] em28xx 7-1:0.132: Freeing device [ 958.664988][ T6486] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.687340][T16367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.707275][T16367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.741915][ T6486] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.088412][ T10] usb 10-1: USB disconnect, device number 36 [ 959.214723][T16375] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 959.240626][T16375] overlayfs: failed to set xattr on upper [ 959.271464][T16375] overlayfs: ...falling back to redirect_dir=nofollow. [ 959.281087][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 959.304944][T16375] overlayfs: ...falling back to uuid=null. [ 959.352041][ T6486] bridge_slave_0: left allmulticast mode [ 959.369136][ T6486] bridge_slave_0: left promiscuous mode [ 959.398916][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.509047][T16377] Process accounting resumed [ 960.311033][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 961.260129][ T5865] Process accounting resumed [ 961.351308][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 961.654816][T16403] FAULT_INJECTION: forcing a failure. [ 961.654816][T16403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 961.669012][T16403] CPU: 1 UID: 0 PID: 16403 Comm: syz.9.2710 Not tainted syzkaller #0 PREEMPT(full) [ 961.669043][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 961.669055][T16403] Call Trace: [ 961.669063][T16403] [ 961.669071][T16403] dump_stack_lvl+0x16c/0x1f0 [ 961.669107][T16403] should_fail_ex+0x512/0x640 [ 961.669136][T16403] should_fail_alloc_page+0xe7/0x130 [ 961.669163][T16403] prepare_alloc_pages+0x3c2/0x610 [ 961.669187][T16403] ? rcu_is_watching+0x12/0xc0 [ 961.669216][T16403] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 961.669251][T16403] ? rcu_is_watching+0x12/0xc0 [ 961.669277][T16403] ? trace_mm_page_alloc+0x11f/0x1a0 [ 961.669301][T16403] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 961.669334][T16403] ? __pfx_stack_trace_save+0x10/0x10 [ 961.669363][T16403] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 961.669392][T16403] ? stack_depot_save_flags+0x29/0x9c0 [ 961.669418][T16403] ? __lock_acquire+0x622/0x1c90 [ 961.669444][T16403] ? alloc_vmap_area+0x648/0x29e0 [ 961.669461][T16403] ? get_vm_area_caller+0x71/0xa0 [ 961.669482][T16403] ? xdp_umem_create+0xdec/0x1270 [ 961.669507][T16403] ? xsk_setsockopt+0x6db/0x9a0 [ 961.669530][T16403] ? do_sock_setsockopt+0xf3/0x1d0 [ 961.669559][T16403] ? __sys_setsockopt+0x1a0/0x230 [ 961.669583][T16403] ? __x64_sys_setsockopt+0xbd/0x160 [ 961.669607][T16403] ? do_syscall_64+0xcd/0xfa0 [ 961.669625][T16403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.669658][T16403] alloc_pages_bulk_noprof+0x71c/0x1410 [ 961.669687][T16403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 961.669722][T16403] ? policy_nodemask+0xea/0x4e0 [ 961.669749][T16403] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 961.669781][T16403] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 961.669820][T16403] kasan_populate_vmalloc+0x112/0x2d0 [ 961.669840][T16403] ? alloc_vmap_area+0x8b5/0x29e0 [ 961.669869][T16403] alloc_vmap_area+0x960/0x29e0 [ 961.669905][T16403] ? __pfx_alloc_vmap_area+0x10/0x10 [ 961.669938][T16403] __get_vm_area_node+0x1ca/0x330 [ 961.669965][T16403] ? xdp_umem_create+0xdec/0x1270 [ 961.669992][T16403] get_vm_area_caller+0x71/0xa0 [ 961.670017][T16403] ? xdp_umem_create+0xdec/0x1270 [ 961.670045][T16403] vmap+0x135/0x320 [ 961.670066][T16403] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 961.670088][T16403] ? __pfx_vmap+0x10/0x10 [ 961.670111][T16403] ? xdp_umem_create+0x786/0x1270 [ 961.670144][T16403] xdp_umem_create+0xdec/0x1270 [ 961.670181][T16403] xsk_setsockopt+0x6db/0x9a0 [ 961.670208][T16403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 961.670233][T16403] ? find_held_lock+0x2b/0x80 [ 961.670264][T16403] ? selinux_socket_setsockopt+0x6a/0x80 [ 961.670286][T16403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 961.670313][T16403] do_sock_setsockopt+0xf3/0x1d0 [ 961.670347][T16403] __sys_setsockopt+0x1a0/0x230 [ 961.670379][T16403] __x64_sys_setsockopt+0xbd/0x160 [ 961.670407][T16403] ? do_syscall_64+0x91/0xfa0 [ 961.670421][T16403] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.670438][T16403] do_syscall_64+0xcd/0xfa0 [ 961.670459][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.670480][T16403] RIP: 0033:0x7fe0b298f6c9 [ 961.670497][T16403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.670517][T16403] RSP: 002b:00007fe0b384c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 961.670538][T16403] RAX: ffffffffffffffda RBX: 00007fe0b2be6180 RCX: 00007fe0b298f6c9 [ 961.670552][T16403] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 961.670565][T16403] RBP: 00007fe0b384c090 R08: 0000000000000020 R09: 0000000000000000 [ 961.670578][T16403] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 961.670591][T16403] R13: 00007fe0b2be6218 R14: 00007fe0b2be6180 R15: 00007fff7a776128 [ 961.670622][T16403] [ 962.391017][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 962.556352][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.595111][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.637346][T16412] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2712'. [ 962.929501][ T6486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.954832][ T6486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.978483][ T6486] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 962.989770][ T6486] bond0 (unregistering): Released all slaves [ 963.109209][T16412] gretap0: entered promiscuous mode [ 963.431178][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 963.761001][T13527] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 964.471184][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 964.580989][T13527] usb 10-1: Using ep0 maxpacket: 32 [ 964.595047][T13527] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 964.605626][ T6486] hsr_slave_0: left promiscuous mode [ 964.612538][T13527] usb 10-1: config 0 has no interface number 0 [ 964.618745][T13527] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 964.631078][ T6486] hsr_slave_1: left promiscuous mode [ 964.636904][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.647579][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.666855][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.685410][T13527] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 964.694790][T13527] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.805821][T13527] usb 10-1: Product: syz [ 964.850964][T13527] usb 10-1: Manufacturer: syz [ 965.027356][T16439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.320306][T13527] usb 10-1: SerialNumber: syz [ 965.409974][T13527] usb 10-1: config 0 descriptor?? [ 965.444510][ T6486] veth1_macvtap: left promiscuous mode [ 965.448502][T13527] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 965.468821][ T6486] veth0_macvtap: left promiscuous mode [ 965.484125][ T6486] veth1_vlan: left promiscuous mode [ 965.490086][ T6486] ªªªªª2: left promiscuous mode [ 965.511060][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 965.567496][T13527] em28xx 10-1:0.132: Video interface 132 found: [ 966.094028][T13527] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 966.551022][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 967.211351][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 967.367179][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 967.377428][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.386632][ T10] usb 7-1: Product: syz [ 967.392645][ T10] usb 7-1: Manufacturer: syz [ 967.397498][ T10] usb 7-1: SerialNumber: syz [ 967.591163][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 967.673209][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 967.744156][ T6486] team0 (unregistering): Port device C removed [ 967.752340][T13527] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 967.779789][T13527] em28xx 10-1:0.132: board has no eeprom [ 967.847680][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 967.861489][T13527] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 967.880744][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 967.889843][T13527] em28xx 10-1:0.132: analog set to bulk mode. [ 967.901398][ T5819] em28xx 10-1:0.132: Registering V4L2 extension [ 967.988828][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 968.017055][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 968.026238][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 968.045478][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 968.086566][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 968.096870][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 968.108249][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 968.119428][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 968.160024][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 968.169574][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 968.182559][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 968.196768][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 968.206141][ T5819] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 968.217214][ T5819] em28xx 10-1:0.132: Config register raw data: 0xfffffffb [ 968.224871][ T5819] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 968.232269][ T5819] em28xx 10-1:0.132: No AC97 audio processor [ 968.261610][ T5819] usb 10-1: Decoder not found [ 968.266315][ T5819] em28xx 10-1:0.132: failed to create media graph [ 968.284172][ T5819] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 968.302686][ T5819] em28xx 10-1:0.132: Remote control support is not available for this card. [ 968.457890][T16437] lo speed is unknown, defaulting to 1000 [ 968.622379][ T5947] usb 10-1: USB disconnect, device number 37 [ 968.631027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 968.831544][ T5947] em28xx 10-1:0.132: Disconnecting em28xx [ 968.845527][ T5947] em28xx 10-1:0.132: Closing input extension [ 969.192041][ T5947] em28xx 10-1:0.132: Freeing device [ 969.200441][T16467] input: syz1 as /devices/virtual/input/input92 [ 969.401369][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 969.464007][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 969.491515][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 969.681120][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 969.804059][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 970.066213][ T10] usb 7-1: USB disconnect, device number 42 [ 970.210681][ T6486] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.342453][ T6486] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.612947][T16501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.711119][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 970.948655][ T6486] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.974984][ T30] audit: type=1400 audit(2000000913.967:1195): avc: denied { mount } for pid=16503 comm="syz.4.2733" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 971.363251][ T6486] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.539759][ T30] audit: type=1400 audit(2000000914.457:1196): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 971.605504][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 971.751128][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 972.085029][T16530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.096961][T16530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.183504][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 972.361507][T16533] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2740'. [ 972.791015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 972.810568][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 972.818338][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 972.827058][ T10] usb 5-1: config 0 has no interface number 0 [ 972.839534][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 972.853686][ T6486] bridge_slave_1: left allmulticast mode [ 972.868996][ T6486] bridge_slave_1: left promiscuous mode [ 972.891967][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.909597][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 972.925197][ T6486] bridge_slave_0: left allmulticast mode [ 972.931085][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.940208][ T6486] bridge_slave_0: left promiscuous mode [ 972.946755][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.956232][ T10] usb 5-1: Product: syz [ 972.960545][ T10] usb 5-1: Manufacturer: syz [ 972.969170][ T10] usb 5-1: SerialNumber: syz [ 972.985161][ T10] usb 5-1: config 0 descriptor?? [ 973.005707][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 973.035919][ T10] em28xx 5-1:0.132: Video interface 132 found: [ 973.107312][ T30] audit: type=1400 audit(2000000916.097:1197): avc: denied { setopt } for pid=16535 comm="syz.9.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 973.129425][T16539] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 973.841120][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 973.949231][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 974.086367][ T6486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.097912][ T6486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.107952][ T6486] bond0 (unregistering): Released all slaves [ 974.121368][T16537] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2742'. [ 974.394516][ T6486] hsr_slave_0: left promiscuous mode [ 974.400590][ T6486] hsr_slave_1: left promiscuous mode [ 974.407012][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.417831][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.426646][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.434282][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.458300][ T6486] veth1_macvtap: left promiscuous mode [ 974.461015][T15656] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 974.464168][ T6486] veth0_macvtap: left promiscuous mode [ 974.477136][ T6486] veth1_vlan: left promiscuous mode [ 974.483875][ T6486] veth0_vlan: left promiscuous mode [ 974.621663][T15656] usb 10-1: Using ep0 maxpacket: 32 [ 974.633809][T15656] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 974.649221][T15656] usb 10-1: config 0 has no interface number 0 [ 974.656937][T15656] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 974.780440][T15656] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 974.789990][T15656] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.814004][T15656] usb 10-1: Product: syz [ 974.820044][T15656] usb 10-1: Manufacturer: syz [ 974.825488][T15656] usb 10-1: SerialNumber: syz [ 974.867685][T15656] usb 10-1: config 0 descriptor?? [ 974.879310][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 974.889240][T15656] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 974.896564][T16553] netlink: 'syz.6.2747': attribute type 1 has an invalid length. [ 974.904471][T15656] em28xx 10-1:0.132: Video interface 132 found: [ 975.058592][T16554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.475515][ T10] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 975.484986][ T10] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 975.497508][ T10] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 975.570148][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 975.578415][ T10] em28xx 5-1:0.132: analog set to bulk mode. [ 975.584785][T10399] em28xx 5-1:0.132: Registering V4L2 extension [ 975.747581][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 975.777707][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 975.812945][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 975.823474][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 975.875091][T15656] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 975.911034][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 976.034941][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 976.056512][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 976.169204][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 976.199085][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 976.398175][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 976.413283][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 976.423179][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 976.545043][ T6486] team0 (unregistering): Port device team_slave_0 removed [ 976.941364][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 976.958491][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 976.974026][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 976.985236][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 977.004343][T10399] em28xx 5-1:0.132: Config register raw data: 0xfffffffb [ 977.026037][T10399] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 977.033328][T10399] em28xx 5-1:0.132: No AC97 audio processor [ 977.143801][T10399] usb 5-1: Decoder not found [ 977.151827][T10399] em28xx 5-1:0.132: failed to create media graph [ 977.158271][T10399] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 977.191426][T15656] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 977.217248][T10399] em28xx 5-1:0.132: Remote control support is not available for this card. [ 977.230113][T15656] em28xx 10-1:0.132: board has no eeprom [ 977.311033][T15656] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 977.347387][T15656] em28xx 10-1:0.132: analog set to bulk mode. [ 977.393251][T10399] em28xx 10-1:0.132: Registering V4L2 extension [ 977.582060][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 977.600110][T16582] Process accounting resumed [ 977.622421][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 977.647182][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 977.701501][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 977.795829][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 977.815342][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 977.845402][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 977.861139][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 977.898590][T16590] tmpfs: Bad value for 'mpol' [ 977.927814][ T30] audit: type=1400 audit(2000000920.917:1198): avc: denied { setopt } for pid=16589 comm="syz.3.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 977.970882][T16553] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 977.991264][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 978.021676][T15656] usb 5-1: USB disconnect, device number 65 [ 978.041164][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 978.055447][T15656] em28xx 5-1:0.132: Disconnecting em28xx [ 978.067248][ T30] audit: type=1400 audit(2000000920.957:1199): avc: denied { ioctl } for pid=16589 comm="syz.3.2754" path="socket:[59078]" dev="sockfs" ino=59078 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 978.074395][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 978.106486][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 978.117557][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 978.129962][T10399] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 978.151706][T10399] em28xx 10-1:0.132: Config register raw data: 0xfffffffb [ 978.159125][T10399] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 978.166679][T10399] em28xx 10-1:0.132: No AC97 audio processor [ 978.185680][T10399] usb 10-1: Decoder not found [ 978.191275][T16597] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 978.199889][T10399] em28xx 10-1:0.132: failed to create media graph [ 978.218224][T16597] block device autoloading is deprecated and will be removed. [ 978.218743][T10399] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 978.274287][T10399] em28xx 10-1:0.132: Remote control support is not available for this card. [ 978.290957][T15656] em28xx 5-1:0.132: Closing input extension [ 978.310471][T13527] usb 10-1: USB disconnect, device number 38 [ 978.313269][T15656] em28xx 5-1:0.132: Freeing device [ 978.343045][T13527] em28xx 10-1:0.132: Disconnecting em28xx [ 978.349044][T13527] em28xx 10-1:0.132: Closing input extension [ 978.433585][T13527] em28xx 10-1:0.132: Freeing device [ 978.589140][T10399] libceph: connect (1)[c::]:6789 error -22 [ 979.031220][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 979.472286][T10399] libceph: mon0 (1)[c::]:6789 connect error [ 980.071068][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 980.468841][T16611] ceph: No mds server is up or the cluster is laggy [ 981.111028][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 981.468980][T15656] libceph: connect (1)[c::]:6789 error -22 [ 981.475879][T15656] libceph: mon0 (1)[c::]:6789 connect error [ 982.151052][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 982.435682][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.471290][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.531119][T16628] input: syz1 as /devices/virtual/input/input93 [ 982.778787][T16640] random: crng reseeded on system resumption [ 983.191024][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 984.231022][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 984.382042][T16660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.556779][T16660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.600212][T16660] input: syz1 as /devices/virtual/input/input94 [ 985.271027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 985.454835][T13527] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 985.621018][T13527] usb 7-1: device descriptor read/64, error -71 [ 985.799965][ T30] audit: type=1400 audit(2000000928.787:1200): avc: denied { create } for pid=16688 comm="syz.4.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 985.916634][T13527] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 986.040121][ T30] audit: type=1400 audit(2000000929.027:1201): avc: denied { setopt } for pid=16688 comm="syz.4.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 986.311182][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 986.520988][T13527] usb 7-1: device descriptor read/64, error -71 [ 986.704688][T13527] usb usb7-port1: attempt power cycle [ 987.351001][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 987.981186][T13527] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 988.191293][T13527] usb 7-1: device not accepting address 45, error -71 [ 988.391035][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 988.617730][T16723] ªªªªªª: renamed from bond0 (while UP) [ 989.441011][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 989.941033][T16735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.963652][T16735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.471029][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 990.951803][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2794'. [ 991.275927][ T30] audit: type=1400 audit(2000000002.510:1202): avc: denied { remove_name } for pid=16752 comm="syz.3.2796" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 991.511092][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 991.737360][ T30] audit: type=1400 audit(2000000002.520:1203): avc: denied { unlink } for pid=16752 comm="syz.3.2796" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 992.386217][T16766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2799'. [ 992.551053][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 992.613447][T16766] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 993.400956][T10399] kernel write not supported for file /dsp1 (pid: 10399 comm: kworker/0:5) [ 993.552451][T16778] Process accounting resumed [ 993.591027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 994.631025][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 994.679736][ T30] audit: type=1400 audit(2000000005.940:1204): avc: denied { bind } for pid=16799 comm="syz.9.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 995.671032][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 996.711025][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 997.181050][T13527] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 997.321320][T15656] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 997.343224][T13527] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 997.353014][T13527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.365281][T13527] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 997.375596][T13527] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 997.384782][T13527] usb 5-1: Manufacturer: syz [ 997.392938][T13527] usb 5-1: config 0 descriptor?? [ 997.502471][T15656] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.511538][T13527] rc_core: IR keymap rc-hauppauge not found [ 997.520286][T13527] Registered IR keymap rc-empty [ 997.536979][T13527] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 997.563358][T13527] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input95 [ 997.620989][T15656] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.635659][T15656] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 997.660939][T15656] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.739996][T15656] usb 10-1: config 0 descriptor?? [ 997.751142][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 998.587926][T15656] usbhid 10-1:0.0: can't add hid device: -71 [ 998.611093][T15656] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 998.642523][T15656] usb 10-1: USB disconnect, device number 39 [ 998.791045][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 999.761746][T16863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2823'. [ 999.841056][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1000.234966][T13527] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1000.312811][T10399] usb 5-1: USB disconnect, device number 66 [ 1000.428170][T16869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.501578][T13527] usb 10-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 1000.526458][T13527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.556998][T13527] usb 10-1: config 0 descriptor?? [ 1000.562702][T16869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.597874][T13527] usb 10-1: selecting invalid altsetting 1 [ 1000.604338][T13527] flexcop_usb: set interface failed. [ 1000.610114][T13527] b2c2_flexcop_usb 10-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 1000.638979][T16873] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2825'. [ 1000.871024][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1001.050247][T16855] fuse: Bad value for 'group_id' [ 1001.064872][T16855] fuse: Bad value for 'group_id' [ 1001.081883][T13527] usb 10-1: USB disconnect, device number 40 [ 1001.271658][T16875] block nbd3: shutting down sockets [ 1001.911030][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1002.010731][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2834'. [ 1002.428769][T16912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1002.900422][T16916] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1002.951955][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1003.079004][T16924] lo speed is unknown, defaulting to 1000 [ 1003.151041][T10399] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1003.163985][T15656] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1003.341141][T10399] usb 5-1: Using ep0 maxpacket: 32 [ 1003.348270][T10399] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1003.360298][T10399] usb 5-1: config 0 has no interface number 0 [ 1003.375544][T15656] usb 7-1: config 2 has an invalid interface number: 50 but max is 0 [ 1003.435720][T10399] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1003.467268][T15656] usb 7-1: config 2 has no interface number 0 [ 1003.532638][T10399] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1003.583668][T15656] usb 7-1: config 2 interface 50 has no altsetting 0 [ 1003.593485][T10399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.615351][T10399] usb 5-1: Product: syz [ 1003.638420][T15656] usb 7-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=ac.66 [ 1003.648536][T10399] usb 5-1: Manufacturer: syz [ 1003.681165][T15656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.691044][T10399] usb 5-1: SerialNumber: syz [ 1003.737245][T15656] usb 7-1: Product: syz [ 1003.765618][T15656] usb 7-1: Manufacturer: syz [ 1003.770495][T10399] usb 5-1: config 0 descriptor?? [ 1003.784026][T15656] usb 7-1: SerialNumber: syz [ 1003.869327][T10399] smsc75xx v1.0.0 [ 1003.889066][T15656] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 1003.991011][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1004.216061][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2848'. [ 1004.333799][T15656] gspca_zc3xx: reg_w_i err -71 [ 1004.338826][T15656] gspca_zc3xx 7-1:2.50: probe with driver gspca_zc3xx failed with error -71 [ 1004.350427][T15656] usb 7-1: USB disconnect, device number 47 [ 1004.502102][T16956] netlink: 'syz.3.2849': attribute type 83 has an invalid length. [ 1004.806109][T16964] netlink: 'syz.7.2853': attribute type 10 has an invalid length. [ 1004.806165][T16963] netlink: 'syz.7.2853': attribute type 10 has an invalid length. [ 1004.822166][T16964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1004.964777][T10399] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1004.996928][T10399] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1005.031375][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1005.387931][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.556957][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.719944][ T30] audit: type=1400 audit(2000000016.980:1205): avc: denied { listen } for pid=16970 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1005.876534][ T30] audit: type=1400 audit(2000000017.100:1206): avc: denied { accept } for pid=16970 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1005.993335][T10399] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1006.004510][T10399] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1006.049552][T10399] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1006.071017][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1006.156756][T10399] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1006.294664][T10399] usb 5-1: USB disconnect, device number 67 [ 1007.121060][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1007.298696][T16986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.312155][T16986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.348947][ T30] audit: type=1400 audit(2000000018.610:1207): avc: denied { setopt } for pid=16985 comm="syz.3.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1007.375360][T16986] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16986 comm=syz.3.2860 [ 1007.691012][T10399] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1007.701774][T16995] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2863'. [ 1007.713799][T16995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.841014][T10399] usb 10-1: device descriptor read/64, error -71 [ 1008.081149][T10399] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1008.161153][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1008.391042][T10399] usb 10-1: device descriptor read/64, error -71 [ 1008.611271][T10399] usb usb10-port1: attempt power cycle [ 1008.767124][T17011] FAULT_INJECTION: forcing a failure. [ 1008.767124][T17011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.840735][T17011] CPU: 0 UID: 0 PID: 17011 Comm: syz.3.2870 Not tainted syzkaller #0 PREEMPT(full) [ 1008.840765][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1008.840777][T17011] Call Trace: [ 1008.840785][T17011] [ 1008.840793][T17011] dump_stack_lvl+0x16c/0x1f0 [ 1008.840830][T17011] should_fail_ex+0x512/0x640 [ 1008.840859][T17011] _copy_from_user+0x2e/0xd0 [ 1008.840887][T17011] copy_msghdr_from_user+0x98/0x160 [ 1008.840913][T17011] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1008.840954][T17011] ___sys_sendmsg+0xfe/0x1d0 [ 1008.840981][T17011] ? __pfx____sys_sendmsg+0x10/0x10 [ 1008.841006][T17011] ? __lock_acquire+0x622/0x1c90 [ 1008.841063][T17011] __sys_sendmsg+0x16d/0x220 [ 1008.841090][T17011] ? __pfx___sys_sendmsg+0x10/0x10 [ 1008.841136][T17011] do_syscall_64+0xcd/0xfa0 [ 1008.841159][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.841181][T17011] RIP: 0033:0x7ff043b8f6c9 [ 1008.841198][T17011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.841226][T17011] RSP: 002b:00007ff044ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.841247][T17011] RAX: ffffffffffffffda RBX: 00007ff043de5fa0 RCX: 00007ff043b8f6c9 [ 1008.841259][T17011] RDX: 0000000000000000 RSI: 0000200000002140 RDI: 0000000000000003 [ 1008.841269][T17011] RBP: 00007ff044ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.841279][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.841291][T17011] R13: 00007ff043de6038 R14: 00007ff043de5fa0 R15: 00007ffd9af002a8 [ 1008.841325][T17011] [ 1009.191055][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1009.291146][T10399] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1009.321757][T10399] usb 10-1: device descriptor read/8, error -71 [ 1009.628462][T10399] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1009.802053][T10399] usb 10-1: device descriptor read/8, error -71 [ 1010.082601][T10399] usb usb10-port1: unable to enumerate USB device [ 1010.241017][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1011.271027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1011.608359][T17037] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1011.652247][T17046] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1012.142296][T17066] overlayfs: missing 'lowerdir' [ 1012.311018][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1012.426364][T17082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.963180][T17082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.021205][ T5947] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 1013.185421][ T5947] usb 10-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 1013.231528][ T5947] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1013.273918][ T5947] usb 10-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 1013.293373][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.323248][ T5947] usb 10-1: config 0 descriptor?? [ 1013.351036][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1013.450520][ T5947] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1013.719393][ T30] audit: type=1400 audit(2000000024.980:1208): avc: denied { ioctl } for pid=17094 comm="syz.3.2889" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1014.391040][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1015.048381][T17115] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1015.054917][T17115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1015.082835][T10399] usb 10-1: USB disconnect, device number 45 [ 1015.105720][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.124867][T17115] vhci_hcd vhci_hcd.0: Device attached [ 1015.148009][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.207454][T17117] vhci_hcd: connection closed [ 1015.207699][ T7502] vhci_hcd: stop threads [ 1015.235518][ T7502] vhci_hcd: release socket [ 1015.431242][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1015.514078][ T7502] vhci_hcd: disconnect device [ 1015.560999][ T5865] vhci_hcd: vhci_device speed not set [ 1016.471169][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1016.990996][ T5927] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1017.161201][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 1017.449128][ T5927] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1017.520997][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1017.590093][ T5927] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1017.606024][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.679658][ T5927] usb 5-1: Product: syz [ 1017.700982][ T5927] usb 5-1: Manufacturer: syz [ 1017.720114][ T5927] usb 5-1: SerialNumber: syz [ 1017.746978][ T5927] usb 5-1: config 0 descriptor?? [ 1017.802784][ T5927] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1017.870780][ T5927] usb 5-1: setting power ON [ 1017.934700][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 1017.969243][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1018.009441][T17139] dvb-usb: bulk message failed: -22 (3/0) [ 1018.015384][T17139] dvb-usb: bulk message failed: -22 (62/0) [ 1018.031560][ T5927] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1018.121000][ T5927] usb 5-1: media controller created [ 1018.205324][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1018.231872][ T5927] usb 5-1: selecting invalid altsetting 6 [ 1018.252718][ T5927] usb 5-1: digital interface selection failed (-22) [ 1018.260495][ T5927] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1018.272062][ T5927] usb 5-1: setting power OFF [ 1018.276704][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 1018.289169][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1018.314068][ T5927] (NULL device *): no alternate interface [ 1018.507215][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1018.551005][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1018.623231][T17155] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1018.741426][ T5819] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1018.972629][ T5927] usb 5-1: USB disconnect, device number 68 [ 1019.285967][T17176] program syz.4.2910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.591104][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1019.843085][T17182] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2911'. [ 1020.367914][ T5819] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1020.377157][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.393950][ T5819] usb 10-1: Product: syz [ 1020.641018][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1021.250969][ T5819] usb 10-1: Manufacturer: syz [ 1021.255799][ T5819] usb 10-1: SerialNumber: syz [ 1021.274343][ T5819] usb 10-1: config 0 descriptor?? [ 1021.442856][ T5819] usb 10-1: can't set config #0, error -71 [ 1021.450444][ T5819] usb 10-1: USB disconnect, device number 46 [ 1021.499404][T17192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.531300][T17192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.671053][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1021.903299][T17200] FAULT_INJECTION: forcing a failure. [ 1021.903299][T17200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.973627][T17200] CPU: 0 UID: 0 PID: 17200 Comm: syz.6.2916 Not tainted syzkaller #0 PREEMPT(full) [ 1021.973658][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1021.973670][T17200] Call Trace: [ 1021.973677][T17200] [ 1021.973686][T17200] dump_stack_lvl+0x16c/0x1f0 [ 1021.973724][T17200] should_fail_ex+0x512/0x640 [ 1021.973753][T17200] _copy_from_user+0x2e/0xd0 [ 1021.973780][T17200] get_timespec64+0x8b/0x240 [ 1021.973811][T17200] ? __pfx_get_timespec64+0x10/0x10 [ 1021.973841][T17200] ? __io_timeout_prep+0x37a/0xa10 [ 1021.973876][T17200] __io_timeout_prep+0x45f/0xa10 [ 1021.973911][T17200] io_submit_sqes+0x855/0x2710 [ 1021.973959][T17200] __do_sys_io_uring_enter+0xd69/0x1630 [ 1021.973993][T17200] ? __fget_files+0x20e/0x3c0 [ 1021.974014][T17200] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1021.974048][T17200] ? fput+0x9b/0xd0 [ 1021.974073][T17200] ? ksys_write+0x1ac/0x250 [ 1021.974092][T17200] ? __pfx_ksys_write+0x10/0x10 [ 1021.974121][T17200] do_syscall_64+0xcd/0xfa0 [ 1021.974144][T17200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.974166][T17200] RIP: 0033:0x7f795a38f6c9 [ 1021.974183][T17200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.974203][T17200] RSP: 002b:00007f795b21e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1021.974222][T17200] RAX: ffffffffffffffda RBX: 00007f795a5e5fa0 RCX: 00007f795a38f6c9 [ 1021.974243][T17200] RDX: 0000000000007c5b RSI: 0000000000007f31 RDI: 0000000000000005 [ 1021.974255][T17200] RBP: 00007f795b21e090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.974267][T17200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.974279][T17200] R13: 00007f795a5e6038 R14: 00007f795a5e5fa0 R15: 00007ffd44006828 [ 1021.974311][T17200] [ 1022.631080][ T5947] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1022.721016][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1023.481096][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 1023.507015][ T5947] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1023.551107][ T5865] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1023.761018][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1024.280625][ T5947] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1024.300249][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.323491][ T5947] usb 5-1: Product: syz [ 1024.351246][ T5947] usb 5-1: Manufacturer: syz [ 1024.355866][ T5947] usb 5-1: SerialNumber: syz [ 1024.362459][ T5947] usb 5-1: config 0 descriptor?? [ 1024.383131][ T5947] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1024.391207][ T5947] usb 5-1: setting power ON [ 1024.395784][ T5947] dvb-usb: bulk message failed: -22 (2/0) [ 1024.406154][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1024.416397][ T5947] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1024.425358][ T5947] usb 5-1: media controller created [ 1024.471101][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.472596][ T5865] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.513189][ T5865] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1024.523589][ T5947] usb 5-1: selecting invalid altsetting 6 [ 1024.529664][ T5947] usb 5-1: digital interface selection failed (-22) [ 1024.538575][ T5865] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1024.551181][ T5947] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1024.558326][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.571125][ T5819] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1024.581315][ T5947] usb 5-1: setting power OFF [ 1024.586246][ T5947] dvb-usb: bulk message failed: -22 (2/0) [ 1024.591006][ T5865] usb 7-1: Product: syz [ 1024.602313][ T5865] usb 7-1: Manufacturer: syz [ 1024.607908][T17207] dvb-usb: bulk message failed: -22 (3/0) [ 1024.614190][T17207] dvb-usb: bulk message failed: -22 (62/0) [ 1024.620230][ T5947] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1024.629488][T17228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.629861][T17228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.641070][ T5947] (NULL device *): no alternate interface [ 1024.647203][ T5865] usb 7-1: SerialNumber: syz [ 1024.720369][ T5947] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1024.763872][ T5819] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1024.775513][ T5947] usb 5-1: USB disconnect, device number 69 [ 1024.791010][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1024.799008][ T5819] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.824740][ T5819] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1024.877630][ T5819] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1024.899588][ T5819] usb 10-1: Manufacturer: syz [ 1024.909542][ T5819] usb 10-1: config 0 descriptor?? [ 1024.916348][ T5865] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1024.986245][ T5865] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1025.002592][ T5819] rc_core: IR keymap rc-hauppauge not found [ 1025.011729][ T5819] Registered IR keymap rc-empty [ 1025.037889][ T5819] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1025.047232][ T5865] usb 7-1: USB disconnect, device number 48 [ 1025.094634][ T5819] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input96 [ 1025.117074][ T7470] udevd[7470]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1025.419886][T17240] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2928'. [ 1025.831027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.210637][ T5819] usb 10-1: USB disconnect, device number 47 [ 1026.511025][ T5947] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1026.581290][T17265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'. [ 1026.880999][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1027.051013][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 1027.141187][ T5947] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1027.157037][ T5947] usb 7-1: config 0 has no interface number 0 [ 1027.163496][ T5947] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1027.177751][ T5947] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1027.190049][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.201849][ T5947] usb 7-1: Product: syz [ 1027.206020][ T5947] usb 7-1: Manufacturer: syz [ 1027.210762][ T5947] usb 7-1: SerialNumber: syz [ 1027.219019][ T5947] usb 7-1: config 0 descriptor?? [ 1027.228098][ T5947] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1027.241979][ T5947] em28xx 7-1:0.132: Video interface 132 found: [ 1027.795759][ T5947] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1027.911041][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1028.656571][ T5947] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1028.671177][ T5947] em28xx 7-1:0.132: board has no eeprom [ 1028.772766][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 1028.951005][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1029.153116][ T5947] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1029.253858][ T5947] em28xx 7-1:0.132: analog set to bulk mode. [ 1029.276213][T13527] em28xx 7-1:0.132: Registering V4L2 extension [ 1029.291346][ T5947] usb 7-1: USB disconnect, device number 49 [ 1029.507578][ T5947] em28xx 7-1:0.132: Disconnecting em28xx [ 1029.991016][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1030.119552][T13527] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1030.254446][T13527] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1030.282880][T13527] em28xx 7-1:0.132: No AC97 audio processor [ 1030.302033][T13527] usb 7-1: Decoder not found [ 1030.310974][T13527] em28xx 7-1:0.132: failed to create media graph [ 1030.331220][T13527] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1030.405120][T13527] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1030.455631][ T5947] em28xx 7-1:0.132: Closing input extension [ 1030.592943][ T5947] em28xx 7-1:0.132: Freeing device [ 1030.663640][T17307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1030.760033][T17307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1030.874064][T17310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.882912][T17310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.031000][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1032.071030][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1032.620843][T17319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2947'. [ 1032.937890][T17327] FAULT_INJECTION: forcing a failure. [ 1032.937890][T17327] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.964465][ T5865] kernel write not supported for file /uhid (pid: 5865 comm: kworker/0:3) [ 1032.984535][T17327] CPU: 0 UID: 0 PID: 17327 Comm: syz.4.2950 Not tainted syzkaller #0 PREEMPT(full) [ 1032.984562][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.984575][T17327] Call Trace: [ 1032.984582][T17327] [ 1032.984589][T17327] dump_stack_lvl+0x16c/0x1f0 [ 1032.984624][T17327] should_fail_ex+0x512/0x640 [ 1032.984648][T17327] ? __kmalloc_noprof+0xca/0x880 [ 1032.984679][T17327] should_failslab+0xc2/0x120 [ 1032.984704][T17327] __kmalloc_noprof+0xdd/0x880 [ 1032.984731][T17327] ? __pfx___up_read+0x10/0x10 [ 1032.984751][T17327] ? __crypto_alloc_tfmgfp+0xd1/0x400 [ 1032.984785][T17327] ? __crypto_alloc_tfmgfp+0xd1/0x400 [ 1032.984813][T17327] __crypto_alloc_tfmgfp+0xd1/0x400 [ 1032.984844][T17327] crypto_spawn_tfm+0x93/0x110 [ 1032.984867][T17327] ? __pfx_xcbc_init_tfm+0x10/0x10 [ 1032.984894][T17327] xcbc_init_tfm+0x43/0xc0 [ 1032.984918][T17327] ? __pfx_xcbc_init_tfm+0x10/0x10 [ 1032.984943][T17327] crypto_create_tfm_node+0x1c0/0x350 [ 1032.984974][T17327] crypto_ahash_init_tfm+0x4bd/0x710 [ 1032.985003][T17327] crypto_create_tfm_node+0x127/0x350 [ 1032.985035][T17327] crypto_alloc_tfm_node+0x102/0x260 [ 1032.985061][T17327] ? kasan_save_track+0x14/0x30 [ 1032.985085][T17327] ah_init_state+0xf9/0x7c0 [ 1032.985113][T17327] __xfrm_init_state+0x6fe/0x1c10 [ 1032.985143][T17327] xfrm_init_state+0x18/0xa0 [ 1032.985166][T17327] pfkey_add+0x24f4/0x2ec0 [ 1032.985204][T17327] ? __pfx_pfkey_add+0x10/0x10 [ 1032.985229][T17327] ? kfree_skbmem+0x1a4/0x1f0 [ 1032.985250][T17327] ? sk_skb_reason_drop+0x136/0x1a0 [ 1032.985279][T17327] ? pfkey_broadcast+0x2af/0x460 [ 1032.985317][T17327] ? __pfx_pfkey_add+0x10/0x10 [ 1032.985345][T17327] pfkey_process+0x6dc/0x840 [ 1032.985379][T17327] ? __pfx_pfkey_process+0x10/0x10 [ 1032.985408][T17327] ? __mutex_lock+0x1c5/0x1060 [ 1032.985459][T17327] pfkey_sendmsg+0x42c/0x850 [ 1032.985494][T17327] ____sys_sendmsg+0xa98/0xc70 [ 1032.985516][T17327] ? copy_msghdr_from_user+0x10a/0x160 [ 1032.985542][T17327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1032.985574][T17327] ___sys_sendmsg+0x134/0x1d0 [ 1032.985600][T17327] ? __pfx____sys_sendmsg+0x10/0x10 [ 1032.985623][T17327] ? __lock_acquire+0x622/0x1c90 [ 1032.985680][T17327] __sys_sendmsg+0x16d/0x220 [ 1032.985707][T17327] ? __pfx___sys_sendmsg+0x10/0x10 [ 1032.985754][T17327] do_syscall_64+0xcd/0xfa0 [ 1032.985776][T17327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.985797][T17327] RIP: 0033:0x7fb0dd38f6c9 [ 1032.985815][T17327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.985834][T17327] RSP: 002b:00007fb0de1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.985854][T17327] RAX: ffffffffffffffda RBX: 00007fb0dd5e5fa0 RCX: 00007fb0dd38f6c9 [ 1032.985868][T17327] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1032.985880][T17327] RBP: 00007fb0de1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.985892][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1032.985904][T17327] R13: 00007fb0dd5e6038 R14: 00007fb0dd5e5fa0 R15: 00007ffe2c206948 [ 1032.985935][T17327] [ 1033.111043][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1033.973376][T17334] lo speed is unknown, defaulting to 1000 [ 1033.990994][ T5865] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1034.077017][T17341] netlink: 'syz.6.2954': attribute type 39 has an invalid length. [ 1034.122809][ T5865] usb 10-1: device descriptor read/64, error -71 [ 1034.151109][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1034.162025][T17346] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2956'. [ 1034.193686][T17348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17348 comm=syz.6.2954 [ 1034.234027][T17350] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 1034.319768][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2956'. [ 1034.362573][T17354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2957'. [ 1034.372017][ T5865] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1034.521174][ T5865] usb 10-1: device descriptor read/64, error -71 [ 1034.660140][ T5865] usb usb10-port1: attempt power cycle [ 1034.776965][T17364] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2958'. [ 1034.788885][T17364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1035.121955][T17370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2961'. [ 1035.191067][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1036.006238][ T5865] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1036.231016][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1036.261616][ T5865] usb 10-1: device descriptor read/8, error -71 [ 1036.292486][T17377] netlink: 'syz.7.2964': attribute type 39 has an invalid length. [ 1036.643043][T17392] FAULT_INJECTION: forcing a failure. [ 1036.643043][T17392] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.693262][T17392] CPU: 1 UID: 0 PID: 17392 Comm: syz.9.2968 Not tainted syzkaller #0 PREEMPT(full) [ 1036.693292][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.693305][T17392] Call Trace: [ 1036.693313][T17392] [ 1036.693321][T17392] dump_stack_lvl+0x16c/0x1f0 [ 1036.693357][T17392] should_fail_ex+0x512/0x640 [ 1036.693380][T17392] ? fs_reclaim_acquire+0xae/0x150 [ 1036.693407][T17392] should_failslab+0xc2/0x120 [ 1036.693432][T17392] __kmalloc_noprof+0xdd/0x880 [ 1036.693459][T17392] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1036.693490][T17392] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1036.693513][T17392] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1036.693540][T17392] ? tomoyo_profile+0x47/0x60 [ 1036.693570][T17392] tomoyo_path_number_perm+0x245/0x580 [ 1036.693589][T17392] ? tomoyo_path_number_perm+0x237/0x580 [ 1036.693613][T17392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1036.693635][T17392] ? find_held_lock+0x2b/0x80 [ 1036.693688][T17392] ? find_held_lock+0x2b/0x80 [ 1036.693712][T17392] ? hook_file_ioctl_common+0x145/0x410 [ 1036.693746][T17392] ? __fget_files+0x20e/0x3c0 [ 1036.693773][T17392] security_file_ioctl+0x9b/0x240 [ 1036.693798][T17392] __x64_sys_ioctl+0xb7/0x210 [ 1036.693828][T17392] do_syscall_64+0xcd/0xfa0 [ 1036.693851][T17392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.693872][T17392] RIP: 0033:0x7fe0b298f6c9 [ 1036.693888][T17392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.693908][T17392] RSP: 002b:00007fe0b388e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.693928][T17392] RAX: ffffffffffffffda RBX: 00007fe0b2be5fa0 RCX: 00007fe0b298f6c9 [ 1036.693942][T17392] RDX: 0000200000000940 RSI: 00000000000089f3 RDI: 0000000000000003 [ 1036.693955][T17392] RBP: 00007fe0b388e090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.693992][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.694004][T17392] R13: 00007fe0b2be6038 R14: 00007fe0b2be5fa0 R15: 00007fff7a776128 [ 1036.694035][T17392] [ 1036.698723][T17392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1036.803289][T10399] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1037.271002][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1037.609057][T10399] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1037.617681][T10399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.629199][T10399] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1037.639258][T10399] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1037.695220][T10399] usb 5-1: Manufacturer: syz [ 1037.754251][T10399] usb 5-1: config 0 descriptor?? [ 1037.943322][T10399] rc_core: IR keymap rc-hauppauge not found [ 1037.952796][T10399] Registered IR keymap rc-empty [ 1037.969712][T10399] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1038.199472][T10399] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input97 [ 1038.216801][T17420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2973'. [ 1038.244693][T17416] Process accounting resumed [ 1038.311039][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1039.350987][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1040.066092][T10399] usb 5-1: USB disconnect, device number 70 [ 1040.188272][T17449] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2982'. [ 1040.391007][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1040.561182][T10399] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1040.562717][T17462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2984'. [ 1040.750962][T10399] usb 5-1: Using ep0 maxpacket: 32 [ 1040.758429][T10399] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1040.771342][T10399] usb 5-1: config 0 has no interface number 0 [ 1040.916558][T10399] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1040.946718][T10399] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1040.974518][T10399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.992752][T10399] usb 5-1: Product: syz [ 1041.024181][T10399] usb 5-1: Manufacturer: syz [ 1041.047319][T10399] usb 5-1: SerialNumber: syz [ 1041.072702][T10399] usb 5-1: config 0 descriptor?? [ 1041.089219][T17472] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1041.105234][T10399] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1041.162190][T10399] em28xx 5-1:0.132: Video interface 132 found: [ 1041.431033][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1042.469431][T10399] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1042.480977][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1042.577320][T10399] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1042.600737][ T30] audit: type=1326 audit(2000000053.860:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.3.2993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff043b8f6c9 code=0x0 [ 1042.632006][T10399] em28xx 5-1:0.132: board has no eeprom [ 1042.655387][ T30] audit: type=1400 audit(2000000053.920:1210): avc: denied { map } for pid=17482 comm="syz.3.2993" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1042.700977][T10399] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1042.709873][T10399] em28xx 5-1:0.132: analog set to bulk mode. [ 1042.750985][ T5865] em28xx 5-1:0.132: Registering V4L2 extension [ 1042.825898][ T5865] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1042.901060][T10399] usb 5-1: USB disconnect, device number 71 [ 1042.952019][T10399] em28xx 5-1:0.132: Disconnecting em28xx [ 1043.082799][T17500] FAULT_INJECTION: forcing a failure. [ 1043.082799][T17500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.143914][ T5865] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1043.164368][ T5865] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1043.179759][ T5865] em28xx 5-1:0.132: No AC97 audio processor [ 1043.200822][ T5865] usb 5-1: Decoder not found [ 1043.217302][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.6.2997 Not tainted syzkaller #0 PREEMPT(full) [ 1043.217329][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1043.217340][T17500] Call Trace: [ 1043.217348][T17500] [ 1043.217356][T17500] dump_stack_lvl+0x16c/0x1f0 [ 1043.217392][T17500] should_fail_ex+0x512/0x640 [ 1043.217421][T17500] _copy_from_iter+0x29f/0x1720 [ 1043.217454][T17500] ? __pfx__copy_from_iter+0x10/0x10 [ 1043.217478][T17500] ? trace_kmalloc+0x2b/0xd0 [ 1043.217506][T17500] ? rcu_is_watching+0x12/0xc0 [ 1043.217533][T17500] ? kfree+0x252/0x6d0 [ 1043.217557][T17500] ? ip_tun_from_nlattr+0x12f0/0x56a0 [ 1043.217586][T17500] file_tty_write.constprop.0+0x487/0x9b0 [ 1043.217625][T17500] vfs_write+0x7d3/0x11d0 [ 1043.217648][T17500] ? __pfx_tty_write+0x10/0x10 [ 1043.217678][T17500] ? __pfx_vfs_write+0x10/0x10 [ 1043.217696][T17500] ? find_held_lock+0x2b/0x80 [ 1043.217741][T17500] ksys_write+0x12a/0x250 [ 1043.217761][T17500] ? __pfx_ksys_write+0x10/0x10 [ 1043.217790][T17500] do_syscall_64+0xcd/0xfa0 [ 1043.217813][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.217833][T17500] RIP: 0033:0x7f795a38f6c9 [ 1043.217849][T17500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1043.217868][T17500] RSP: 002b:00007f795b21e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1043.217888][T17500] RAX: ffffffffffffffda RBX: 00007f795a5e5fa0 RCX: 00007f795a38f6c9 [ 1043.217902][T17500] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000009 [ 1043.217915][T17500] RBP: 00007f795b21e090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.217928][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.217940][T17500] R13: 00007f795a5e6038 R14: 00007f795a5e5fa0 R15: 00007ffd44006828 [ 1043.217972][T17500] [ 1043.228232][ T5865] em28xx 5-1:0.132: failed to create media graph [ 1043.444783][ T5865] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1043.468218][T17503] ================================================================== [ 1043.477163][T17503] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 1043.484604][T17503] Read of size 8 at addr ffff88802f7c4740 by task v4l_id/17503 [ 1043.492134][T17503] [ 1043.494440][T17503] CPU: 0 UID: 0 PID: 17503 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1043.494462][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1043.494472][T17503] Call Trace: [ 1043.494478][T17503] [ 1043.494486][T17503] dump_stack_lvl+0x116/0x1f0 [ 1043.494515][T17503] print_report+0xcd/0x630 [ 1043.494534][T17503] ? __virt_addr_valid+0x81/0x610 [ 1043.494557][T17503] ? __phys_addr+0xe8/0x180 [ 1043.494578][T17503] ? v4l2_fh_init+0x27d/0x2c0 [ 1043.494595][T17503] kasan_report+0xe0/0x110 [ 1043.494613][T17503] ? v4l2_fh_init+0x27d/0x2c0 [ 1043.494632][T17503] v4l2_fh_init+0x27d/0x2c0 [ 1043.494647][T17503] v4l2_fh_open+0x64/0xa0 [ 1043.494664][T17503] em28xx_v4l2_open+0x24e/0x7e0 [ 1043.494683][T17503] v4l2_open+0x1d2/0x5e0 [ 1043.494706][T17503] ? __pfx_v4l2_open+0x10/0x10 [ 1043.494728][T17503] chrdev_open+0x234/0x6a0 [ 1043.494752][T17503] ? __pfx_chrdev_open+0x10/0x10 [ 1043.494771][T17503] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1043.494794][T17503] do_dentry_open+0x982/0x1530 [ 1043.494811][T17503] ? __pfx_chrdev_open+0x10/0x10 [ 1043.494832][T17503] vfs_open+0x82/0x3f0 [ 1043.494854][T17503] path_openat+0x1de4/0x2cb0 [ 1043.494876][T17503] ? __pfx_path_openat+0x10/0x10 [ 1043.494893][T17503] ? __lock_acquire+0xb8a/0x1c90 [ 1043.494911][T17503] do_filp_open+0x20b/0x470 [ 1043.494929][T17503] ? __pfx_do_filp_open+0x10/0x10 [ 1043.494955][T17503] ? alloc_fd+0x471/0x7d0 [ 1043.494975][T17503] do_sys_openat2+0x11b/0x1d0 [ 1043.494996][T17503] ? __pfx_do_sys_openat2+0x10/0x10 [ 1043.495016][T17503] ? find_held_lock+0x2b/0x80 [ 1043.495036][T17503] ? handle_mm_fault+0x2ab/0xd10 [ 1043.495062][T17503] __x64_sys_openat+0x174/0x210 [ 1043.495084][T17503] ? __pfx___x64_sys_openat+0x10/0x10 [ 1043.495106][T17503] ? do_user_addr_fault+0x843/0x1370 [ 1043.495127][T17503] do_syscall_64+0xcd/0xfa0 [ 1043.495144][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.495161][T17503] RIP: 0033:0x7ff33b0a7407 [ 1043.495176][T17503] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1043.495192][T17503] RSP: 002b:00007fffe7df5730 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1043.495208][T17503] RAX: ffffffffffffffda RBX: 00007ff33afb9880 RCX: 00007ff33b0a7407 [ 1043.495221][T17503] RDX: 0000000000000000 RSI: 00007fffe7df6f1a RDI: ffffffffffffff9c [ 1043.495232][T17503] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1043.495242][T17503] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1043.495253][T17503] R13: 00007fffe7df5980 R14: 00007ff33b83e000 R15: 000055dfe207f4d8 [ 1043.495272][T17503] [ 1043.495278][T17503] [ 1043.521308][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1043.525056][T17503] Allocated by task 5865: [ 1043.525069][T17503] kasan_save_stack+0x33/0x60 [ 1043.770443][T17503] kasan_save_track+0x14/0x30 [ 1043.775104][T17503] __kasan_kmalloc+0xaa/0xb0 [ 1043.779677][T17503] em28xx_v4l2_init+0x114/0x4080 [ 1043.784593][T17503] em28xx_init_extension+0x13a/0x200 [ 1043.789863][T17503] request_module_async+0x61/0x70 [ 1043.794966][T17503] process_one_work+0x9cf/0x1b70 [ 1043.799984][T17503] worker_thread+0x6c8/0xf10 [ 1043.804583][T17503] kthread+0x3c5/0x780 [ 1043.808643][T17503] ret_from_fork+0x675/0x7d0 [ 1043.813214][T17503] ret_from_fork_asm+0x1a/0x30 [ 1043.817973][T17503] [ 1043.820375][T17503] Freed by task 5865: [ 1043.824336][T17503] kasan_save_stack+0x33/0x60 [ 1043.828997][T17503] kasan_save_track+0x14/0x30 [ 1043.833657][T17503] __kasan_save_free_info+0x3b/0x60 [ 1043.838841][T17503] __kasan_slab_free+0x5f/0x80 [ 1043.843582][T17503] kfree+0x2b8/0x6d0 [ 1043.847468][T17503] em28xx_v4l2_init+0x22b5/0x4080 [ 1043.852480][T17503] em28xx_init_extension+0x13a/0x200 [ 1043.857755][T17503] request_module_async+0x61/0x70 [ 1043.862763][T17503] process_one_work+0x9cf/0x1b70 [ 1043.867683][T17503] worker_thread+0x6c8/0xf10 [ 1043.872251][T17503] kthread+0x3c5/0x780 [ 1043.876296][T17503] ret_from_fork+0x675/0x7d0 [ 1043.880863][T17503] ret_from_fork_asm+0x1a/0x30 [ 1043.885611][T17503] [ 1043.887912][T17503] The buggy address belongs to the object at ffff88802f7c4000 [ 1043.887912][T17503] which belongs to the cache kmalloc-8k of size 8192 [ 1043.901938][T17503] The buggy address is located 1856 bytes inside of [ 1043.901938][T17503] freed 8192-byte region [ffff88802f7c4000, ffff88802f7c6000) [ 1043.916067][T17503] [ 1043.918374][T17503] The buggy address belongs to the physical page: [ 1043.924769][T17503] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7c0 [ 1043.933506][T17503] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1043.941983][T17503] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1043.949939][T17503] page_type: f5(slab) [ 1043.953928][T17503] raw: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001 [ 1043.962489][T17503] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1043.971051][T17503] head: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001 [ 1043.979697][T17503] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1043.988346][T17503] head: 00fff00000000003 ffffea0000bdf001 00000000ffffffff 00000000ffffffff [ 1043.996993][T17503] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1044.005643][T17503] page dumped because: kasan: bad access detected [ 1044.012039][T17503] page_owner tracks the page as allocated [ 1044.017724][T17503] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5927, tgid 5927 (kworker/0:6), ts 574792338105, free_ts 572944908393 [ 1044.039154][T17503] post_alloc_hook+0x1c0/0x230 [ 1044.043913][T17503] get_page_from_freelist+0x10a3/0x3a30 [ 1044.049448][T17503] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1044.055330][T17503] alloc_pages_mpol+0x1fb/0x550 [ 1044.060170][T17503] new_slab+0x24a/0x360 [ 1044.064324][T17503] ___slab_alloc+0xd79/0x1a50 [ 1044.068991][T17503] __slab_alloc.constprop.0+0x63/0x110 [ 1044.074441][T17503] __kmalloc_noprof+0x501/0x880 [ 1044.079279][T17503] usb_get_configuration+0x121/0x6330 [ 1044.084636][T17503] usb_new_device+0x11d3/0x1a60 [ 1044.089471][T17503] hub_event+0x2f34/0x4fe0 [ 1044.093870][T17503] process_one_work+0x9cf/0x1b70 [ 1044.098787][T17503] worker_thread+0x6c8/0xf10 [ 1044.103364][T17503] kthread+0x3c5/0x780 [ 1044.107419][T17503] ret_from_fork+0x675/0x7d0 [ 1044.111987][T17503] ret_from_fork_asm+0x1a/0x30 [ 1044.116737][T17503] page last free pid 11770 tgid 11770 stack trace: [ 1044.123207][T17503] __free_frozen_pages+0x7df/0x1160 [ 1044.128385][T17503] __put_partials+0x130/0x170 [ 1044.133046][T17503] qlist_free_all+0x4d/0x120 [ 1044.137615][T17503] kasan_quarantine_reduce+0x195/0x1e0 [ 1044.143057][T17503] __kasan_slab_alloc+0x69/0x90 [ 1044.147887][T17503] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1044.153331][T17503] vm_area_alloc+0x1f/0x160 [ 1044.157818][T17503] __mmap_region+0xf85/0x27a0 [ 1044.162476][T17503] mmap_region+0x1ab/0x3f0 [ 1044.166875][T17503] do_mmap+0xa3e/0x1210 [ 1044.171009][T17503] vm_mmap_pgoff+0x29e/0x470 [ 1044.175579][T17503] ksys_mmap_pgoff+0x7d/0x5c0 [ 1044.180241][T17503] __x64_sys_mmap+0x125/0x190 [ 1044.184893][T17503] do_syscall_64+0xcd/0xfa0 [ 1044.189375][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.195275][T17503] [ 1044.197573][T17503] Memory state around the buggy address: [ 1044.203175][T17503] ffff88802f7c4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.211216][T17503] ffff88802f7c4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.219249][T17503] >ffff88802f7c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.227279][T17503] ^ [ 1044.233402][T17503] ffff88802f7c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.241438][T17503] ffff88802f7c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.249480][T17503] ================================================================== [ 1044.258832][ T5865] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1044.267528][T17503] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1044.267546][T17503] CPU: 1 UID: 0 PID: 17503 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1044.267571][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1044.267583][T17503] Call Trace: [ 1044.267590][T17503] [ 1044.267598][T17503] dump_stack_lvl+0x3d/0x1f0 [ 1044.267628][T17503] vpanic+0x640/0x6f0 [ 1044.267658][T17503] panic+0xca/0xd0 [ 1044.267688][T17503] ? __pfx_panic+0x10/0x10 [ 1044.267715][T17503] ? v4l2_fh_init+0x27d/0x2c0 [ 1044.267735][T17503] ? preempt_schedule_common+0x44/0xc0 [ 1044.267765][T17503] ? preempt_schedule_thunk+0x16/0x30 [ 1044.267797][T17503] ? check_panic_on_warn+0x1f/0xb0 [ 1044.267817][T17503] check_panic_on_warn+0xab/0xb0 [ 1044.267837][T17503] end_report+0x107/0x170 [ 1044.267858][T17503] kasan_report+0xee/0x110 [ 1044.350779][T17503] ? v4l2_fh_init+0x27d/0x2c0 [ 1044.355449][T17503] v4l2_fh_init+0x27d/0x2c0 [ 1044.359936][T17503] v4l2_fh_open+0x64/0xa0 [ 1044.364244][T17503] em28xx_v4l2_open+0x24e/0x7e0 [ 1044.369082][T17503] v4l2_open+0x1d2/0x5e0 [ 1044.373308][T17503] ? __pfx_v4l2_open+0x10/0x10 [ 1044.378055][T17503] chrdev_open+0x234/0x6a0 [ 1044.382453][T17503] ? __pfx_chrdev_open+0x10/0x10 [ 1044.387371][T17503] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1044.393685][T17503] do_dentry_open+0x982/0x1530 [ 1044.398426][T17503] ? __pfx_chrdev_open+0x10/0x10 [ 1044.403345][T17503] vfs_open+0x82/0x3f0 [ 1044.407400][T17503] path_openat+0x1de4/0x2cb0 [ 1044.411972][T17503] ? __pfx_path_openat+0x10/0x10 [ 1044.416889][T17503] ? __lock_acquire+0xb8a/0x1c90 [ 1044.421805][T17503] do_filp_open+0x20b/0x470 [ 1044.426288][T17503] ? __pfx_do_filp_open+0x10/0x10 [ 1044.431299][T17503] ? alloc_fd+0x471/0x7d0 [ 1044.435611][T17503] do_sys_openat2+0x11b/0x1d0 [ 1044.440269][T17503] ? __pfx_do_sys_openat2+0x10/0x10 [ 1044.445451][T17503] ? find_held_lock+0x2b/0x80 [ 1044.450110][T17503] ? handle_mm_fault+0x2ab/0xd10 [ 1044.455034][T17503] __x64_sys_openat+0x174/0x210 [ 1044.459871][T17503] ? __pfx___x64_sys_openat+0x10/0x10 [ 1044.465224][T17503] ? do_user_addr_fault+0x843/0x1370 [ 1044.470493][T17503] do_syscall_64+0xcd/0xfa0 [ 1044.474974][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.480849][T17503] RIP: 0033:0x7ff33b0a7407 [ 1044.485243][T17503] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1044.504833][T17503] RSP: 002b:00007fffe7df5730 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1044.513234][T17503] RAX: ffffffffffffffda RBX: 00007ff33afb9880 RCX: 00007ff33b0a7407 [ 1044.521193][T17503] RDX: 0000000000000000 RSI: 00007fffe7df6f1a RDI: ffffffffffffff9c [ 1044.529144][T17503] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1044.537094][T17503] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1044.545046][T17503] R13: 00007fffe7df5980 R14: 00007ff33b83e000 R15: 000055dfe207f4d8 [ 1044.553005][T17503] [ 1044.556211][T17503] Kernel Offset: disabled [ 1044.560506][T17503] Rebooting in 86400 seconds..