last executing test programs: 3m12.229877674s ago: executing program 4 (id=874): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 3m10.960210262s ago: executing program 4 (id=877): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getegid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfffc, 0x0, 0x1}, 0x4000800) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4a6, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200004, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x200000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m9.296667443s ago: executing program 3 (id=884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048001}}], 0x1, 0x44080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r6, 0x7ca8e000) writev(r7, &(0x7f0000000080)=[{0x0}], 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x4d}}], 0x20, 0x4048800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 3m7.260375293s ago: executing program 3 (id=889): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000480)={0x20, 0xe}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x81}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "6921879253b145401a2f1ff72aaf87deca5923afd207092616714e812d44e30337a672b2d66f8d979af6ee205eff1c"}}) 3m7.08712027s ago: executing program 4 (id=892): socket$nl_route(0x10, 0x3, 0x0) close(0x3) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 3m4.029728828s ago: executing program 3 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x405c, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x541b, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x4, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010302000000000000000a000001090002e600000000000000000900010073797a3100"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m4.028402197s ago: executing program 4 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m3.886349226s ago: executing program 4 (id=903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="03"], 0xc) 3m3.590509068s ago: executing program 4 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}}, 0x4040000) 3m3.043455721s ago: executing program 32 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}}, 0x4040000) 3m0.874799404s ago: executing program 3 (id=914): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m0.750130992s ago: executing program 3 (id=916): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}}, 0x4040000) 3m0.478031342s ago: executing program 3 (id=918): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x406026) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2m59.997158333s ago: executing program 33 (id=918): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x406026) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2m47.554948899s ago: executing program 2 (id=958): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000200)=0x8, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e131d", @ANYRES64=r0], 0x16) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={0x0}, 0x18) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) 2m47.398180966s ago: executing program 2 (id=960): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xd2, 0x78842) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0xa, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x400c804, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x80008057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x2, r9, 0xf}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xe8, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 2m46.686093097s ago: executing program 2 (id=963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 2m45.704400745s ago: executing program 2 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m45.502620693s ago: executing program 2 (id=967): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getegid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0xfffc, 0x0, 0x1}, 0x4000800) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4a6, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200004, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x200000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m44.993136108s ago: executing program 6 (id=972): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x60c01, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="f328e32051541416295eb3833a3ae54a2c000000090601020000000000000000000000020073797a"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a6226", 0x10}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="94090400", @ANYRES16=r8, @ANYBLOB="20002abd7000fddbdf253900000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x994}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) 2m44.874396932s ago: executing program 2 (id=973): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xd2, 0x78842) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0xa, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x400c804, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x80008057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x2, r9, 0xf}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xe8, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 2m44.10486674s ago: executing program 34 (id=973): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xd2, 0x78842) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0xa, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x400c804, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x80008057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x2, r9, 0xf}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xe8, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 2m44.098934431s ago: executing program 6 (id=975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 2m43.718683054s ago: executing program 6 (id=976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x0) 2m43.440337988s ago: executing program 6 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m42.838370673s ago: executing program 6 (id=980): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82c, 0x0, 0x0, 0x1}]}, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x406026) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) 2m41.938635802s ago: executing program 6 (id=984): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7f, 0x490000) recvmsg$inet_nvme(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}, 0x21) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x44894}, 0x4000080) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000001c0)={0x1, 0x8, 0x2}) close(r6) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r0, 0x406, r3) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x240048c0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) read(r8, &(0x7f00000001c0)=""/77, 0x4d) 2m41.269331741s ago: executing program 35 (id=984): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7f, 0x490000) recvmsg$inet_nvme(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}, 0x21) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x44894}, 0x4000080) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000001c0)={0x1, 0x8, 0x2}) close(r6) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r0, 0x406, r3) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x240048c0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) read(r8, &(0x7f00000001c0)=""/77, 0x4d) 1m17.55062837s ago: executing program 5 (id=1301): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x7, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6000, 0x4, [0x4, 0xa1, 0xfffd, 0x2]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000005c0)={r7, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) write$P9_RAUTH(r2, &(0x7f0000000000)={0x14, 0x67, 0x1002, {0x4, 0x2, 0x5}}, 0x14) 1m15.985926014s ago: executing program 5 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbd725020000000900010073797a32000000001400020068737230"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd70fefbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x6) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r9, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000004300)={0x50, 0x0, r8, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) (async) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) (async) r10 = inotify_init1(0x80800) inotify_add_watch(r10, &(0x7f0000000000)='./file0\x00', 0x6000020) (async) syz_fuse_handle_req(r7, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r9, 0xee01, 0xfffffff9, 0x1}}, {0x0, 0x2}}}, 0x0, 0x0}) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001340)) (async) fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001380)) 1m15.396982423s ago: executing program 5 (id=1307): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x940) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x420101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000130001", @ANYRESHEX, @ANYBLOB="18278b2f3ce43b93dcec87b5399bde57d7123dfeac5fd3347e5e211745e6f551f0f441254dae9d606009f5af879aba9351c1706e0b9232a5"], 0xe0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r4, 0xa}}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) utimes(0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x7e0, r7}, 0x38) 1m14.833614376s ago: executing program 5 (id=1310): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x14000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000000c0), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x1400, 0x9, 0x1) getuid() msgctl$IPC_RMID(0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) 1m11.959029319s ago: executing program 5 (id=1318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x912, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 1m11.79903758s ago: executing program 5 (id=1319): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 56.450580159s ago: executing program 36 (id=1319): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 15.044416792s ago: executing program 0 (id=1508): ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={"af2d1541", 0x0, 0x0, 0x1, 0x4, 0x5e4, "16b1f424bb8135cdc63fbeb1d31eaf", "d4866dc3", "5b8ccedd", "8b845e2d", ["d5ee8a59e5cf9bc46a40f820", "18d4fd8480b34d4a62202b21", "d012b4c3f8383618601acee5", "79f61273f859e63bf01fcba3"]}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f00000002c0)=@generic={0x1f, "18eb3fc286f7c2defdd35a1b10b68487e7c7d9f8cca2b9869269d8b0e76d88dc3841bcdb26585eaa62529bfa557b88a6f1d53e0d0fd5c11496df35058f34222be56a4dcef91ee8806e55b51abe21f3a7981a873d1f0fc758f138e27cb569fb0c8c0bf363b59285e68908e60e7bebcc8eb45c0736454f31eb3cbfe2f3a975"}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)="429aba3173a785d97d957b5593dc771aa81b2a856c061c43f0f55c9423e8634696553546971c04ce6fe0c52187b9854f1d07ecd780d108cc67d83fee25230f9b941febcf965a1be48d011819f40c7d2dc785db26ef796fda5be0f4bb85af9f6296118fb14a71dddb436ed26af60decafab163e073a0b3b4268d116afb4fee8d3663a216e791e4a8d4b676b3dc47d2af6c236f7a897848d3323ee322f341c0b46334fe427fd9828659f7fba82", 0xac}, {0x0}, {&(0x7f0000000600)="9ee6a28591610839b5f2b0149a52a9a64ca8e3f434d81c036db420e2cf4bfd0197f43e09ae1208f0441cda67d103457044070fd3490dc247d18406b8b70def8ad33b181962991a97d9fb55d099ba8c581713d99c", 0x54}, {&(0x7f0000000680)="025119ae1ddcf1085f37b3c5e6803b6e14a39928445ed56e05d14a18613fe453db9ea95cf4db48b41d745eb985530dc3041c25cc32b40e99091b13dfc3df87e7c9d929361dec7a88f81a26cf2bc391f28cb71925c86e02f96ee7c39791ced8d264588bc51b2f86e44101539fbded335dfde84b5d5031", 0x76}, {&(0x7f0000000580)="a3a6591b1dc8659cfbacba1c58388c84d1f9b680", 0x14}, {&(0x7f00000007c0)}, {&(0x7f00000008c0)="03f357042fea524acab73b21d421a0f8ee55166a8615fc4df31233705b4c92a7770778fae5ecc322e019eb4e43549c84cb7452a109c50039d0e848bba92e957894369e27aa30b26a59153d9780e89a0331bb6bc4bc6fb9567f0b4d9a5bb42ba5fe903bbe3c2d5083be02575308e556932c51072e3844b087c88df67f8cf57d6003514be95059777240ce0113c31a481cbb368db6424ac23862fadcd426cfefd93b9983146bcb77d14783092a4c553ba30305717914513905bae505c9019b5d6ad6e7c31e16425c8dda34538fbf6d953aa51831017298045588", 0xd9}, {&(0x7f00000009c0)="2f56ec550c5e6d7f144a181aa9455ea664eda0ee0d7b23d10045691739f6cb41ce5298ec964efc92553375a88be9691f9641429fdd1f182436e4f9eb54e6cb1be4b3a888c1c87f4c88738f85450e38029b1ede85332e209dc253efbc91c8dd83df122d6fe923ff18bd384be47bd23be8789661f2757c81fb78dce27599fdbc96b39db100a02d6726e115a746db5004041a727ae8ac1b9ae4128ba37262219700da4ea98fd99318655d5b65e4d19a63bedae21a3ae0e16d31344f75c932ad", 0xbe}, {&(0x7f0000000700)}], 0x9, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}}, {{&(0x7f0000000bc0)=@isdn={0x22, 0x6, 0xf8, 0x7, 0x2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000c40)="ba2c40b4987d2a5e2f8ca84b72dc76d2ee16d5ac47e2720153b18979addcd6eb8e182401e868aae790042f958904cf00006143ab27a307c08f0b15f3231c9175e1ae2aaeab88e2f383d6c0028f741bb64f82d689c1166efe145d193a78f8a3c4bdb6dc92bfed739bbc9e30268ca5681c17b60fddeb07326b86143dba35f13878cdddc21f845744b1a7c0efe0e3291d546f65e6cd81b1e6cb26ad2dd51e90b854959f56b698ee3bde629b580ec16051ac1af2ef25167fd1d5ae848c4e6fdb5576d274032c34212a5d9436cc1a560cec705aae717e091862e7bacede6f45d71012d3d526", 0xe3}, {&(0x7f0000000d40)="3cbe1aa5b78b6911db8ca412b78fab3e35b9c64e02d4649f9a0f88fe5e85d56eff586752e69c8c416444be7e8c9ee8d6a2d06f5ba95e35f7beeeaa4d6262", 0x3e}, {&(0x7f0000000740)="7f25fafcd446dc3448b913a617270ba0175029fe0b14aa6b918ac1", 0x1b}], 0x3}}], 0x2, 0x4000000) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRES8, @ANYRESDEC]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x400, 0x6, {{0x12, 0x4, 0x2, 0x23, 0x48, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x24, 0x7e, 0x1, 0x5, [{@broadcast, 0x800}, {@multicast2, 0x1}, {@local, 0x9}, {@loopback, 0x2}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x5, @remote, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="61b0026a4dfe50d2300be56afe1a5c91d72fcf6ca26eedf6ce9051c1b7b665f735f51b260616a4f96a41189c57a872242b2985d41324293d5f1d238e8bd8968d0bd51d07d6ce80f3768f43f09428c0dff7e3a8f3757dbde674d2160651c1d5918d9a949e18d426cef0fe38e1f9c5945a1ecf547039fd4ff0a6d0b6e1f0d77af836d6a6e1325dabd1f20940fda30768a32ec32484765cf6c3119a1a3540f0ecb4327ddea828ed9e63158303fe867d96b1dc32eb690c6eb8fc6b6c213596f9da418a830c9508a05776732a60029a40630eeb34d6d7a06bb76efb092fb48b8de79374ea3aea76213c21014a3f1d24", 0xed}, {&(0x7f0000000300)="dee7ce14ae74db1d835364fd8ac7a38c6c645c1949533a8dcd84f82ed4b7eb8a6e1bfc324ebd0aa12eec6898a9eea7dd4bf58579d83679c4c82e575ad702cc1dc4c171f7c1c95d7536d23755723b764f29633f9a5c4f7d4d69f0197316194f55869d02ad0963da0cd996fe5d9e84e7bed73ba01c1aec12b5517391a1693aae5e3fd0571fb8e8be10d7ae56e36fe213d5fe65c32be34849dde73fef89bf03cf2999d96922eafa55a0fecf415d5bc510ecaca63b3617530f64c427fdae3ac58c6d6a06d598c785af79c3e45b29f07f0ea6a04b9db4e9b196373ef734d35dd09efe5824106af78a8e1cbdcb71935ae2bb35b6b0", 0xf2}], 0x2, &(0x7f0000000500)=[@hopopts={{0x240, 0x29, 0x36, {0x1d, 0x44, '\x00', [@generic={0x7, 0xe2, "c0865e6a115244ba5aa1a6b57f29bb483a4dcd72fe6c9136836025bac8ed3b0b87515aa90d912fd95a00f3a51d4c1fd53bdfe321da993fcc5c6b84cb969e7aebbed30e2525287f2810c51ee274203d119bf9a619e4e51107e031ca6d8bc64d5d6c67b09a3733be2b7a030b07b00589084fac59360b18bf01fc78fa16bfeea6a8438a07e3e145a3344858ce31e4545bf65e365de22852ef4aae8ce2063efe8339d6500d85a9fa0acd7b615691daffb7e140f06beecb2f41bfd5851ca408d0549ab1b4d43a8437db2e4e700f571a08fea5ed6cee54a078fbc554ee85da2c76f5bcd6b2"}, @generic={0xc, 0xd8, "c8d5d4fe0642c7a25c8126fdc8149ac286eaf8db35d8e87fd8e7ae7310df53048aab9eea240aad24c27f95564241d7385791b2142454a905c9de6b8dc6cc7c3b66454bf9d11427a9d01d38f131749b6401905222f776a697511de4c9f357ea52183f80d96561e01030266f679d4c661011c05cee51c010d4c49c384a0e92a8d457daef2367a7c0a13d68bb2bedff31ef9575cb01bb570db7fb64f78058abeb20d861b5731f807904ccac0f9cfd0c4b24ecf5a5c552b82894d319fb8a45bcea02312fa23e1d9625ce5bef99137ee494b1ab17780265eaa4cb"}, @enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x2, [0x8, 0x4, 0x8001]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xfa, 0x7, [0xc, 0x7, 0x0, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x92a}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x68, 0x29, 0x39, {0xff, 0xa, 0x1, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @local, @private2, @loopback]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x19, 0xa, 0x1, 0xf, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x73, 0x14, 0x1, 0x1, 0x0, [@remote, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}], 0x438}}], 0x1, 0x40) 14.451619572s ago: executing program 7 (id=1509): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3859c1, 0x9) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14.405375057s ago: executing program 9 (id=1510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f0000000340)) sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000cc0)={0x9, {0x2, 0x7, 0x1000}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000002c0)={0x9, @raw_data="169a5b5f53b63dee4305a0fd1a5c444d33ec2c28943eed31393b0dd2298aba3dc52733f94dda3f8ef76c4df55cd5018302bb08adcb828f2a8dbe637c353f0c904b739da577509cee8b91f98a497c9f594dfc0421b0fab253865ab75cefee5b3712e631d2353b2b36df1a8312a53dc2e610e80aeec1eda41e90cf9827c3d13299dc5fe23b8a1a0195297e45dbc9b0958071279cea42dfcb8c5ba1bfe4818c9b9db3c431f7be9d58421521bb91c334c3c1b7784feb2e992c525d897ceb059aba4206d065a4c4a014a6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000040)=r8) 13.491115084s ago: executing program 9 (id=1512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000001d3e7a11f0fd245161021e2ecfaee"], 0x18) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'geneve1\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = io_uring_setup(0x91, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) tee(r0, r8, 0x2, 0x2) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x5892c4, 0x0) mmap(&(0x7f0000477000/0x13000)=nil, 0x13000, 0x300000e, 0x4000010, r9, 0xc275000) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000100)={0x2, 0x5}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20441, 0x0) ioctl$BLKDISCARD(r10, 0x125f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13.448773961s ago: executing program 7 (id=1513): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) r6 = fcntl$getown(r2, 0x9) sendmsg$AUDIT_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x1, 0x70bd27, 0x25dfdbfb, {0x12, 0x0, 0x1, r6, 0xe, 0x5, 0x3, 0x8, 0x0, 0x6, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) ftruncate(r5, 0x200004) ioprio_get$pid(0x1, r0) sendfile(r4, r5, 0x0, 0x80001d00c0d1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000003e40)={[{@redirect_dir_on}, {@volatile}]}) 12.547859138s ago: executing program 7 (id=1516): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) eventfd2(0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x69a04c8e98d914be) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {}, 0x8, 0x2, &(0x7f0000000380)="51e0566bd66959f7c088761e3865b6f84390c64e086adf3d46d7479a192dc5c0de2f187fa4ee74053eefb20d7a743500fb2cbd2330e779242240bc39c571005925b78ce745cdf9", 0x47, 0xfffffffd, 0x200, 0x0, 0x4, 0x4, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000500)={0x800, 0xf0, 0xf0, 0x360, 0x1, 0x7f80, 0x1, 0x2, {0x1, 0x40000002, 0x1}, {0x100, 0xffffffb6, 0x1}, {0x5, 0xc5, 0x1}, {0x8, 0x83}, 0x3, 0x10, 0x8, 0x10000, 0x1, 0xfffffbff, 0x2, 0x9, 0x9, 0xd, 0xe4, 0x6, 0x10, 0x202, 0x1, 0x6}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r3, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000003060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = fanotify_init(0x8, 0x40000) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r6, 0x1, 0x100018, r7, 0x0) 12.449936235s ago: executing program 9 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f0000000340)) sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000cc0)={0x9, {0x2, 0x7, 0x1000}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000002c0)={0x9, @raw_data="169a5b5f53b63dee4305a0fd1a5c444d33ec2c28943eed31393b0dd2298aba3dc52733f94dda3f8ef76c4df55cd5018302bb08adcb828f2a8dbe637c353f0c904b739da577509cee8b91f98a497c9f594dfc0421b0fab253865ab75cefee5b3712e631d2353b2b36df1a8312a53dc2e610e80aeec1eda41e90cf9827c3d13299dc5fe23b8a1a0195297e45dbc9b0958071279cea42dfcb8c5ba1bfe4818c9b9db3c431f7be9d58421521bb91c334c3c1b7784feb2e992c525d897ceb059aba4206d065a4c4a014a6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r8) 12.10798127s ago: executing program 1 (id=1518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f0000000340)) sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000cc0)={0x9, {0x2, 0x7, 0x1000}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000002c0)={0x9, @raw_data="169a5b5f53b63dee4305a0fd1a5c444d33ec2c28943eed31393b0dd2298aba3dc52733f94dda3f8ef76c4df55cd5018302bb08adcb828f2a8dbe637c353f0c904b739da577509cee8b91f98a497c9f594dfc0421b0fab253865ab75cefee5b3712e631d2353b2b36df1a8312a53dc2e610e80aeec1eda41e90cf9827c3d13299dc5fe23b8a1a0195297e45dbc9b0958071279cea42dfcb8c5ba1bfe4818c9b9db3c431f7be9d58421521bb91c334c3c1b7784feb2e992c525d897ceb059aba4206d065a4c4a014a6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r8) 11.520306796s ago: executing program 9 (id=1519): timer_create(0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x1000008) socket(0x3, 0x2, 0x26) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000280)={0x7f, 0x6, 0x0, 0x6, 0x4, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 11.453544137s ago: executing program 7 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r2, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 10.794618716s ago: executing program 1 (id=1521): unshare(0x28040680) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002dc0)=@newchain={0x8d4, 0x64, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf, 0x9}, {0xb, 0xc}}, [@f_tcindex={{0xc}, {0x724, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x194, 0x7, [@m_police={0xb8, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x8a, 0x6, "2d6b00e9c73197bfbe703da14af91c1e9edb17ef0db517031f76ab86a2b1ba8544fb2c9d886edc0635431006c3408db2b187f7b765816322f05b918d2c5e87669bf98240fe10011a146063f956fefd281507ac871a46bd8c9ab4b170b5148b432d2ee959545d0c25ca4271dc54aed80b146d2789999f272b254553865720acd574d71a920c36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_tunnel_key={0xd8, 0x19, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffffffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x85, 0x6, "3a84fcd929bc832770434fa0df3c8164b29dc700b097563420d4d322ac7dcfd07644b0415a25b26c30cdb65ae5b629ef0c3c38e7269e68ab59b04e1a620c70f95b2b458b0a5aeab0f23982288dfadaf727a7f533e5e44d311a964d088730bcbb894f7559c2f1b7af0a3a2026f169e70b03001586c7f1bb2428946e71821fd5d015"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_POLICE={0x41c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x7, 0x0, 0x5, 0x6e3ae9e9, 0x7, 0x9, 0x80000000, 0x4, 0x0, 0x2, 0x19, 0x5, 0xba9c, 0x3ff, 0x6, 0x6, 0x800, 0x9, 0x0, 0x400, 0x0, 0x2, 0x9, 0x5, 0x8000, 0x5, 0x879, 0x6, 0x1ff, 0x1, 0x10000, 0x2, 0x1, 0x7fd, 0x7ff, 0x1, 0x10, 0x3, 0xfff, 0x1, 0x3, 0x40, 0x0, 0x1, 0x73, 0xb, 0xffffffff, 0xf800, 0x200000, 0x4, 0x7, 0x6, 0x6, 0x1, 0x0, 0x4, 0x6da, 0x2000000, 0x48001, 0x40000000, 0x0, 0x0, 0xffff6e13, 0x0, 0xdb7a, 0x2c, 0x81, 0x2, 0x3, 0xb, 0x1, 0x3, 0xfffff96e, 0x40, 0x80, 0x4, 0x2, 0x1, 0x4d9, 0x9, 0x2, 0x0, 0x1, 0x9, 0x9d4, 0xb, 0x10, 0xdc, 0x10000, 0x9, 0x9, 0x1, 0x2, 0x9, 0xfff, 0x0, 0x8001, 0x6f, 0x7, 0x6, 0xfffffffc, 0x3, 0x200, 0x7, 0x1ff, 0x3, 0xd, 0x5, 0x9, 0x0, 0x1, 0xfffffeab, 0x368bc7fa, 0x4, 0xcaf, 0x2, 0xbf, 0xffffff81, 0xc3, 0x6, 0x6662, 0x3, 0x3, 0x8, 0x400cd, 0xb, 0x9, 0x54b8, 0x8, 0x1ff, 0x200, 0x1, 0x0, 0x2, 0x400, 0x3, 0x7, 0x2, 0xffff1cdc, 0x4, 0x8, 0xa0000, 0x1, 0x6, 0x1, 0x4, 0x6, 0x10000000, 0x6, 0x4, 0x400, 0x10, 0x800, 0x3, 0x9, 0x8, 0xffff4f4e, 0x0, 0xd9e, 0x0, 0x8000, 0x1, 0x1ff, 0x6, 0x0, 0x8, 0x1, 0x1, 0xaf80, 0x3, 0x3, 0x3, 0x10, 0x2c7a, 0x3, 0x8, 0x2, 0x9, 0x7f, 0xb7, 0x3, 0x7, 0x4, 0x3, 0x6, 0x0, 0x6, 0x2, 0x3, 0x3, 0xffff1ea8, 0xffff, 0x9, 0x1, 0x7, 0x7, 0x7f, 0x0, 0x8, 0x0, 0x8, 0x4, 0x1, 0x4, 0xd, 0x5fb377aa, 0x7fff, 0x3, 0x944e, 0x8, 0xec8f, 0x4, 0x7, 0x3, 0x8, 0x2, 0x1, 0x1, 0x4aee, 0x80, 0x6, 0x1, 0x4, 0x1, 0x7, 0x348, 0x99, 0x3ff, 0x7, 0x0, 0x10001, 0xd84, 0x5, 0x54b2d9, 0x5, 0x6, 0x4, 0xb, 0xf8bd, 0xffffffff, 0xffffff01, 0x8, 0x3ff, 0x4, 0xd, 0x0, 0x7ff, 0x5, 0x9, 0x8, 0xd, 0x0, 0x173c, 0x7fffffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xa997}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x140, 0x7, [@m_skbmod={0xa0, 0x13, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x60, 0x6, "13f7706c30c3de65bb96a8e29428e3ae88cddc9ab0e7911b36c9192e018ec0e00f540f2f663c4703dacbc868cbd3b5baaa22c70774effe532ec9fab21507ec16c15e9366ce76357739739d50b67c63466f8f9eb1bc2d855b95653179"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x9c, 0x6, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdad6c}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x5, 0xffffffffffffffff, 0x200, 0x1}}}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x2b, 0x6, "11b5741263b25715b24f8f900b793728f33e72a221815292333efbbc0b681484dd09fdfd59c209"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0x8}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}]}}, @f_tcindex={{0xc}, {0x10, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x4}]}}, @f_rsvp={{0x9}, {0x158, 0x2, [@TCA_RSVP_ACT={0x100, 0x6, [@m_sample={0x78, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0xffffffff, 0x1ff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6d}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x12, 0x6, "1a73f0ebe6c0380652db4162a194"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x84, 0x3, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xf76}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf9}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x36, 0x6, "34d3ee204f130244399dbfba0f687e07514f3542755662a6f17e3aef1de5f77c259ff0ca7f2df887a1cca1352c9510a9273c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x47b4, 0x7, 0x1000}, {0xffffffff, 0x9, 0x1}, 0x5e, 0x7, 0x5}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffff}}, @TCA_RSVP_POLICE={0x4}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xb, 0x5, 0x3}, {0xfffffffb, 0x0, 0x1}, 0x58, 0xf, 0x8}}]}}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x80}, 0x4c084) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x44) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 10.3544097s ago: executing program 1 (id=1522): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6(0xa, 0x1000080002, 0x100000000000088) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x2}], &(0x7f0000000200)='GPL\x00', 0x2, 0xb, &(0x7f0000000240)=""/11, 0x41000, 0xf, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xb, 0x4, 0x40f}, 0x10, 0x0, 0xffffffffffffffff, 0xa, 0x0, &(0x7f00000004c0)=[{0x1, 0x1, 0x8, 0x7}, {0x4, 0x5, 0xb, 0x5}, {0x2, 0x2, 0x5, 0x1}, {0x5, 0x1, 0x4}, {0x1, 0x5, 0x1, 0x3}, {0x4, 0x1, 0x3, 0x5}, {0x4, 0x2, 0x6, 0x5}, {0x1, 0x5, 0xe, 0x1}, {0x5, 0x1, 0xf}, {0x0, 0x1, 0xb, 0x2}], 0x10, 0x7fff}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9902) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xcdc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x3, 0x11, 0xfffffffffffffdc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x44) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e00000"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9.181636903s ago: executing program 0 (id=1523): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f0000000280)={0x0, 0x20b208, 0x400, 0x1, 0x323}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000040)={0x13, 0x42, 0x3, 0x0, 0x947}) r7 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r8, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$TIOCSETD(r8, 0x5412, &(0x7f0000000140)=0xffffffc0) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 7.086232463s ago: executing program 8 (id=1526): unshare(0x28040680) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002240)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002dc0)=@newchain={0x8d4, 0x64, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf, 0x9}, {0xb, 0xc}}, [@f_tcindex={{0xc}, {0x724, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x194, 0x7, [@m_police={0xb8, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x8a, 0x6, "2d6b00e9c73197bfbe703da14af91c1e9edb17ef0db517031f76ab86a2b1ba8544fb2c9d886edc0635431006c3408db2b187f7b765816322f05b918d2c5e87669bf98240fe10011a146063f956fefd281507ac871a46bd8c9ab4b170b5148b432d2ee959545d0c25ca4271dc54aed80b146d2789999f272b254553865720acd574d71a920c36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_tunnel_key={0xd8, 0x19, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffffffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x85, 0x6, "3a84fcd929bc832770434fa0df3c8164b29dc700b097563420d4d322ac7dcfd07644b0415a25b26c30cdb65ae5b629ef0c3c38e7269e68ab59b04e1a620c70f95b2b458b0a5aeab0f23982288dfadaf727a7f533e5e44d311a964d088730bcbb894f7559c2f1b7af0a3a2026f169e70b03001586c7f1bb2428946e71821fd5d015"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_POLICE={0x41c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x7, 0x0, 0x5, 0x6e3ae9e9, 0x7, 0x9, 0x80000000, 0x4, 0x0, 0x2, 0x19, 0x5, 0xba9c, 0x3ff, 0x6, 0x6, 0x800, 0x9, 0x0, 0x400, 0x0, 0x2, 0x9, 0x5, 0x8000, 0x5, 0x879, 0x6, 0x1ff, 0x1, 0x10000, 0x2, 0x1, 0x7fd, 0x7ff, 0x1, 0x10, 0x3, 0xfff, 0x1, 0x3, 0x40, 0x0, 0x1, 0x73, 0xb, 0xffffffff, 0xf800, 0x200000, 0x4, 0x7, 0x6, 0x6, 0x1, 0x0, 0x4, 0x6da, 0x2000000, 0x48001, 0x40000000, 0x0, 0x0, 0xffff6e13, 0x0, 0xdb7a, 0x2c, 0x81, 0x2, 0x3, 0xb, 0x1, 0x3, 0xfffff96e, 0x40, 0x80, 0x4, 0x2, 0x1, 0x4d9, 0x9, 0x2, 0x0, 0x1, 0x9, 0x9d4, 0xb, 0x10, 0xdc, 0x10000, 0x9, 0x9, 0x1, 0x2, 0x9, 0xfff, 0x0, 0x8001, 0x6f, 0x7, 0x6, 0xfffffffc, 0x3, 0x200, 0x7, 0x1ff, 0x3, 0xd, 0x5, 0x9, 0x0, 0x1, 0xfffffeab, 0x368bc7fa, 0x4, 0xcaf, 0x2, 0xbf, 0xffffff81, 0xc3, 0x6, 0x6662, 0x3, 0x3, 0x8, 0x400cd, 0xb, 0x9, 0x54b8, 0x8, 0x1ff, 0x200, 0x1, 0x0, 0x2, 0x400, 0x3, 0x7, 0x2, 0xffff1cdc, 0x4, 0x8, 0xa0000, 0x1, 0x6, 0x1, 0x4, 0x6, 0x10000000, 0x6, 0x4, 0x400, 0x10, 0x800, 0x3, 0x9, 0x8, 0xffff4f4e, 0x0, 0xd9e, 0x0, 0x8000, 0x1, 0x1ff, 0x6, 0x0, 0x8, 0x1, 0x1, 0xaf80, 0x3, 0x3, 0x3, 0x10, 0x2c7a, 0x3, 0x8, 0x2, 0x9, 0x7f, 0xb7, 0x3, 0x7, 0x4, 0x3, 0x6, 0x0, 0x6, 0x2, 0x3, 0x3, 0xffff1ea8, 0xffff, 0x9, 0x1, 0x7, 0x7, 0x7f, 0x0, 0x8, 0x0, 0x8, 0x4, 0x1, 0x4, 0xd, 0x5fb377aa, 0x7fff, 0x3, 0x944e, 0x8, 0xec8f, 0x4, 0x7, 0x3, 0x8, 0x2, 0x1, 0x1, 0x4aee, 0x80, 0x6, 0x1, 0x4, 0x1, 0x7, 0x348, 0x99, 0x3ff, 0x7, 0x0, 0x10001, 0xd84, 0x5, 0x54b2d9, 0x5, 0x6, 0x4, 0xb, 0xf8bd, 0xffffffff, 0xffffff01, 0x8, 0x3ff, 0x4, 0xd, 0x0, 0x7ff, 0x5, 0x9, 0x8, 0xd, 0x0, 0x173c, 0x7fffffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xa997}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x140, 0x7, [@m_skbmod={0xa0, 0x13, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x60, 0x6, "13f7706c30c3de65bb96a8e29428e3ae88cddc9ab0e7911b36c9192e018ec0e00f540f2f663c4703dacbc868cbd3b5baaa22c70774effe532ec9fab21507ec16c15e9366ce76357739739d50b67c63466f8f9eb1bc2d855b95653179"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x9c, 0x6, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdad6c}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x5, 0xffffffffffffffff, 0x200, 0x1}}}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x2b, 0x6, "11b5741263b25715b24f8f900b793728f33e72a221815292333efbbc0b681484dd09fdfd59c209"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0x8}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}]}}, @f_tcindex={{0xc}, {0x10, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x4}]}}, @f_rsvp={{0x9}, {0x158, 0x2, [@TCA_RSVP_ACT={0x100, 0x6, [@m_sample={0x78, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0xffffffff, 0x1ff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6d}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x12, 0x6, "1a73f0ebe6c0380652db4162a194"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x84, 0x3, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xf76}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf9}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x36, 0x6, "34d3ee204f130244399dbfba0f687e07514f3542755662a6f17e3aef1de5f77c259ff0ca7f2df887a1cca1352c9510a9273c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x47b4, 0x7, 0x1000}, {0xffffffff, 0x9, 0x1}, 0x5e, 0x7, 0x5}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffff}}, @TCA_RSVP_POLICE={0x4}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xb, 0x5, 0x3}, {0xfffffffb, 0x0, 0x1}, 0x58, 0xf, 0x8}}]}}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x80}, 0x4c084) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x44) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000020c0)=@ccm_128={{0x303}, "1122fb0d1aa6115d", "0db17c4ac12524bd0af4a754d978dca1", "15c8d537", "387f4d22d0ab21a5"}, 0x28) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 7.074249281s ago: executing program 0 (id=1527): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000004000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {0xb, 0x1}, {0xa, 0xd}}}, 0x24}}, 0x48054) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.080048233s ago: executing program 7 (id=1528): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x7fff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004050) bind$can_raw(r1, &(0x7f0000000200), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.985883561s ago: executing program 0 (id=1529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f0000000340)) sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000cc0)={0x9, {0x2, 0x7, 0x1000}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000040)=r8) 5.773848567s ago: executing program 8 (id=1530): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r3, &(0x7f0000000080)=""/77, 0xffffff0f) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000001c0)={[], 0xfffffffffffff000}, 0x0) 5.431909247s ago: executing program 1 (id=1531): r0 = getpid() ioprio_get$pid(0x1, r0) 5.046506147s ago: executing program 1 (id=1532): socket(0x22, 0x2, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r4, 0x0, 0x33) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) write(r5, 0x0, 0x0) socketpair(0x1d, 0x800, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f00000002c0)) 3.077321371s ago: executing program 0 (id=1533): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100002312000000", @ANYRES32, @ANYBLOB="600200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x20000000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000fbdb822d6785c2bc5afe7b6069df251800000028000180140002006970766c616e30000000000000000000080003000000000008000300020000000500050000000000"], 0x44}}, 0x84) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x8f) io_uring_enter(0xffffffffffffffff, 0x3d0a, 0x4c1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) write$proc_mixer(0xffffffffffffffff, 0x0, 0x33) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x32048081) 2.853539086s ago: executing program 1 (id=1534): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100002312000000", @ANYRES32, @ANYBLOB="600200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000fc8898748074681a97cf7463f7062ff3be592091a4ec93c65d85c0284f9e7d4316958e313ae6050bccae83e3e912e7dd36496635a489f4f9cbcd98ad4ec1823bd28d93a503a1225f6f352b257288041adf3cc398b05a9f64ca4515819e2a730c5421d0b16c508eee8ae8b31f8592cfade38c53e914d37b96230c670b66ec444caa81899684a74e8e29c5c904c7c1f1a2eb522808052b796e8cd7da2e434d0aca934e7c483ebb7bf10943a8c07af91dce48f7ab8b2f72de813dadc5f35690390d6ce2b2128c137b39bfb4cc089daf8fa43506fa6874e07a5d2e0f5d2d9db885183b6eeb9b101b0a76537b0dc182374a2b7e557a89b9a96a3bd03f1c6e1fbde5bcce5e22d13ed00998ac36e5a9b59504583fd2dc58a3543bacd7c22f2f3e0b1521da21e5dc7109f522e0c14c5b9b6406ac85c6c7e2616c9faacc01d1bcdb31db13b56182ffe3e8217a3e004dd41883031f2a9cbff13a7c6f81b1c35c99ac8e0d15329cde444c217eb6dd8623c179bb90ff6ac238f58c5b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x20000000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fbdb822d6785c2bc5afe7b6069df251800000028000180140002006970766c616e30000000000000000000080003000000000008000300020000000500050000000000"], 0x44}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x8f) io_uring_enter(0xffffffffffffffff, 0x3d0a, 0x4c1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) write$proc_mixer(0xffffffffffffffff, 0x0, 0x33) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x32048081) 2.68614905s ago: executing program 8 (id=1535): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3859c1, 0x9) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.681895661s ago: executing program 8 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000000c0)={0xfb7f, 0x240, 0x380, &(0x7f00000005c0)=[0x16, 0xfffffffffffffffd, 0x8, 0x6, 0x3e3c, 0xffff, 0x8d, 0x8001, 0x3f8000, 0x1, 0x80000001, 0x61f, 0x36, 0x1000, 0xffffffffffffffcf, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x80000001, 0x9, 0x4, 0x1000, 0x3, 0x0, 0x0, 0x8, 0x29, 0x335, 0x9, 0x6, 0x3, 0x4c0, 0x0, 0xc, 0x4a17b51d, 0x0, 0xd9d, 0x1, 0x5, 0xfffffffffffffffb, 0x7, 0xe244, 0x373, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x401, 0x7, 0x3ff, 0x5, 0x5, 0xc, 0x2, 0x8, 0xbe1f938, 0x0, 0x0, 0x5, 0x3, 0x8, 0x4, 0x5, 0x2, 0x3, 0x8, 0x7, 0x4, 0x24, 0x9, 0x7, 0x5, 0x9, 0xf, 0x4, 0x1edb, 0xc4a, 0xed7a, 0x8, 0x3a, 0x200, 0x3, 0x8, 0x1, 0x8, 0x400, 0xa, 0x0, 0x4bb, 0x4, 0x8, 0x7fffffff, 0x3719, 0x401, 0x8, 0x0, 0x7, 0x2, 0x4f38, 0x9, 0x0, 0x0, 0x3, 0x887, 0x2, 0xe2a, 0x2, 0x9, 0x7fffffffffffffff, 0xfffffffffffffff2, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffff2, 0x2, 0x7, 0x101, 0x80, 0xfffffffffffffffa, 0x8, 0x6, 0x2]}) 1.418716318s ago: executing program 8 (id=1537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 1.190536772s ago: executing program 9 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 672.363039ms ago: executing program 0 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r2, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 610.932878ms ago: executing program 9 (id=1540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x178}}, 0x0) syz_emit_ethernet(0x1ea, &(0x7f00000022c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x1b4, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x5, {0x9, 0x6, "3ab405", 0xfffd, 0x62, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast2, [@srh={0x5c, 0x4, 0x4, 0x2, 0x2, 0x48, 0x2d64, [@private2, @local]}, @hopopts={0x67, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}]}, @hopopts={0x8b, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private2}, @generic={0x1, 0x79, "650b1ddd764cbb02e9846735d63491b51fe4cdaadf608a63c18e67d83a8feecaa09100d32b698d8921a10a5fcf0de2feb91643fc8d8065d99f6a6e86cf3dfbdcbf2d29e2edf6e4d4f18cb4fe16ca902007e9fc3347758b6ce34047ff276ee0e1b8e71d03e60768ae58b52d4e702619ca0415155f32630203ac"}]}, @srh={0xc, 0x4, 0x4, 0x2, 0xe0, 0x28, 0xfff, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x65}, @dstopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}], "3bb7c2d007108e64a289a10aad7633bc2c5dc7d15d7dade80afe81b769e682b4113b6d2803e3657af27ad63b5226f38660e30f203b1f852267a19f98e08dd3d8a80ac94f7ef033e9a074c1483a251100cdce06a4bce8df0642f1b891cdcdfa3ef80efc32c57cbce58d9bc6df"}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400000000001800128008000100736974000c84538008000300ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) pipe(0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000280)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) execveat(r5, 0x0, 0x0, 0x0, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) 389.780311ms ago: executing program 8 (id=1541): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) r6 = fcntl$getown(r2, 0x9) sendmsg$AUDIT_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x1, 0x70bd27, 0x25dfdbfb, {0x12, 0x0, 0x1, r6, 0xe, 0x5, 0x3, 0x8, 0x0, 0x6, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) ftruncate(r5, 0x200004) ioprio_get$pid(0x1, r0) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 0s ago: executing program 7 (id=1542): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x940) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x420101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000130001", @ANYRESHEX, @ANYBLOB="18278b2f3ce43b93dcec87b5399bde57d7123dfeac5fd3347e5e211745e6f551f0f441254dae9d606009f5af879aba9351c1706e0b9232a5"], 0xe0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r5, 0xa}}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) utimes(0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001aa40)=""/102392, 0x18ff8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x7e0, r8}, 0x38) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x11) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x100, 0x2, {0xffffffffffffffff}, {}, 0x7f, 0x1}) getpriority(0x1, r10) preadv2(r0, 0x0, 0x0, 0x6, 0xfffff3f3, 0x8) get_robust_list(0x0, 0x0, &(0x7f0000000140)) sendmsg$nl_generic(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') kernel console output (not intermixed with test programs): z.7.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 348.162585][ T792] usb 6-1: USB disconnect, device number 9 [ 348.370269][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1188'. [ 348.402336][T10359] netlink: 'syz.7.1188': attribute type 2 has an invalid length. [ 348.419122][T10359] binder: 10357:10359 ioctl c0306201 200000000640 returned -22 [ 348.428336][ T30] audit: type=1400 audit(1773383048.023:402): avc: denied { append } for pid=10357 comm="syz.7.1188" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 348.716451][ T792] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 348.774273][T10366] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1190' sets config #0 [ 348.838759][T10371] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1190' sets config #1 [ 349.047299][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 349.055650][ T792] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 349.064974][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.073142][ T792] usb 2-1: Product: syz [ 349.077317][ T792] usb 2-1: Manufacturer: syz [ 349.083301][ T792] usb 2-1: SerialNumber: syz [ 349.094829][ T792] usb 2-1: config 0 descriptor?? [ 349.115909][ T792] gspca_main: se401-2.14.0 probing 047d:5003 [ 349.166063][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1192'. [ 349.326642][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.345755][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.420751][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1191'. [ 349.561528][ T792] gspca_se401: ExtraFeatures: 4 [ 349.586247][ T792] gspca_se401: Frame size: 64x513 bayer [ 349.601382][ T792] gspca_se401: Frame size: 259x521 bayer [ 349.635840][ T792] gspca_se401: Frame size: 96x1537 bayer [ 349.655494][ T792] gspca_se401: Frame size: 1824x1033 bayer [ 349.685554][ T792] gspca_se401: Frame size: 0x256 bayer [ 349.875300][T10397] xt_hashlimit: max too large, truncated to 1048576 [ 349.924926][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.952540][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.020346][ T30] audit: type=1400 audit(1773383049.593:403): avc: denied { create } for pid=10403 comm="syz.8.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 350.117020][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.197893][ T30] audit: type=1400 audit(1773383049.623:404): avc: denied { write } for pid=10403 comm="syz.8.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 350.269046][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.534316][ T30] audit: type=1400 audit(1773383049.673:405): avc: denied { read } for pid=10403 comm="syz.8.1195" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 350.595702][T10413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.618509][T10413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.667080][ T30] audit: type=1400 audit(1773383049.673:406): avc: denied { open } for pid=10403 comm="syz.8.1195" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 350.748980][ T792] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 350.763097][ T29] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 350.861494][ T30] audit: type=1400 audit(1773383050.463:407): avc: denied { read } for pid=5164 comm="acpid" name="event4" dev="devtmpfs" ino=3329 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.890466][ T30] audit: type=1400 audit(1773383050.463:408): avc: denied { open } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3329 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.914049][ T30] audit: type=1400 audit(1773383050.463:409): avc: denied { ioctl } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3329 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.024791][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.033126][ T29] usb 1-1: config 0 has no interface number 0 [ 351.056694][ T29] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.079481][ T29] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.099831][ T29] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.128437][ T29] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 351.151735][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.191592][ T29] usb 1-1: config 0 descriptor?? [ 351.286885][T10425] lo speed is unknown, defaulting to 1000 [ 351.697331][ T1212] usb 2-1: USB disconnect, device number 46 [ 351.844915][ T29] usbhid 1-1:0.1: can't add hid device: -71 [ 351.850942][ T29] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 351.876258][T10431] netlink: 'syz.1.1203': attribute type 7 has an invalid length. [ 351.884950][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1203'. [ 351.894023][ T29] usb 1-1: USB disconnect, device number 54 [ 351.999625][T10438] netlink: 'syz.7.1205': attribute type 1 has an invalid length. [ 352.008149][T10438] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1205'. [ 352.021659][T10440] FAULT_INJECTION: forcing a failure. [ 352.021659][T10440] name failslab, interval 1, probability 0, space 0, times 0 [ 352.072443][T10440] CPU: 1 UID: 0 PID: 10440 Comm: syz.1.1206 Not tainted syzkaller #0 PREEMPT(full) [ 352.072472][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 352.072482][T10440] Call Trace: [ 352.072488][T10440] [ 352.072494][T10440] dump_stack_lvl+0x100/0x190 [ 352.072527][T10440] should_fail_ex.cold+0x5/0xa [ 352.072552][T10440] should_failslab+0xc2/0x120 [ 352.072571][T10440] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 352.072596][T10440] ? skb_clone+0x190/0x400 [ 352.072623][T10440] skb_clone+0x190/0x400 [ 352.072646][T10440] netlink_deliver_tap+0xaed/0xcc0 [ 352.072674][T10440] netlink_unicast+0x650/0x870 [ 352.072702][T10440] ? __pfx_netlink_unicast+0x10/0x10 [ 352.072735][T10440] netlink_sendmsg+0x8b0/0xda0 [ 352.072763][T10440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.072786][T10440] ? __might_fault+0xc0/0x140 [ 352.072819][T10440] ____sys_sendmsg+0x9e1/0xb70 [ 352.072842][T10440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.072865][T10440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.072904][T10440] ___sys_sendmsg+0x190/0x1e0 [ 352.072933][T10440] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.072987][T10440] __sys_sendmsg+0x170/0x220 [ 352.073008][T10440] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.073042][T10440] do_syscall_64+0x106/0xf80 [ 352.073064][T10440] ? clear_bhb_loop+0x40/0x90 [ 352.073085][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.073103][T10440] RIP: 0033:0x7ff2d6d9c799 [ 352.073119][T10440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.073135][T10440] RSP: 002b:00007ff2d7cc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.073153][T10440] RAX: ffffffffffffffda RBX: 00007ff2d7015fa0 RCX: 00007ff2d6d9c799 [ 352.073170][T10440] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 352.073180][T10440] RBP: 00007ff2d7cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 352.073191][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.073201][T10440] R13: 00007ff2d7016038 R14: 00007ff2d7015fa0 R15: 00007ffd6325f7a8 [ 352.073226][T10440] [ 352.299674][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'. [ 353.575542][ T30] audit: type=1400 audit(1773383053.173:410): avc: denied { create } for pid=10461 comm="syz.5.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 353.706833][T10465] netlink: 'syz.5.1213': attribute type 9 has an invalid length. [ 353.715963][T10465] netlink: 'syz.5.1213': attribute type 7 has an invalid length. [ 353.723861][T10465] netlink: 'syz.5.1213': attribute type 8 has an invalid length. [ 355.363297][T10470] ALSA: mixer_oss: invalid OSS volume '' [ 355.381578][T10474] syz.5.1215 (10474) used greatest stack depth: 19296 bytes left [ 355.826410][ T30] audit: type=1400 audit(1773383054.773:411): avc: denied { connect } for pid=10470 comm="syz.5.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.942619][ T30] audit: type=1400 audit(1773383054.823:412): avc: denied { firmware_load } for pid=10470 comm="syz.5.1215" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 356.335967][T10480] lo speed is unknown, defaulting to 1000 [ 356.395053][ T30] audit: type=1400 audit(1773383056.003:413): avc: denied { recv } for pid=10481 comm="syz.7.1219" saddr=10.128.0.169 src=37210 daddr=10.128.0.14 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 356.576100][ T30] audit: type=1400 audit(1773383056.183:414): avc: denied { write } for pid=10496 comm="syz.7.1224" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 356.736148][T10502] fuse: blksize only supported for fuseblk [ 356.793138][ T1212] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 357.105149][ T1212] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.129498][ T1212] usb 1-1: config 0 has no interface number 0 [ 357.136095][ T1212] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.152095][ T1212] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.180452][ T1212] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.207871][T10507] FAULT_INJECTION: forcing a failure. [ 357.207871][T10507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.399333][T10507] CPU: 0 UID: 0 PID: 10507 Comm: syz.8.1226 Not tainted syzkaller #0 PREEMPT(full) [ 357.399362][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 357.399371][T10507] Call Trace: [ 357.399377][T10507] [ 357.399384][T10507] dump_stack_lvl+0x100/0x190 [ 357.399421][T10507] should_fail_ex.cold+0x5/0xa [ 357.399443][T10507] _copy_from_user+0x2e/0xd0 [ 357.399470][T10507] do_insn_ioctl+0x34f/0x4e0 [ 357.399491][T10507] comedi_unlocked_ioctl+0xf68/0x3310 [ 357.399510][T10507] ? tomoyo_path_number_perm+0x188/0x580 [ 357.399537][T10507] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 357.399563][T10507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.399592][T10507] ? do_vfs_ioctl+0x226/0x13e0 [ 357.399620][T10507] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 357.399647][T10507] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 357.399681][T10507] ? __fget_files+0x215/0x3d0 [ 357.399699][T10507] ? hook_file_ioctl_common+0x146/0x410 [ 357.399744][T10507] ? selinux_file_ioctl+0x139/0x290 [ 357.399766][T10507] ? selinux_file_ioctl+0xb4/0x290 [ 357.399791][T10507] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 357.399811][T10507] __x64_sys_ioctl+0x18e/0x210 [ 357.399839][T10507] do_syscall_64+0x106/0xf80 [ 357.399862][T10507] ? clear_bhb_loop+0x40/0x90 [ 357.399884][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.399903][T10507] RIP: 0033:0x7f5e4e99c799 [ 357.399919][T10507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.399935][T10507] RSP: 002b:00007f5e4f81f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.399952][T10507] RAX: ffffffffffffffda RBX: 00007f5e4ec15fa0 RCX: 00007f5e4e99c799 [ 357.399963][T10507] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 357.399973][T10507] RBP: 00007f5e4f81f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.399983][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.399993][T10507] R13: 00007f5e4ec16038 R14: 00007f5e4ec15fa0 R15: 00007ffd35e50a68 [ 357.400019][T10507] [ 357.608161][ T1212] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 357.617394][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.628113][ T1212] usb 1-1: config 0 descriptor?? [ 358.376504][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1227'. [ 358.408226][ T30] audit: type=1400 audit(1773383057.973:415): avc: denied { bind } for pid=10512 comm="syz.8.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.487380][ T30] audit: type=1400 audit(1773383057.973:416): avc: denied { setopt } for pid=10512 comm="syz.8.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.507343][ T1212] usbhid 1-1:0.1: can't add hid device: -71 [ 358.513357][ T1212] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 358.535257][ T1212] usb 1-1: USB disconnect, device number 55 [ 358.562327][T10521] FAULT_INJECTION: forcing a failure. [ 358.562327][T10521] name failslab, interval 1, probability 0, space 0, times 0 [ 358.610801][T10521] CPU: 1 UID: 0 PID: 10521 Comm: syz.5.1230 Not tainted syzkaller #0 PREEMPT(full) [ 358.610826][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 358.610835][T10521] Call Trace: [ 358.610839][T10521] [ 358.610844][T10521] dump_stack_lvl+0x100/0x190 [ 358.610866][T10521] should_fail_ex.cold+0x5/0xa [ 358.610881][T10521] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 358.610899][T10521] should_failslab+0xc2/0x120 [ 358.610910][T10521] __kmalloc_noprof+0xe0/0x850 [ 358.610928][T10521] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 358.610948][T10521] genl_family_rcv_msg_doit+0xc7/0x300 [ 358.610966][T10521] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.610987][T10521] ? bpf_lsm_capable+0x9/0x10 [ 358.610998][T10521] ? security_capable+0x80/0x260 [ 358.611015][T10521] genl_rcv_msg+0x560/0x800 [ 358.611033][T10521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.611050][T10521] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 358.611067][T10521] ? __lock_acquire+0x4a5/0x2630 [ 358.611086][T10521] netlink_rcv_skb+0x159/0x420 [ 358.611101][T10521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.611118][T10521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.611139][T10521] ? netlink_deliver_tap+0x1ae/0xcc0 [ 358.611155][T10521] genl_rcv+0x28/0x40 [ 358.611169][T10521] netlink_unicast+0x5aa/0x870 [ 358.611186][T10521] ? __pfx_netlink_unicast+0x10/0x10 [ 358.611207][T10521] netlink_sendmsg+0x8b0/0xda0 [ 358.611224][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.611238][T10521] ? __might_fault+0xc0/0x140 [ 358.611257][T10521] ____sys_sendmsg+0x9e1/0xb70 [ 358.611273][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.611290][T10521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.611313][T10521] ___sys_sendmsg+0x190/0x1e0 [ 358.611330][T10521] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.611364][T10521] __sys_sendmsg+0x170/0x220 [ 358.611378][T10521] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.611400][T10521] do_syscall_64+0x106/0xf80 [ 358.611412][T10521] ? clear_bhb_loop+0x40/0x90 [ 358.611426][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.611437][T10521] RIP: 0033:0x7f88bfd9c799 [ 358.611447][T10521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.611457][T10521] RSP: 002b:00007f88c0c69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.611469][T10521] RAX: ffffffffffffffda RBX: 00007f88c0015fa0 RCX: 00007f88bfd9c799 [ 358.611475][T10521] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 358.611481][T10521] RBP: 00007f88c0c69090 R08: 0000000000000000 R09: 0000000000000000 [ 358.611487][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.611493][T10521] R13: 00007f88c0016038 R14: 00007f88c0015fa0 R15: 00007ffe0b1cced8 [ 358.611507][T10521] [ 358.896748][ T30] audit: type=1400 audit(1773383058.503:417): avc: denied { bind } for pid=10522 comm="syz.1.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 358.916155][ T30] audit: type=1400 audit(1773383058.503:418): avc: denied { ioctl } for pid=10522 comm="syz.1.1231" path="socket:[28036]" dev="sockfs" ino=28036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.043730][ T30] audit: type=1400 audit(1773383058.643:419): avc: denied { ioctl } for pid=10522 comm="syz.1.1231" path="socket:[28043]" dev="sockfs" ino=28043 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 359.083814][ T30] audit: type=1400 audit(1773383058.643:420): avc: denied { connect } for pid=10522 comm="syz.1.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 359.111293][T10526] dvmrp9: entered allmulticast mode [ 359.202168][ T30] audit: type=1400 audit(1773383058.803:421): avc: denied { read write } for pid=10533 comm="syz.5.1234" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 359.260674][ T30] audit: type=1400 audit(1773383058.803:422): avc: denied { open } for pid=10533 comm="syz.5.1234" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.311390][T10542] lo speed is unknown, defaulting to 1000 [ 361.267862][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 361.548907][ T5872] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 361.589549][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 361.985916][ T30] audit: type=1400 audit(1773383061.193:423): avc: denied { read write } for pid=10563 comm="syz.1.1241" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 362.070360][ T30] audit: type=1400 audit(1773383061.193:424): avc: denied { open } for pid=10563 comm="syz.1.1241" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 362.195141][ T5872] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.203701][ T5872] usb 8-1: config 0 has no interface number 0 [ 362.263343][ T5872] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.314025][ T5872] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.341145][ T5872] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.354447][ T5872] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 362.363526][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.451495][ T5872] usb 8-1: config 0 descriptor?? [ 362.528234][ T30] audit: type=1400 audit(1773383062.133:425): avc: denied { append } for pid=10580 comm="syz.5.1245" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 362.894952][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 363.073108][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 363.085720][ T5872] usbhid 8-1:0.1: can't add hid device: -71 [ 363.100966][ T5872] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 363.111822][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 363.137486][ T5872] usb 8-1: USB disconnect, device number 6 [ 363.149948][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.186833][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.219624][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.266463][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.320218][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.345540][T10585] netlink: 'syz.8.1248': attribute type 1 has an invalid length. [ 363.357455][T10585] netlink: 760 bytes leftover after parsing attributes in process `syz.8.1248'. [ 363.357472][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.379872][T10585] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1248'. [ 363.458015][ T30] audit: type=1400 audit(1773383063.063:426): avc: denied { ioctl } for pid=10588 comm="syz.8.1249" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 363.633191][ T10] usb 6-1: usb_control_msg returned -32 [ 363.638803][ T10] usbtmc 6-1:16.0: can't read capabilities [ 363.700774][T10596] lo speed is unknown, defaulting to 1000 [ 363.840422][T10606] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 363.887009][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1250'. [ 363.970755][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 363.970772][ T30] audit: type=1400 audit(1773383063.573:430): avc: denied { append } for pid=10582 comm="syz.5.1246" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 364.121961][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.147403][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.591317][T10615] syzkaller0: entered promiscuous mode [ 364.596901][T10615] syzkaller0: entered allmulticast mode [ 365.014640][ T30] audit: type=1400 audit(1773383064.623:431): avc: denied { mounton } for pid=10621 comm="syz.1.1257" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 365.014709][T10622] 9p: Bad value for 'rfdno' [ 365.139663][ T30] audit: type=1400 audit(1773383064.743:432): avc: denied { mount } for pid=10621 comm="syz.1.1257" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 365.148778][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1257'. [ 365.400246][T10629] io-wq is not configured for unbound workers [ 365.569690][ T30] audit: type=1400 audit(1773383065.033:433): avc: denied { create } for pid=10625 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 365.715348][ T30] audit: type=1400 audit(1773383065.033:434): avc: denied { sys_admin } for pid=10625 comm="syz.1.1259" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 365.863110][ T30] audit: type=1400 audit(1773383065.403:435): avc: denied { map } for pid=10631 comm="syz.7.1260" path="socket:[28870]" dev="sockfs" ino=28870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 365.900766][ T30] audit: type=1400 audit(1773383065.403:436): avc: denied { accept } for pid=10631 comm="syz.7.1260" path="socket:[28870]" dev="sockfs" ino=28870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 365.967276][ T29] usb 6-1: USB disconnect, device number 10 [ 366.063662][T10635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1261'. [ 366.096399][T10635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1261'. [ 366.313773][T10642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.331006][T10642] FAULT_INJECTION: forcing a failure. [ 366.331006][T10642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.344319][T10642] CPU: 0 UID: 0 PID: 10642 Comm: syz.0.1263 Not tainted syzkaller #0 PREEMPT(full) [ 366.344343][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 366.344353][T10642] Call Trace: [ 366.344359][T10642] [ 366.344365][T10642] dump_stack_lvl+0x100/0x190 [ 366.344398][T10642] should_fail_ex.cold+0x5/0xa [ 366.344417][T10642] _copy_from_user+0x2e/0xd0 [ 366.344443][T10642] sk_setsockopt+0x2ee/0x5230 [ 366.344469][T10642] ? __pfx_sk_setsockopt+0x10/0x10 [ 366.344491][T10642] ? __schedule+0x1000/0x6120 [ 366.344526][T10642] ? __pfx___schedule+0x10/0x10 [ 366.344550][T10642] mptcp_setsockopt+0x1cd5/0x3370 [ 366.344580][T10642] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 366.344615][T10642] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 366.344642][T10642] ? sock_common_setsockopt+0x2e/0xf0 [ 366.344666][T10642] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 366.344694][T10642] do_sock_setsockopt+0xf3/0x1d0 [ 366.344722][T10642] __sys_setsockopt+0x195/0x220 [ 366.344747][T10642] __x64_sys_setsockopt+0xbd/0x160 [ 366.344767][T10642] ? do_syscall_64+0x9b/0xf80 [ 366.344790][T10642] do_syscall_64+0x106/0xf80 [ 366.344811][T10642] ? clear_bhb_loop+0x40/0x90 [ 366.344832][T10642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.344849][T10642] RIP: 0033:0x7f886b99c799 [ 366.344862][T10642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.344876][T10642] RSP: 002b:00007f8869bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 366.344892][T10642] RAX: ffffffffffffffda RBX: 00007f886bc16090 RCX: 00007f886b99c799 [ 366.344902][T10642] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000003 [ 366.344911][T10642] RBP: 00007f8869bf6090 R08: 0000000000000004 R09: 0000000000000000 [ 366.344921][T10642] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 366.344930][T10642] R13: 00007f886bc16128 R14: 00007f886bc16090 R15: 00007fff524d11b8 [ 366.344954][T10642] [ 366.956904][T10645] lo speed is unknown, defaulting to 1000 [ 367.234762][ T29] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 367.467659][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 367.467679][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 367.475201][ T29] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.512826][ T29] usb 2-1: config 0 has no interface number 0 [ 367.523000][ T29] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 367.532344][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.540487][ T29] usb 2-1: Product: syz [ 367.544918][ T29] usb 2-1: Manufacturer: syz [ 367.549581][ T29] usb 2-1: SerialNumber: syz [ 367.565733][ T29] usb 2-1: config 0 descriptor?? [ 367.597468][ T29] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 367.622574][ T29] usb 2-1: selecting invalid altsetting 1 [ 367.630389][ T29] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 367.642658][ T29] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 367.661320][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 367.672094][ T29] usb 2-1: media controller created [ 367.683080][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 367.690132][ T10] usb 6-1: config 0 has no interfaces? [ 367.690239][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.697039][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 367.788478][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.846673][ T10] usb 6-1: config 0 descriptor?? [ 368.146981][T10661] FAULT_INJECTION: forcing a failure. [ 368.146981][T10661] name failslab, interval 1, probability 0, space 0, times 0 [ 368.159860][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.5.1269 Not tainted syzkaller #0 PREEMPT(full) [ 368.159875][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 368.159881][T10661] Call Trace: [ 368.159886][T10661] [ 368.159891][T10661] dump_stack_lvl+0x100/0x190 [ 368.159913][T10661] should_fail_ex.cold+0x5/0xa [ 368.159927][T10661] ? drm_atomic_state_init+0xf4/0x490 [ 368.159938][T10661] should_failslab+0xc2/0x120 [ 368.159951][T10661] __kmalloc_noprof+0xe0/0x850 [ 368.159969][T10661] drm_atomic_state_init+0xf4/0x490 [ 368.159979][T10661] ? kasan_save_track+0x14/0x30 [ 368.159996][T10661] drm_atomic_state_alloc+0xd3/0x120 [ 368.160007][T10661] drm_mode_atomic_ioctl+0x395/0x2680 [ 368.160021][T10661] ? avc_has_extended_perms+0x33a/0x1080 [ 368.160042][T10661] ? avc_has_extended_perms+0x484/0x1080 [ 368.160060][T10661] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 368.160072][T10661] ? __lock_acquire+0x4a5/0x2630 [ 368.160098][T10661] ? drm_is_current_master+0x2c/0x40 [ 368.160109][T10661] ? drm_is_current_master+0x2c/0x40 [ 368.160122][T10661] ? do_raw_spin_unlock+0x145/0x1e0 [ 368.160136][T10661] drm_ioctl_kernel+0x1f3/0x3e0 [ 368.160145][T10661] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 368.160158][T10661] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 368.160172][T10661] drm_ioctl+0x5e6/0xc60 [ 368.160184][T10661] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 368.160196][T10661] ? __pfx_drm_ioctl+0x10/0x10 [ 368.160211][T10661] ? selinux_file_ioctl+0x139/0x290 [ 368.160225][T10661] ? selinux_file_ioctl+0xb4/0x290 [ 368.160240][T10661] ? __pfx_drm_ioctl+0x10/0x10 [ 368.160250][T10661] __x64_sys_ioctl+0x18e/0x210 [ 368.160267][T10661] do_syscall_64+0x106/0xf80 [ 368.160280][T10661] ? clear_bhb_loop+0x40/0x90 [ 368.160293][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.160303][T10661] RIP: 0033:0x7f88bfd9c799 [ 368.160314][T10661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.160324][T10661] RSP: 002b:00007f88c0c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.160336][T10661] RAX: ffffffffffffffda RBX: 00007f88c0015fa0 RCX: 00007f88bfd9c799 [ 368.160342][T10661] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000016 [ 368.160348][T10661] RBP: 00007f88c0c69090 R08: 0000000000000000 R09: 0000000000000000 [ 368.160354][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.160360][T10661] R13: 00007f88c0016038 R14: 00007f88c0015fa0 R15: 00007ffe0b1cced8 [ 368.160373][T10661] [ 368.496795][ T10] usb 6-1: USB disconnect, device number 11 [ 368.560145][T10668] FAULT_INJECTION: forcing a failure. [ 368.560145][T10668] name failslab, interval 1, probability 0, space 0, times 0 [ 368.574218][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.8.1271 Not tainted syzkaller #0 PREEMPT(full) [ 368.574244][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 368.574255][T10668] Call Trace: [ 368.574261][T10668] [ 368.574267][T10668] dump_stack_lvl+0x100/0x190 [ 368.574300][T10668] should_fail_ex.cold+0x5/0xa [ 368.574321][T10668] should_failslab+0xc2/0x120 [ 368.574338][T10668] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 368.574358][T10668] ? security_file_alloc+0x34/0x2c0 [ 368.574373][T10668] ? trace_kmem_cache_alloc+0xf3/0x120 [ 368.574391][T10668] security_file_alloc+0x34/0x2c0 [ 368.574414][T10668] init_file+0x95/0x480 [ 368.574433][T10668] alloc_empty_file+0x73/0x1c0 [ 368.574454][T10668] path_openat+0xe8/0x31a0 [ 368.574470][T10668] ? kasan_save_stack+0x3f/0x50 [ 368.574484][T10668] ? kasan_save_stack+0x30/0x50 [ 368.574498][T10668] ? kasan_save_track+0x14/0x30 [ 368.574513][T10668] ? __kasan_slab_alloc+0x89/0x90 [ 368.574528][T10668] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 368.574549][T10668] ? do_getname+0x35/0x390 [ 368.574575][T10668] ? do_sys_openat2+0xc5/0x1e0 [ 368.574595][T10668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.574613][T10668] ? __pfx_path_openat+0x10/0x10 [ 368.574629][T10668] do_file_open+0x20e/0x430 [ 368.574641][T10668] ? __pfx_do_file_open+0x10/0x10 [ 368.574662][T10668] ? alloc_fd+0x476/0x790 [ 368.574677][T10668] ? do_getname+0x191/0x390 [ 368.574700][T10668] do_sys_openat2+0x10d/0x1e0 [ 368.574719][T10668] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.574743][T10668] ? ksys_write+0x1a2/0x250 [ 368.574763][T10668] ? ksys_write+0x20e/0x250 [ 368.574780][T10668] __x64_sys_openat+0x12d/0x210 [ 368.574793][T10668] ? __pfx___x64_sys_openat+0x10/0x10 [ 368.574806][T10668] ? ksys_write+0x1ac/0x250 [ 368.574831][T10668] do_syscall_64+0x106/0xf80 [ 368.574852][T10668] ? clear_bhb_loop+0x40/0x90 [ 368.574872][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.574888][T10668] RIP: 0033:0x7f5e4e95cfce [ 368.574902][T10668] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.574912][T10668] RSP: 002b:00007f5e4f7fdb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.574923][T10668] RAX: ffffffffffffffda RBX: 00007f5e4f7fe6c0 RCX: 00007f5e4e95cfce [ 368.574929][T10668] RDX: 0000000000189802 RSI: 00007f5e4f7fdc00 RDI: ffffffffffffff9c [ 368.574935][T10668] RBP: 00007f5e4f7fdc00 R08: 0000000000000000 R09: 0000000000000000 [ 368.574941][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 368.574947][T10668] R13: 00007f5e4ec16128 R14: 00007f5e4ec16090 R15: 00007ffd35e50a68 [ 368.574961][T10668] [ 368.921506][ T29] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 369.199318][T10670] 9p: Bad value for 'rfdno' [ 369.252576][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 369.304281][T10649] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 369.525332][ T29] usb 2-1: USB disconnect, device number 47 [ 370.103098][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 370.227198][ T30] audit: type=1400 audit(1773383069.833:437): avc: denied { bind } for pid=10685 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.291085][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.300396][ T24] usb 1-1: config 0 has no interface number 0 [ 370.340500][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.352222][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.404265][ T1212] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 370.481884][ T24] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.643316][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 370.665377][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.690317][ T24] usb 1-1: config 0 descriptor?? [ 370.695359][ T1212] usb 6-1: device descriptor read/64, error -71 [ 370.877635][ T30] audit: type=1400 audit(1773383070.483:438): avc: denied { read append } for pid=10695 comm="syz.7.1278" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 370.933235][ T1212] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 370.933649][ T30] audit: type=1400 audit(1773383070.483:439): avc: denied { open } for pid=10695 comm="syz.7.1278" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 371.031358][ T30] audit: type=1400 audit(1773383070.623:440): avc: denied { write } for pid=10695 comm="syz.7.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.167104][ T1212] usb 6-1: device descriptor read/64, error -71 [ 371.294348][ T1212] usb usb6-port1: attempt power cycle [ 371.326884][ T24] usbhid 1-1:0.1: can't add hid device: -71 [ 371.333645][ T24] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 371.344298][ T24] usb 1-1: USB disconnect, device number 56 [ 371.633161][ T1212] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 371.663463][ T1212] usb 6-1: device descriptor read/8, error -71 [ 371.708741][T10696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.716188][T10696] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 371.726963][T10696] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.733101][T10696] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 371.741525][T10696] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.747937][T10696] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 371.756992][T10696] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 371.765366][T10696] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 371.771354][T10696] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 371.779931][T10696] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 371.787104][T10696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.794008][T10696] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 371.800670][T10696] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 371.919886][ T1212] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 371.926386][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1280'. [ 371.987946][ T1212] usb 6-1: device descriptor read/8, error -71 [ 372.081398][T10703] capability: warning: `syz.7.1280' uses 32-bit capabilities (legacy support in use) [ 372.091928][ T5864] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 372.096229][ T30] audit: type=1400 audit(1773383071.653:441): avc: denied { read } for pid=10701 comm="syz.7.1280" path="socket:[30116]" dev="sockfs" ino=30116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 372.152052][ T1212] usb usb6-port1: unable to enumerate USB device [ 372.158917][ T30] audit: type=1400 audit(1773383071.763:442): avc: denied { setopt } for pid=10701 comm="syz.7.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 372.327432][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 372.334079][ T5864] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 372.342368][ T5864] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.347126][T10705] lo speed is unknown, defaulting to 1000 [ 372.358045][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.371573][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.381917][ T5864] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.398375][ T5864] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.420797][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.818246][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1282'. [ 372.827435][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1282'. [ 373.027086][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1284'. [ 373.044846][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 373.184520][T10727] /dev/nullb0: Can't open blockdev [ 373.198729][ T30] audit: type=1400 audit(1773383072.803:443): avc: denied { ioctl } for pid=10699 comm="syz.1.1279" path="socket:[30153]" dev="sockfs" ino=30153 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.229229][T10728] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 373.238451][ T1212] usb 2-1: USB disconnect, device number 48 [ 373.357171][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.364831][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.573145][ T5864] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 373.763121][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 373.764778][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.775448][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 373.786580][ T5864] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 373.801039][ T5864] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 373.835731][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 373.841799][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.934948][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 373.936197][ T5864] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 373.963061][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 373.979931][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.979944][ T10] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 373.989753][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.007257][ T10] usb 9-1: Product: syz [ 374.012091][ T10] usb 9-1: Manufacturer: syz [ 374.017046][ T10] usb 9-1: SerialNumber: syz [ 374.034607][ T10] usb 9-1: config 0 descriptor?? [ 374.041949][ T5864] usb 6-1: Product: syz [ 374.046585][T10732] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 374.054239][T10732] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 374.065204][ T5864] usb 6-1: Manufacturer: syz [ 374.069826][ T5864] usb 6-1: SerialNumber: syz [ 374.095027][ T5864] usb 6-1: config 0 descriptor?? [ 374.101632][T10725] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.113701][T10725] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.149774][T10738] netlink: 'syz.7.1289': attribute type 14 has an invalid length. [ 374.202624][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 374.227580][T10740] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1290'. [ 374.238004][ T30] audit: type=1400 audit(1773383073.843:444): avc: denied { bind } for pid=10739 comm="syz.0.1290" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.261859][ T30] audit: type=1400 audit(1773383073.843:445): avc: denied { name_bind } for pid=10739 comm="syz.0.1290" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 374.297501][ T30] audit: type=1400 audit(1773383073.843:446): avc: denied { node_bind } for pid=10739 comm="syz.0.1290" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 374.305914][T10732] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 374.333544][T10732] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 374.357825][T10725] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.370002][T10725] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.422590][T10742] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 374.431758][T10742] overlayfs: missing 'lowerdir' [ 374.750817][ T10] Error reading MAC address [ 374.773323][ T10] usb 9-1: USB disconnect, device number 3 [ 374.789598][ T5864] Error reading MAC address [ 374.803822][ T5864] usb 6-1: USB disconnect, device number 16 [ 374.895757][T10750] lo speed is unknown, defaulting to 1000 [ 375.113153][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 375.213024][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 375.426928][T10759] FAULT_INJECTION: forcing a failure. [ 375.426928][T10759] name failslab, interval 1, probability 0, space 0, times 0 [ 375.439816][T10759] CPU: 0 UID: 0 PID: 10759 Comm: syz.0.1297 Not tainted syzkaller #0 PREEMPT(full) [ 375.439836][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 375.439844][T10759] Call Trace: [ 375.439849][T10759] [ 375.439861][T10759] dump_stack_lvl+0x100/0x190 [ 375.439891][T10759] should_fail_ex.cold+0x5/0xa [ 375.439908][T10759] should_failslab+0xc2/0x120 [ 375.439921][T10759] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 375.439937][T10759] ? batadv_tt_local_event+0x57/0x7f0 [ 375.439959][T10759] batadv_tt_local_event+0x57/0x7f0 [ 375.439976][T10759] ? rcu_is_watching+0x12/0xc0 [ 375.439989][T10759] ? __local_bh_enable_ip+0x9e/0x120 [ 375.440005][T10759] batadv_tt_local_add+0x626/0x1f90 [ 375.440018][T10759] ? __skb_flow_dissect+0x1d2c/0x6bf0 [ 375.440034][T10759] ? __x64_sys_sendto+0xe0/0x1c0 [ 375.440049][T10759] ? __pfx_batadv_tt_local_add+0x10/0x10 [ 375.440060][T10759] ? __skb_get_hash_net+0x153/0x560 [ 375.440077][T10759] ? __pfx___skb_get_hash_net+0x10/0x10 [ 375.440092][T10759] ? batadv_get_vid+0xc2/0x290 [ 375.440107][T10759] batadv_interface_tx+0x5aa/0x1c10 [ 375.440125][T10759] ? __pfx_batadv_interface_tx+0x10/0x10 [ 375.440142][T10759] ? dev_queue_xmit_nit+0x731/0xa60 [ 375.440159][T10759] dev_hard_start_xmit+0x121/0x7d0 [ 375.440179][T10759] __dev_queue_xmit+0x32c1/0x4800 [ 375.440199][T10759] ? find_held_lock+0x2b/0x80 [ 375.440212][T10759] ? __might_fault+0xc5/0x140 [ 375.440227][T10759] ? __pfx___dev_queue_xmit+0x10/0x10 [ 375.440246][T10759] ? _copy_from_iter+0x270/0x1690 [ 375.440260][T10759] ? __pfx__copy_from_iter+0x10/0x10 [ 375.440269][T10759] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 375.440286][T10759] ? packet_parse_headers+0x5ae/0x800 [ 375.440301][T10759] ? __asan_memset+0x23/0x50 [ 375.440313][T10759] ? packet_parse_headers+0x5ba/0x800 [ 375.440329][T10759] ? packet_parse_headers+0x205/0x800 [ 375.440345][T10759] ? __pfx_packet_parse_headers+0x10/0x10 [ 375.440363][T10759] packet_xmit+0x243/0x310 [ 375.440381][T10759] packet_sendmsg+0x32f4/0x53c0 [ 375.440398][T10759] ? avc_has_perm+0xf0/0x1e0 [ 375.440414][T10759] ? sock_has_perm+0x258/0x2f0 [ 375.440425][T10759] ? __pfx_sock_has_perm+0x10/0x10 [ 375.440438][T10759] ? __pfx_packet_sendmsg+0x10/0x10 [ 375.440462][T10759] __sys_sendto+0x468/0x4b0 [ 375.440473][T10759] ? __pfx_packet_sendmsg+0x10/0x10 [ 375.440489][T10759] ? __pfx___sys_sendto+0x10/0x10 [ 375.440510][T10759] ? ksys_write+0x1ac/0x250 [ 375.440526][T10759] ? __pfx_ksys_write+0x10/0x10 [ 375.440544][T10759] __x64_sys_sendto+0xe0/0x1c0 [ 375.440555][T10759] ? do_syscall_64+0x95/0xf80 [ 375.440568][T10759] ? lockdep_hardirqs_on+0x78/0x100 [ 375.440581][T10759] do_syscall_64+0x106/0xf80 [ 375.440593][T10759] ? clear_bhb_loop+0x40/0x90 [ 375.440607][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.440618][T10759] RIP: 0033:0x7f886b99c799 [ 375.440628][T10759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.440639][T10759] RSP: 002b:00007f886c773028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 375.440649][T10759] RAX: ffffffffffffffda RBX: 00007f886bc15fa0 RCX: 00007f886b99c799 [ 375.440656][T10759] RDX: 0000000000000024 RSI: 0000200000000600 RDI: 0000000000000003 [ 375.440662][T10759] RBP: 00007f886c773090 R08: 0000200000000200 R09: 0000000000000014 [ 375.440668][T10759] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 375.440674][T10759] R13: 00007f886bc16038 R14: 00007f886bc15fa0 R15: 00007fff524d11b8 [ 375.440687][T10759] [ 375.833146][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.833159][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 375.933259][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.933279][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 375.953068][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 375.962237][ T10] usb 2-1: config 0 has no interfaces? [ 375.969045][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.978097][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.986075][ T10] usb 2-1: Manufacturer: syz [ 375.994432][ T10] usb 2-1: config 0 descriptor?? [ 377.437254][T10766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10766 comm=syz.7.1298 [ 377.684122][T10778] FAULT_INJECTION: forcing a failure. [ 377.684122][T10778] name failslab, interval 1, probability 0, space 0, times 0 [ 377.701956][T10782] smc: net device hsr0 applied user defined pnetid SYZ2 [ 377.747568][T10778] CPU: 0 UID: 0 PID: 10778 Comm: syz.8.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.747602][T10778] Tainted: [L]=SOFTLOCKUP [ 377.747608][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 377.747619][T10778] Call Trace: [ 377.747625][T10778] [ 377.747633][T10778] dump_stack_lvl+0x100/0x190 [ 377.747666][T10778] should_fail_ex.cold+0x5/0xa [ 377.747689][T10778] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 377.747718][T10778] should_failslab+0xc2/0x120 [ 377.747737][T10778] __kmalloc_noprof+0xe0/0x850 [ 377.747767][T10778] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 377.747797][T10778] ? cred_has_capability.isra.0+0x186/0x300 [ 377.747825][T10778] genl_family_rcv_msg_doit+0xc7/0x300 [ 377.747855][T10778] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 377.747890][T10778] ? bpf_lsm_capable+0x9/0x10 [ 377.747907][T10778] ? security_capable+0x80/0x260 [ 377.747928][T10778] ? ns_capable+0xd2/0xf0 [ 377.747952][T10778] genl_rcv_msg+0x560/0x800 [ 377.747982][T10778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.748010][T10778] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 377.748028][T10778] ? __pfx_nl80211_tdls_mgmt+0x10/0x10 [ 377.748054][T10778] ? __pfx_nl80211_post_doit+0x10/0x10 [ 377.748082][T10778] netlink_rcv_skb+0x159/0x420 [ 377.748107][T10778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.748135][T10778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.748170][T10778] ? netlink_deliver_tap+0x1ae/0xcc0 [ 377.748198][T10778] genl_rcv+0x28/0x40 [ 377.748223][T10778] netlink_unicast+0x5aa/0x870 [ 377.748251][T10778] ? __pfx_netlink_unicast+0x10/0x10 [ 377.748286][T10778] netlink_sendmsg+0x8b0/0xda0 [ 377.748315][T10778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.748337][T10778] ? __might_fault+0xc0/0x140 [ 377.748402][T10778] ____sys_sendmsg+0x9e1/0xb70 [ 377.748431][T10778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.748458][T10778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.748497][T10778] ___sys_sendmsg+0x190/0x1e0 [ 377.748526][T10778] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.748584][T10778] __sys_sendmsg+0x170/0x220 [ 377.748607][T10778] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.748644][T10778] do_syscall_64+0x106/0xf80 [ 377.748666][T10778] ? clear_bhb_loop+0x40/0x90 [ 377.748688][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.748706][T10778] RIP: 0033:0x7f5e4e99c799 [ 377.748722][T10778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.748739][T10778] RSP: 002b:00007f5e4f81f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.748757][T10778] RAX: ffffffffffffffda RBX: 00007f5e4ec15fa0 RCX: 00007f5e4e99c799 [ 377.748768][T10778] RDX: 0000000020004000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 377.748779][T10778] RBP: 00007f5e4f81f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.748789][T10778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.748799][T10778] R13: 00007f5e4ec16038 R14: 00007f5e4ec15fa0 R15: 00007ffd35e50a68 [ 377.748824][T10778] [ 378.059941][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.059974][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 378.060017][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.610368][ T5857] usb 2-1: USB disconnect, device number 49 [ 378.783938][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 378.956440][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 378.984174][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 378.984191][ T30] audit: type=1400 audit(1773383078.583:449): avc: denied { connect } for pid=10802 comm="syz.5.1310" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.010764][ T5857] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 379.018800][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.035906][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.047990][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.058390][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.068136][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.104006][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 379.113891][ T10] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 379.122032][ T10] usb 9-1: Manufacturer: syz [ 379.132496][ T10] usb 9-1: config 0 descriptor?? [ 379.183066][ T5857] usb 8-1: Using ep0 maxpacket: 32 [ 379.206432][ T30] audit: type=1400 audit(1773383078.813:450): avc: denied { accept } for pid=10802 comm="syz.5.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 379.263357][ T5857] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 379.288078][ T5857] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 379.303512][ T5857] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 379.312827][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.323310][ T5857] usb 8-1: Product: syz [ 379.333339][ T5857] usb 8-1: Manufacturer: syz [ 379.338204][ T5857] usb 8-1: SerialNumber: syz [ 379.396481][ T5857] usb 8-1: config 0 descriptor?? [ 379.494790][ T5857] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input26 [ 379.805485][ T10] rc_core: IR keymap rc-hauppauge not found [ 379.811465][ T10] Registered IR keymap rc-empty [ 379.830586][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 379.853402][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 379.879742][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 379.893923][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input27 [ 379.928843][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 379.957669][ C0] rc rc0: IR event FIFO is full! [ 379.962636][ C0] rc rc0: IR event FIFO is full! [ 379.967566][ C0] rc rc0: IR event FIFO is full! [ 379.972512][ C0] rc rc0: IR event FIFO is full! [ 379.977449][ C0] rc rc0: IR event FIFO is full! [ 379.982847][ C0] rc rc0: IR event FIFO is full! [ 379.987811][ C0] rc rc0: IR event FIFO is full! [ 379.992747][ C0] rc rc0: IR event FIFO is full! [ 379.997674][ C0] rc rc0: IR event FIFO is full! [ 380.002615][ C0] rc rc0: IR event FIFO is full! [ 380.008076][ C0] rc rc0: IR event FIFO is full! [ 380.013035][ C0] rc rc0: IR event FIFO is full! [ 380.018161][ C0] rc rc0: IR event FIFO is full! [ 380.023273][ C0] rc rc0: IR event FIFO is full! [ 380.028197][ C0] rc rc0: IR event FIFO is full! [ 380.033115][ C0] rc rc0: IR event FIFO is full! [ 380.038036][ C0] rc rc0: IR event FIFO is full! [ 380.042954][ C0] rc rc0: IR event FIFO is full! [ 380.579392][T10820] ALSA: mixer_oss: invalid OSS volume '' [ 381.153103][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.212017][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.270394][ T5872] usb 8-1: USB disconnect, device number 7 [ 381.279391][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.344749][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.388322][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.453335][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.503453][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.547973][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.595488][ T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 381.637971][ T10] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 381.675121][ T10] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 381.694855][ T10] usb 9-1: USB disconnect, device number 4 [ 381.781552][ T30] audit: type=1400 audit(1773383081.383:451): avc: denied { mounton } for pid=10830 comm="syz.5.1318" path="/80/file1/file0" dev="autofs" ino=30481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 381.890780][ T30] audit: type=1400 audit(1773383081.443:452): avc: denied { unmount } for pid=8941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 381.985040][ T5872] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 382.255051][ T5872] usb 1-1: device descriptor read/64, error -71 [ 382.507997][ T5872] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 382.673167][ T5872] usb 1-1: device descriptor read/64, error -71 [ 382.744649][T10840] syzkaller0: entered allmulticast mode [ 382.853687][ T5872] usb usb1-port1: attempt power cycle [ 383.193176][ T5872] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 383.223727][ T5872] usb 1-1: device descriptor read/8, error -71 [ 383.929721][T10853] ALSA: mixer_oss: invalid OSS volume '' [ 384.363181][ T5872] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 384.413080][ T5872] usb 1-1: device descriptor read/8, error -71 [ 384.523308][ T5872] usb usb1-port1: unable to enumerate USB device [ 385.793150][ T5857] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 385.947176][ T5857] usb 8-1: Using ep0 maxpacket: 16 [ 386.003769][ T5857] usb 8-1: too many configurations: 112, using maximum allowed: 8 [ 386.127491][ T5857] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 386.249793][ T5857] usb 8-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 386.266374][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1329'. [ 386.278069][ T5857] usb 8-1: Product: syz [ 386.282258][ T5857] usb 8-1: Manufacturer: syz [ 386.298392][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1329'. [ 386.320027][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1330'. [ 386.345208][ T5857] r8152-cfgselector 8-1: Unknown version 0x0000 [ 386.351502][ T5857] r8152-cfgselector 8-1: config 0 descriptor?? [ 386.360858][T10884] IPVS: Unknown mcast interface: vcan0 [ 386.373060][ T5857] cdc_acm 8-1:0.0: Zero length descriptor references [ 386.379853][ T5857] cdc_acm 8-1:0.0: probe with driver cdc_acm failed with error -22 [ 386.788827][ T1212] r8152-cfgselector 8-1: USB disconnect, device number 8 [ 386.894967][ T30] audit: type=1326 audit(1773383086.503:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.0.1333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f886b99c799 code=0x0 [ 387.500833][T10893] Invalid source name [ 387.827934][ T1212] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 388.161589][ T1212] usb 1-1: device descriptor read/64, error -71 [ 388.403093][ T1212] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 388.643363][ T1212] usb 1-1: device descriptor read/64, error -71 [ 388.753836][ T1212] usb usb1-port1: attempt power cycle [ 389.093073][ T1212] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 389.125090][ T1212] usb 1-1: device descriptor read/8, error -71 [ 389.361435][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1338'. [ 389.435525][ T1212] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 389.453122][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1338'. [ 389.477313][ T1212] usb 1-1: device descriptor read/8, error -71 [ 389.910235][ T1212] usb usb1-port1: unable to enumerate USB device [ 391.158163][T10930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 391.337605][T10936] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 391.346914][T10936] overlayfs: missing 'lowerdir' [ 391.405491][ T30] audit: type=1400 audit(1773383090.873:454): avc: denied { create } for pid=10932 comm="syz.1.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 391.747162][ T30] audit: type=1400 audit(1773383090.883:455): avc: denied { write } for pid=10932 comm="syz.1.1345" path="socket:[30793]" dev="sockfs" ino=30793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 391.777666][ T30] audit: type=1400 audit(1773383090.933:456): avc: denied { append } for pid=10932 comm="syz.1.1345" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 391.888598][ T30] audit: type=1400 audit(1773383091.483:457): avc: denied { getopt } for pid=10939 comm="syz.7.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 391.993280][ T5872] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 392.011042][ T30] audit: type=1400 audit(1773383091.613:458): avc: denied { bind } for pid=10943 comm="syz.7.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.184052][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1349'. [ 392.355037][ T5872] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 392.365160][ T5872] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 392.443130][ T5872] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 392.477900][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.499356][ T5872] usb 9-1: Product: syz [ 392.507647][ T5872] usb 9-1: Manufacturer: syz [ 392.516830][ T5872] usb 9-1: SerialNumber: syz [ 392.548990][ T5872] usb 9-1: config 0 descriptor?? [ 392.584362][T10938] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 392.620710][T10938] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 392.661137][ T30] audit: type=1400 audit(1773383092.263:459): avc: denied { read } for pid=10949 comm="syz.7.1351" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 392.725776][ T30] audit: type=1400 audit(1773383092.263:460): avc: denied { open } for pid=10949 comm="syz.7.1351" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 392.780772][ T30] audit: type=1400 audit(1773383092.313:461): avc: denied { ioctl } for pid=10949 comm="syz.7.1351" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 393.046656][T10938] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 393.133198][T10938] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 393.548045][ T5872] Error reading MAC address [ 393.825590][ T5872] usb 9-1: USB disconnect, device number 5 [ 393.919576][ T30] audit: type=1326 audit(1773383093.523:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d6d9c799 code=0x7ffc0000 [ 393.950907][ T30] audit: type=1326 audit(1773383093.523:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff2d6d9c799 code=0x7ffc0000 [ 393.975340][ T30] audit: type=1326 audit(1773383093.523:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d6d9c799 code=0x7ffc0000 [ 394.097597][ T30] audit: type=1326 audit(1773383093.523:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7ff2d6d9c799 code=0x7ffc0000 [ 394.183129][ T30] audit: type=1326 audit(1773383093.523:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d6d9c799 code=0x7ffc0000 [ 394.207388][ T30] audit: type=1326 audit(1773383093.523:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2d6d9c799 code=0x7ffc0000 [ 394.232862][T10979] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 395.136643][T10992] fuse: Unknown parameter '0x0000000000000003' [ 395.601476][T10999] FAULT_INJECTION: forcing a failure. [ 395.601476][T10999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.614683][T10999] CPU: 0 UID: 0 PID: 10999 Comm: syz.8.1361 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.614712][T10999] Tainted: [L]=SOFTLOCKUP [ 395.614718][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 395.614729][T10999] Call Trace: [ 395.614739][T10999] [ 395.614744][T10999] dump_stack_lvl+0x100/0x190 [ 395.614768][T10999] should_fail_ex.cold+0x5/0xa [ 395.614783][T10999] _copy_to_user+0x32/0xd0 [ 395.614802][T10999] simple_read_from_buffer+0xcb/0x170 [ 395.614820][T10999] proc_fail_nth_read+0x1af/0x230 [ 395.614836][T10999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.614852][T10999] ? rw_verify_area+0xce/0x6d0 [ 395.614866][T10999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.614881][T10999] vfs_read+0x1e4/0xb30 [ 395.614898][T10999] ? __pfx_vfs_read+0x10/0x10 [ 395.614914][T10999] ? __fget_files+0x215/0x3d0 [ 395.614928][T10999] ? __fget_files+0x21f/0x3d0 [ 395.614943][T10999] ksys_read+0x12a/0x250 [ 395.614959][T10999] ? __pfx_ksys_read+0x10/0x10 [ 395.614980][T10999] do_syscall_64+0x106/0xf80 [ 395.614996][T10999] ? clear_bhb_loop+0x40/0x90 [ 395.615009][T10999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.615020][T10999] RIP: 0033:0x7f5e4e95cfce [ 395.615031][T10999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 395.615041][T10999] RSP: 002b:00007f5e4f778fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.615052][T10999] RAX: ffffffffffffffda RBX: 00007f5e4f7796c0 RCX: 00007f5e4e95cfce [ 395.615062][T10999] RDX: 000000000000000f RSI: 00007f5e4f7790a0 RDI: 0000000000000009 [ 395.615072][T10999] RBP: 00007f5e4f779090 R08: 0000000000000000 R09: 0000000000000000 [ 395.615081][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.615090][T10999] R13: 00007f5e4ec16128 R14: 00007f5e4ec16090 R15: 00007ffd35e50a68 [ 395.615114][T10999] [ 396.289919][T11016] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1368'. [ 396.302305][T11016] netlink: 'syz.0.1368': attribute type 2 has an invalid length. [ 396.503478][ T5857] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 396.693105][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 397.173001][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 397.238708][ T5857] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 397.286005][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.308946][ T5857] usb 2-1: Product: syz [ 397.315506][ T5857] usb 2-1: Manufacturer: syz [ 397.330415][ T5857] usb 2-1: SerialNumber: syz [ 397.359063][ T5857] usb 2-1: config 0 descriptor?? [ 397.412401][ T5857] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 397.419273][T11035] syzkaller1: entered promiscuous mode [ 397.433594][T11035] syzkaller1: entered allmulticast mode [ 397.495465][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.513301][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.522021][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.535368][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.543156][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.626282][ T353] usb 2-1: Failed to submit usb control message: -71 [ 397.628175][ T24] usb 2-1: USB disconnect, device number 50 [ 397.634133][ T353] usb 2-1: unable to send the bmi data to the device: -71 [ 397.649739][ T353] usb 2-1: unable to get target info from device [ 397.656770][ T353] usb 2-1: could not get target info (-71) [ 397.662860][ T353] usb 2-1: could not probe fw (-71) [ 397.699325][T11043] lo speed is unknown, defaulting to 1000 [ 397.843617][T11054] FAULT_INJECTION: forcing a failure. [ 397.843617][T11054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.904517][T11054] CPU: 1 UID: 0 PID: 11054 Comm: syz.0.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.904555][T11054] Tainted: [L]=SOFTLOCKUP [ 397.904561][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 397.904572][T11054] Call Trace: [ 397.904578][T11054] [ 397.904585][T11054] dump_stack_lvl+0x100/0x190 [ 397.904619][T11054] should_fail_ex.cold+0x5/0xa [ 397.904644][T11054] _copy_from_user+0x2e/0xd0 [ 397.904674][T11054] copy_msghdr_from_user+0x9f/0x4f0 [ 397.904700][T11054] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 397.904736][T11054] ___sys_sendmsg+0x106/0x1e0 [ 397.904790][T11054] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.904849][T11054] __sys_sendmsg+0x170/0x220 [ 397.904871][T11054] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.904908][T11054] do_syscall_64+0x106/0xf80 [ 397.904930][T11054] ? clear_bhb_loop+0x40/0x90 [ 397.904952][T11054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.904969][T11054] RIP: 0033:0x7f886b99c799 [ 397.904984][T11054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.905001][T11054] RSP: 002b:00007f8869bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.905019][T11054] RAX: ffffffffffffffda RBX: 00007f886bc16090 RCX: 00007f886b99c799 [ 397.905031][T11054] RDX: 0000000024000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 397.905041][T11054] RBP: 00007f8869bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.905050][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.905060][T11054] R13: 00007f886bc16128 R14: 00007f886bc16090 R15: 00007fff524d11b8 [ 397.905085][T11054] [ 398.222030][T11059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.245322][T11059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 398.288964][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 398.288994][ T30] audit: type=1400 audit(1773383097.813:485): avc: denied { read } for pid=11050 comm="syz.1.1376" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.447101][ T30] audit: type=1400 audit(1773383097.813:486): avc: denied { open } for pid=11050 comm="syz.1.1376" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.470876][ T30] audit: type=1400 audit(1773383097.843:487): avc: denied { ioctl } for pid=11050 comm="syz.1.1376" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.595880][ T353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.672253][T11043] chnl_net:caif_netlink_parms(): no params data found [ 398.841506][ T353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.594462][ T5811] Bluetooth: hci5: command tx timeout [ 399.678270][ T30] audit: type=1400 audit(1773383099.243:488): avc: denied { append } for pid=11080 comm="syz.8.1386" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 399.712495][T11087] xt_hashlimit: size too large, truncated to 1048576 [ 399.806032][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 399.940664][ T30] audit: type=1400 audit(1773383099.253:489): avc: denied { connect } for pid=11080 comm="syz.8.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.987683][T11073] delete_channel: no stack [ 399.997010][ T353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.123082][ T353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.310907][T11086] hsr0: entered promiscuous mode [ 400.317469][T11086] macvlan0: entered allmulticast mode [ 400.336284][T11086] hsr0: entered allmulticast mode [ 400.361663][T11086] hsr_slave_0: entered allmulticast mode [ 400.376412][T11086] hsr_slave_1: entered allmulticast mode [ 400.619445][ T30] audit: type=1400 audit(1773383100.223:490): avc: denied { bind } for pid=11099 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.645457][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.655848][ T30] audit: type=1400 audit(1773383100.243:491): avc: denied { listen } for pid=11099 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.737292][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.766963][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.781040][T11043] bridge_slave_0: entered allmulticast mode [ 400.825606][T11043] bridge_slave_0: entered promiscuous mode [ 400.869637][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.900230][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807791c000: rx timeout, send abort [ 400.923356][ T5857] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 400.934236][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.950852][T11043] bridge_slave_1: entered allmulticast mode [ 400.973573][T11043] bridge_slave_1: entered promiscuous mode [ 401.073843][ T5857] usb 1-1: device descriptor read/64, error -71 [ 401.360720][ T5857] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 401.409745][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807791c000: abort rx timeout. Force session deactivation [ 401.523368][ T5857] usb 1-1: device descriptor read/64, error -71 [ 401.582472][T11043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.683144][ T5811] Bluetooth: hci5: command tx timeout [ 401.689138][ T5857] usb usb1-port1: attempt power cycle [ 401.784835][ T30] audit: type=1400 audit(1773383100.243:492): avc: denied { connect } for pid=11099 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.794681][T11043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.804963][ T30] audit: type=1400 audit(1773383100.553:493): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 401.843486][ T30] audit: type=1400 audit(1773383100.553:494): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.922828][T11043] team0: Port device team_slave_0 added [ 402.012305][T11043] team0: Port device team_slave_1 added [ 402.046448][ T353] bridge_slave_1: left allmulticast mode [ 402.052872][ T353] bridge_slave_1: left promiscuous mode [ 402.058741][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.069563][ T353] bridge_slave_0: left allmulticast mode [ 402.075684][ T353] bridge_slave_0: left promiscuous mode [ 402.082425][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.093051][ T5857] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 402.115654][ T5857] usb 1-1: device descriptor read/8, error -71 [ 402.420531][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.438052][ T5857] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 402.472477][ T5857] usb 1-1: device descriptor read/8, error -71 [ 402.528185][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.557840][ T353] bond0 (unregistering): Released all slaves [ 402.584903][ T5857] usb usb1-port1: unable to enumerate USB device [ 402.599366][T11043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.623253][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.673288][T11043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.687237][T11043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.694490][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.721908][T11043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.042872][T11043] hsr_slave_0: entered promiscuous mode [ 403.053959][T11043] hsr_slave_1: entered promiscuous mode [ 403.154043][T11043] debugfs: 'hsr0' already exists in 'hsr' [ 403.159833][T11043] Cannot create hsr debugfs directory [ 403.261965][T11128] xt_hashlimit: size too large, truncated to 1048576 [ 403.368347][T11130] netlink: 'syz.8.1396': attribute type 1 has an invalid length. [ 403.420316][T11130] netlink: 1820 bytes leftover after parsing attributes in process `syz.8.1396'. [ 403.503033][T11130] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1396'. [ 403.714442][ T353] hsr_slave_0: left promiscuous mode [ 403.753154][ T5811] Bluetooth: hci5: command tx timeout [ 403.781253][ T353] hsr_slave_1: left promiscuous mode [ 403.810422][T11141] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.825097][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.862220][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.873098][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.880580][ T353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.893830][ T353] veth1_macvtap: left promiscuous mode [ 403.900147][ T353] veth0_macvtap: left promiscuous mode [ 403.906787][ T353] veth1_vlan: left promiscuous mode [ 403.912282][ T353] veth0_vlan: left promiscuous mode [ 404.339999][ T353] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 404.826750][ T353] team0 (unregistering): Port device team_slave_1 removed [ 404.850108][ T353] team0 (unregistering): Port device team_slave_0 removed [ 405.436867][ T353] IPVS: stop unused estimator thread 0... [ 405.571952][T11043] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 405.594388][T11043] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 405.618194][T11043] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 405.661647][T11043] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 405.833418][ T5811] Bluetooth: hci5: command tx timeout [ 406.066455][T11043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.315258][T11043] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.334854][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.341937][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.523631][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.530762][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.692081][T11043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.753984][T11043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.894036][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 406.894054][ T30] audit: type=1400 audit(1773383106.503:502): avc: denied { create } for pid=11186 comm="syz.1.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 407.413016][ T5811] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 407.471233][T11043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.495259][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 407.663760][T11218] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 407.675680][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 407.696048][ T10] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 407.722298][ T10] usb 2-1: config 0 has no interface number 0 [ 407.744352][ T10] usb 2-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 407.775327][ T10] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 407.806997][ T10] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 407.833166][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 407.843263][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.862434][ T10] usb 2-1: Product: syz [ 407.873172][ T10] usb 2-1: Manufacturer: syz [ 407.888019][ T10] usb 2-1: SerialNumber: syz [ 407.918374][ T10] usb 2-1: config 0 descriptor?? [ 408.142244][T11043] veth0_vlan: entered promiscuous mode [ 408.155327][ T10] usb 2-1: USB disconnect, device number 51 [ 408.195981][T11043] veth1_vlan: entered promiscuous mode [ 408.338433][T11043] veth0_macvtap: entered promiscuous mode [ 408.397107][T11043] veth1_macvtap: entered promiscuous mode [ 408.439087][T11233] netlink: 'syz.0.1410': attribute type 14 has an invalid length. [ 408.465128][T11043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.506191][T11043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.541995][ T3565] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.694072][ T3565] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.724098][ T3565] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.743381][ T792] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 408.761799][ T3565] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.896322][ T792] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.922277][ T792] usb 8-1: config 0 has no interface number 0 [ 408.934770][ T353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.948633][ T353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.963916][ T792] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.998892][ T792] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.063646][ T353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.076623][ T792] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.096854][ T353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.134949][ T792] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 409.187512][ T792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.303440][ T792] usb 8-1: config 0 descriptor?? [ 410.627173][T11269] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 410.648444][ T792] usbhid 8-1:0.1: can't add hid device: -71 [ 410.655439][ T792] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 410.665524][T11269] netlink: 1820 bytes leftover after parsing attributes in process `syz.0.1415'. [ 410.717413][ T792] usb 8-1: USB disconnect, device number 9 [ 410.725432][T11269] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1415'. [ 412.153903][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1421'. [ 412.163725][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1421'. [ 413.142432][T11308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.176449][T11308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.444309][T11311] netlink: 'syz.7.1424': attribute type 14 has an invalid length. [ 415.244409][ T30] audit: type=1400 audit(1773383114.853:503): avc: denied { wake_alarm } for pid=11323 comm="syz.0.1428" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.293331][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 415.456267][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 415.494071][ T10] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 415.502301][ T10] usb 10-1: config 0 has no interface number 0 [ 415.547406][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 415.577769][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.593347][ T5871] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 415.594994][T11323] mmap: syz.0.1428 (11323): VmData 25837568 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 415.633100][ T10] usb 10-1: Product: syz [ 415.637391][ T10] usb 10-1: Manufacturer: syz [ 415.642075][ T10] usb 10-1: SerialNumber: syz [ 415.694018][ T10] usb 10-1: config 0 descriptor?? [ 415.783213][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 415.823992][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 415.841020][ T5871] usb 2-1: config 86 has an invalid interface number: 78 but max is 0 [ 415.873054][ T5871] usb 2-1: config 86 has no interface number 0 [ 415.879324][ T5871] usb 2-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 415.921577][ T5871] usb 2-1: config 86 interface 78 has no altsetting 0 [ 415.932236][T11320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.972877][ T5871] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 415.986542][T11320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.993563][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.002334][ T5871] usb 2-1: Product: syz [ 416.258546][T11338] IPVS: sh: FWM 3 0x00000003 - no destination available [ 416.266194][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 416.524763][ T5871] usb 2-1: Manufacturer: syz [ 416.529432][ T5871] usb 2-1: SerialNumber: syz [ 416.532764][ T1212] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 416.626433][T11326] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 416.703743][ T1212] usb 1-1: device descriptor read/64, error -71 [ 417.034078][ T1212] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 417.876423][ T30] audit: type=1400 audit(1773383117.103:504): avc: denied { ioctl } for pid=11325 comm="syz.1.1429" path="socket:[31516]" dev="sockfs" ino=31516 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 418.073059][ T1212] usb 1-1: device descriptor read/64, error -71 [ 418.181138][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 418.204859][ T1212] usb usb1-port1: attempt power cycle [ 418.213024][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 418.391700][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 418.404755][ T30] audit: type=1400 audit(1773383118.013:505): avc: denied { unmount } for pid=11043 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 418.866085][ T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 418.878428][ T10] usb 10-1: USB disconnect, device number 2 [ 418.963750][ T5871] kvaser_usb 2-1:86.78: error -ENODEV: Cannot get usb endpoint(s) [ 419.148714][ T5871] usb 2-1: USB disconnect, device number 52 [ 419.177384][ T1212] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 419.254700][T11362] FAULT_INJECTION: forcing a failure. [ 419.254700][T11362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.270722][T11362] CPU: 0 UID: 0 PID: 11362 Comm: syz.7.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.270754][T11362] Tainted: [L]=SOFTLOCKUP [ 419.270759][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 419.270768][T11362] Call Trace: [ 419.270774][T11362] [ 419.270780][T11362] dump_stack_lvl+0x100/0x190 [ 419.270814][T11362] should_fail_ex.cold+0x5/0xa [ 419.270836][T11362] _copy_to_user+0x32/0xd0 [ 419.270864][T11362] simple_read_from_buffer+0xcb/0x170 [ 419.270891][T11362] proc_fail_nth_read+0x1af/0x230 [ 419.270915][T11362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.270939][T11362] ? rw_verify_area+0xce/0x6d0 [ 419.270960][T11362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.270982][T11362] vfs_read+0x1e4/0xb30 [ 419.271008][T11362] ? __pfx_vfs_read+0x10/0x10 [ 419.271031][T11362] ? __fget_files+0x215/0x3d0 [ 419.271053][T11362] ? __fget_files+0x21f/0x3d0 [ 419.271075][T11362] ksys_read+0x12a/0x250 [ 419.271097][T11362] ? __pfx_ksys_read+0x10/0x10 [ 419.271127][T11362] do_syscall_64+0x106/0xf80 [ 419.271148][T11362] ? clear_bhb_loop+0x40/0x90 [ 419.271168][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.271184][T11362] RIP: 0033:0x7fab5215cfce [ 419.271198][T11362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.271212][T11362] RSP: 002b:00007fab5304dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.271227][T11362] RAX: ffffffffffffffda RBX: 00007fab5304e6c0 RCX: 00007fab5215cfce [ 419.271237][T11362] RDX: 000000000000000f RSI: 00007fab5304e0a0 RDI: 0000000000000004 [ 419.271246][T11362] RBP: 00007fab5304e090 R08: 0000000000000000 R09: 0000000000000000 [ 419.271255][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.271263][T11362] R13: 00007fab52416038 R14: 00007fab52415fa0 R15: 00007ffcc09d5be8 [ 419.271286][T11362] [ 419.648896][ T1212] usb 1-1: device descriptor read/8, error -71 [ 419.780389][T11374] netlink: 'syz.1.1440': attribute type 14 has an invalid length. [ 419.825972][ T30] audit: type=1400 audit(1773383119.433:506): avc: denied { mount } for pid=11371 comm="syz.0.1443" name="/" dev="configfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 420.829706][T11381] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 420.829733][T11387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.829887][T11387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 420.873371][T11387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.879688][T11387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.887152][T11387] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 420.893270][T11387] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 420.943274][T11387] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 422.021254][ T30] audit: type=1400 audit(1773383121.403:507): avc: denied { listen } for pid=11397 comm="syz.8.1448" lport=33920 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.143680][ T30] audit: type=1400 audit(1773383121.403:508): avc: denied { accept } for pid=11397 comm="syz.8.1448" lport=33920 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.198121][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 422.306274][ T30] audit: type=1400 audit(1773383121.403:509): avc: denied { write } for pid=11397 comm="syz.8.1448" lport=33920 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 422.500970][ T30] audit: type=1400 audit(1773383121.403:510): avc: denied { setopt } for pid=11397 comm="syz.8.1448" lport=33920 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 422.625687][ T30] audit: type=1400 audit(1773383121.403:511): avc: denied { ioctl } for pid=11397 comm="syz.8.1448" path="socket:[31600]" dev="sockfs" ino=31600 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 422.873168][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 422.953128][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 422.955208][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 422.993922][ T5871] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 423.604469][ T5871] usb 9-1: device descriptor read/64, error -71 [ 424.183239][ T5871] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 424.773451][T11444] ALSA: mixer_oss: invalid OSS volume '' [ 425.163035][ T5809] Bluetooth: hci5: command 0x0c1a tx timeout [ 425.185766][ T5871] usb 9-1: device descriptor read/64, error -71 [ 425.293234][ T5871] usb usb9-port1: attempt power cycle [ 425.557695][T11461] FAULT_INJECTION: forcing a failure. [ 425.557695][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 425.607415][T11461] CPU: 1 UID: 0 PID: 11461 Comm: syz.1.1459 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.607447][T11461] Tainted: [L]=SOFTLOCKUP [ 425.607452][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 425.607462][T11461] Call Trace: [ 425.607469][T11461] [ 425.607476][T11461] dump_stack_lvl+0x100/0x190 [ 425.607507][T11461] should_fail_ex.cold+0x5/0xa [ 425.607531][T11461] should_failslab+0xc2/0x120 [ 425.607551][T11461] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 425.607575][T11461] ? skb_clone+0x190/0x400 [ 425.607603][T11461] skb_clone+0x190/0x400 [ 425.607627][T11461] netlink_deliver_tap+0xaed/0xcc0 [ 425.607657][T11461] netlink_unicast+0x650/0x870 [ 425.607693][T11461] ? __pfx_netlink_unicast+0x10/0x10 [ 425.607728][T11461] netlink_sendmsg+0x8b0/0xda0 [ 425.607758][T11461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.607781][T11461] ? __might_fault+0xc0/0x140 [ 425.607815][T11461] ____sys_sendmsg+0x9e1/0xb70 [ 425.607841][T11461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.607867][T11461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.607907][T11461] ___sys_sendmsg+0x190/0x1e0 [ 425.607937][T11461] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.607998][T11461] __sys_sendmsg+0x170/0x220 [ 425.608020][T11461] ? __pfx___sys_sendmsg+0x10/0x10 [ 425.608059][T11461] do_syscall_64+0x106/0xf80 [ 425.608082][T11461] ? clear_bhb_loop+0x40/0x90 [ 425.608105][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.608123][T11461] RIP: 0033:0x7ff2d6d9c799 [ 425.608139][T11461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.608156][T11461] RSP: 002b:00007ff2d7cc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.608173][T11461] RAX: ffffffffffffffda RBX: 00007ff2d7015fa0 RCX: 00007ff2d6d9c799 [ 425.608183][T11461] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 425.608193][T11461] RBP: 00007ff2d7cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 425.608203][T11461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.608213][T11461] R13: 00007ff2d7016038 R14: 00007ff2d7015fa0 R15: 00007ffd6325f7a8 [ 425.608235][T11461] [ 425.828457][ T5871] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 425.942082][ T5871] usb 9-1: device descriptor read/8, error -71 [ 426.159149][T11465] netlink: 'syz.1.1461': attribute type 14 has an invalid length. [ 426.837520][T11475] warning: `syz.1.1463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 427.284143][ T5809] Bluetooth: hci5: command 0x0c1a tx timeout [ 427.446358][T11475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 427.452457][T11475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 427.460663][T11475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 427.466870][T11475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 427.472983][T11475] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 427.913460][ T5864] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 428.045336][ T5872] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 428.115530][T11496] binder: 11495:11496 ioctl 4018620d 0 returned -22 [ 428.148931][T11496] FAULT_INJECTION: forcing a failure. [ 428.148931][T11496] name failslab, interval 1, probability 0, space 0, times 0 [ 428.163569][ T5864] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.188866][ T5864] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 428.214418][ T5864] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.222617][T11496] CPU: 1 UID: 0 PID: 11496 Comm: syz.7.1467 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.222649][T11496] Tainted: [L]=SOFTLOCKUP [ 428.222655][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 428.222666][T11496] Call Trace: [ 428.222672][T11496] [ 428.222679][T11496] dump_stack_lvl+0x100/0x190 [ 428.222712][T11496] should_fail_ex.cold+0x5/0xa [ 428.222735][T11496] should_failslab+0xc2/0x120 [ 428.222753][T11496] __kmalloc_cache_noprof+0x7a/0x6f0 [ 428.222774][T11496] ? vcs_poll_data_get.part.0+0x41/0x250 [ 428.222797][T11496] ? __pfx_vcs_poll+0x10/0x10 [ 428.222812][T11496] vcs_poll_data_get.part.0+0x41/0x250 [ 428.222830][T11496] vcs_poll+0x115/0x150 [ 428.222847][T11496] ? __pfx_vcs_poll+0x10/0x10 [ 428.222863][T11496] do_sys_poll+0x6e5/0xeb0 [ 428.222888][T11496] ? __pfx_do_sys_poll+0x10/0x10 [ 428.222905][T11496] ? arch_stack_walk+0xa6/0xf0 [ 428.222952][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.222978][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223002][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223028][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223057][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223085][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223114][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223143][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223172][T11496] ? __pfx_pollwake+0x10/0x10 [ 428.223201][T11496] ? __mutex_unlock_slowpath+0x15c/0x790 [ 428.223231][T11496] ? __fget_files+0x215/0x3d0 [ 428.223247][T11496] ? set_user_sigmask+0x1e1/0x270 [ 428.223266][T11496] ? __pfx_set_user_sigmask+0x10/0x10 [ 428.223288][T11496] __x64_sys_ppoll+0x2b5/0x350 [ 428.223297][ T5857] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 428.223309][T11496] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 428.223325][T11496] ? ksys_write+0x1ac/0x250 [ 428.223348][T11496] ? __pfx_ksys_write+0x10/0x10 [ 428.223376][T11496] do_syscall_64+0x106/0xf80 [ 428.223394][T11496] ? clear_bhb_loop+0x40/0x90 [ 428.223413][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.223430][T11496] RIP: 0033:0x7fab5219c799 [ 428.223444][T11496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.223458][T11496] RSP: 002b:00007fab5304e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 428.223474][T11496] RAX: ffffffffffffffda RBX: 00007fab52415fa0 RCX: 00007fab5219c799 [ 428.223484][T11496] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 428.223493][T11496] RBP: 00007fab5304e090 R08: 0000000000000000 R09: 0000000000000000 [ 428.223502][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.223511][T11496] R13: 00007fab52416038 R14: 00007fab52415fa0 R15: 00007ffcc09d5be8 [ 428.223532][T11496] [ 428.540898][ T5872] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 428.550958][ T5872] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 428.565420][ T5864] usb 9-1: config 0 descriptor?? [ 428.567287][ T5872] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 428.587564][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.596435][ T5872] usb 10-1: Product: syz [ 428.600706][ T5872] usb 10-1: Manufacturer: syz [ 428.666487][ T5872] usb 10-1: SerialNumber: syz [ 428.671742][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 428.677248][ T5857] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.694527][ T5872] usb 10-1: config 0 descriptor?? [ 428.702832][ T5857] usb 2-1: config 0 has no interface number 0 [ 428.709223][ T5857] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.720791][T11489] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 428.728459][T11489] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 428.851111][ T5857] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.096664][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 429.131838][T11489] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 429.189873][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 429.282727][ T5857] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.343048][T11489] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 429.351281][ T5857] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 429.361114][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.369638][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 429.419425][ T5857] usb 2-1: config 0 descriptor?? [ 429.623554][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 429.626396][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 429.629635][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 429.652714][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1464'. [ 429.725644][ T5872] Error reading MAC address [ 429.939981][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 429.971532][ T29] usb 10-1: USB disconnect, device number 3 [ 430.463344][ T5857] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0008/input/input28 [ 430.600434][ T5857] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 430.801033][ T5857] usb 2-1: USB disconnect, device number 53 [ 431.178170][T11541] binder: 11534:11541 ioctl 80286722 2000000194c0 returned -22 [ 431.191903][T11541] unsupported nlmsg_type 40 [ 431.557627][T11539] fido_id[11539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 432.379356][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'. [ 432.666994][ T30] audit: type=1400 audit(1773383132.263:512): avc: denied { create } for pid=11554 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 432.824426][T11560] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1480'. [ 432.896037][T11560] Bluetooth: MGMT ver 1.23 [ 433.461151][T11566] netlink: 'syz.7.1482': attribute type 14 has an invalid length. [ 433.469911][T11557] lo speed is unknown, defaulting to 1000 [ 434.085179][T11583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1486'. [ 434.131280][T11583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1486'. [ 434.189008][ T5864] pwc: recv_control_msg error -71 req 04 val 1000 [ 434.250033][ T5864] pwc: recv_control_msg error -71 req 04 val 1300 [ 434.383403][ T5864] pwc: recv_control_msg error -71 req 04 val 1400 [ 434.399953][ T5864] pwc: recv_control_msg error -71 req 02 val 2000 [ 434.490380][ T5864] pwc: recv_control_msg error -71 req 02 val 2100 [ 434.580659][ T5864] pwc: recv_control_msg error -71 req 04 val 1500 [ 434.633221][ T5864] pwc: recv_control_msg error -71 req 02 val 2500 [ 434.669371][T11598] FAULT_INJECTION: forcing a failure. [ 434.669371][T11598] name failslab, interval 1, probability 0, space 0, times 0 [ 434.702460][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 434.710501][T11583] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1486'. [ 434.727609][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 434.750187][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 434.798242][T11598] CPU: 1 UID: 0 PID: 11598 Comm: syz.8.1489 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.798262][T11598] Tainted: [L]=SOFTLOCKUP [ 434.798266][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 434.798272][T11598] Call Trace: [ 434.798276][T11598] [ 434.798280][T11598] dump_stack_lvl+0x100/0x190 [ 434.798302][T11598] should_fail_ex.cold+0x5/0xa [ 434.798316][T11598] should_failslab+0xc2/0x120 [ 434.798328][T11598] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 434.798343][T11598] ? skb_clone+0x190/0x400 [ 434.798358][T11598] skb_clone+0x190/0x400 [ 434.798372][T11598] netlink_deliver_tap+0xaed/0xcc0 [ 434.798389][T11598] netlink_unicast+0x650/0x870 [ 434.798406][T11598] ? __pfx_netlink_unicast+0x10/0x10 [ 434.798427][T11598] netlink_sendmsg+0x8b0/0xda0 [ 434.798444][T11598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.798457][T11598] ? __might_fault+0xc0/0x140 [ 434.798476][T11598] ____sys_sendmsg+0x9e1/0xb70 [ 434.798491][T11598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.798507][T11598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.798529][T11598] ___sys_sendmsg+0x190/0x1e0 [ 434.798547][T11598] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.798580][T11598] __sys_sendmsg+0x170/0x220 [ 434.798594][T11598] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.798615][T11598] do_syscall_64+0x106/0xf80 [ 434.798628][T11598] ? clear_bhb_loop+0x40/0x90 [ 434.798644][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.798654][T11598] RIP: 0033:0x7f5e4e99c799 [ 434.798664][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.798674][T11598] RSP: 002b:00007f5e4f81f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.798686][T11598] RAX: ffffffffffffffda RBX: 00007f5e4ec15fa0 RCX: 00007f5e4e99c799 [ 434.798692][T11598] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 434.798698][T11598] RBP: 00007f5e4f81f090 R08: 0000000000000000 R09: 0000000000000000 [ 434.798704][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.798711][T11598] R13: 00007f5e4ec16038 R14: 00007f5e4ec15fa0 R15: 00007ffd35e50a68 [ 434.798725][T11598] [ 434.800545][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 434.854592][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.052561][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.192852][T11606] netlink: 'syz.7.1492': attribute type 1 has an invalid length. [ 435.212000][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 435.219184][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 435.239113][T11606] netlink: 1840 bytes leftover after parsing attributes in process `syz.7.1492'. [ 435.260383][ T5864] pwc: Registered as video103. [ 436.313350][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input29 [ 436.383192][ T5864] usb 9-1: USB disconnect, device number 10 [ 436.849140][T11631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.050046][ T30] audit: type=1400 audit(1773383136.343:513): avc: denied { create } for pid=11625 comm="syz.8.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.189415][T11637] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 437.258570][ T30] audit: type=1400 audit(1773383136.353:514): avc: denied { setopt } for pid=11625 comm="syz.8.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.414144][T11626] 9pnet_fd: p9_fd_create_tcp (11626): problem connecting socket to 127.0.0.1 [ 437.545307][T11634] netlink: 'syz.9.1497': attribute type 14 has an invalid length. [ 438.060498][T11658] FAULT_INJECTION: forcing a failure. [ 438.060498][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 438.149152][T11658] CPU: 0 UID: 0 PID: 11658 Comm: syz.7.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.149180][T11658] Tainted: [L]=SOFTLOCKUP [ 438.149186][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 438.149195][T11658] Call Trace: [ 438.149201][T11658] [ 438.149208][T11658] dump_stack_lvl+0x100/0x190 [ 438.149240][T11658] should_fail_ex.cold+0x5/0xa [ 438.149263][T11658] should_failslab+0xc2/0x120 [ 438.149280][T11658] __kmalloc_cache_noprof+0x7a/0x6f0 [ 438.149303][T11658] ? alloc_bprm+0x86/0x710 [ 438.149333][T11658] alloc_bprm+0x86/0x710 [ 438.149362][T11658] do_execveat_common.isra.0+0x19c/0x580 [ 438.149391][T11658] ? do_getname+0x191/0x390 [ 438.149416][T11658] __x64_sys_execveat+0xdf/0x130 [ 438.149445][T11658] do_syscall_64+0x106/0xf80 [ 438.149467][T11658] ? clear_bhb_loop+0x40/0x90 [ 438.149490][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.149508][T11658] RIP: 0033:0x7fab5219c799 [ 438.149523][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.149540][T11658] RSP: 002b:00007fab5302d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 438.149558][T11658] RAX: ffffffffffffffda RBX: 00007fab52416090 RCX: 00007fab5219c799 [ 438.149569][T11658] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 438.149579][T11658] RBP: 00007fab5302d090 R08: 0000000000000000 R09: 0000000000000000 [ 438.149597][T11658] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 438.149607][T11658] R13: 00007fab52416128 R14: 00007fab52416090 R15: 00007ffcc09d5be8 [ 438.149631][T11658] [ 440.283034][ T5864] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 440.405645][T11685] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 440.414881][T11685] overlayfs: missing 'lowerdir' [ 440.533284][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 440.813604][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.842463][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.865964][ T30] audit: type=1400 audit(1773383140.463:515): avc: denied { connect } for pid=11680 comm="syz.9.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 440.867520][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 16384, setting to 1024 [ 440.952384][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 440.991775][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.022525][ T30] audit: type=1400 audit(1773383140.603:516): avc: denied { append } for pid=11680 comm="syz.9.1512" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 441.148007][ T5864] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 441.187547][ T5864] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.200402][ T30] audit: type=1400 audit(1773383140.603:517): avc: denied { ioctl } for pid=11680 comm="syz.9.1512" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 441.222963][ T5864] usb 1-1: Manufacturer: syz [ 441.233232][ T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 441.503748][ T5864] usb 1-1: config 0 descriptor?? [ 441.643090][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 441.672994][ T29] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.681161][ T29] usb 9-1: config 0 has no interface number 0 [ 442.111235][ T29] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 442.163234][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.273029][ T29] usb 9-1: Product: syz [ 442.277255][ T29] usb 9-1: Manufacturer: syz [ 442.281902][ T29] usb 9-1: SerialNumber: syz [ 442.318306][ T29] usb 9-1: config 0 descriptor?? [ 442.862983][ T5864] rc_core: IR keymap rc-hauppauge not found [ 442.868968][ T5864] Registered IR keymap rc-empty [ 442.876352][ T29] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 442.904736][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 442.956806][ T29] usb 9-1: selecting invalid altsetting 1 [ 442.962616][ T29] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 442.973322][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.006849][ T29] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 443.018220][ T5864] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 443.070674][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 443.091208][ T5864] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 443.132427][ T29] usb 9-1: media controller created [ 443.160586][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.219173][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.241213][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.253728][T11715] netlink: 'syz.7.1520': attribute type 14 has an invalid length. [ 443.483267][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.524213][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.553416][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.575042][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.606438][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.669602][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.703376][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.760509][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 443.883408][ T5864] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 444.080827][T11718] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 444.081729][ T5864] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 444.168698][T11723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.435465][ T5864] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 444.473488][T11690] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 444.532294][ T29] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 444.539359][ T5864] usb 1-1: USB disconnect, device number 73 [ 444.613305][ T29] zl10353_read_register: readreg error (reg=127, ret==-32) [ 444.627795][ T29] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 444.759043][ T29] usb 9-1: USB disconnect, device number 11 [ 446.311396][T11730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 446.317813][T11730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 446.323871][T11730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 446.329893][T11730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 446.335893][T11730] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 447.103037][ T30] audit: type=1400 audit(1773383146.423:518): avc: denied { watch } for pid=11739 comm="syz.0.1527" path="/317/file0" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 447.521021][ T30] audit: type=1400 audit(1773383146.423:519): avc: denied { watch_sb } for pid=11739 comm="syz.0.1527" path="/317/file0" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 447.883026][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 448.083155][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 448.123847][ T29] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 448.163823][ T29] usb 8-1: config 0 has no interface number 0 [ 448.183891][ T29] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.213068][ T29] usb 8-1: config 0 interface 89 has no altsetting 0 [ 448.235380][ T29] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 448.273027][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.303370][ T29] usb 8-1: Product: syz [ 448.313040][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 448.326664][ T29] usb 8-1: Manufacturer: syz [ 448.331285][ T29] usb 8-1: SerialNumber: syz [ 448.363865][ T29] usb 8-1: config 0 descriptor?? [ 448.389669][ T29] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 448.399702][ T5806] Bluetooth: hci5: command 0x0c1a tx timeout [ 448.405756][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 448.411726][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 448.417845][ T29] em28xx 8-1:0.89: Video interface 89 found: [ 450.424601][ T29] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 450.648962][T11754] ALSA: mixer_oss: invalid OSS volume '' [ 450.967935][ T30] audit: type=1326 audit(1773383150.563:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 451.156122][ T30] audit: type=1326 audit(1773383150.573:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 451.190494][ T30] audit: type=1326 audit(1773383150.573:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 451.770634][ T30] audit: type=1326 audit(1773383150.603:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 451.830667][ T29] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 451.963264][ T29] em28xx 8-1:0.89: board has no eeprom [ 451.976404][ T30] audit: type=1326 audit(1773383150.603:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.087530][ T29] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 452.108773][ T29] em28xx 8-1:0.89: analog set to bulk mode. [ 452.192227][ T30] audit: type=1326 audit(1773383150.603:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.220541][ T792] em28xx 8-1:0.89: Registering V4L2 extension [ 452.563914][ T792] em28xx 8-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 452.576847][ T30] audit: type=1326 audit(1773383150.603:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.604894][ T30] audit: type=1326 audit(1773383150.603:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.631151][T11779] netlink: 'syz.9.1538': attribute type 1 has an invalid length. [ 452.662164][T11779] netlink: 1828 bytes leftover after parsing attributes in process `syz.9.1538'. [ 452.706336][T11779] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1538'. [ 452.807236][ T30] audit: type=1326 audit(1773383150.603:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.833465][ T30] audit: type=1326 audit(1773383150.603:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.857160][ T30] audit: type=1326 audit(1773383151.363:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.881037][ T30] audit: type=1326 audit(1773383151.373:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.904795][ T30] audit: type=1326 audit(1773383151.373:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 452.999677][ T30] audit: type=1326 audit(1773383151.373:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 453.150401][ T30] audit: type=1326 audit(1773383151.543:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5219c799 code=0x7ffc0000 [ 453.619065][ T792] em28xx 8-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 453.619359][ T5872] usb 8-1: USB disconnect, device number 10 [ 453.653622][ T5872] em28xx 8-1:0.89: Disconnecting em28xx [ 453.665750][ T792] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 453.683627][ T792] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 453.690801][ T792] em28xx 8-1:0.89: No AC97 audio processor [ 454.067620][ T792] usb 8-1: Decoder not found [ 454.072257][ T792] em28xx 8-1:0.89: failed to create media graph [ 454.102846][ T792] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 454.112453][T11786] netlink: 'syz.0.1539': attribute type 14 has an invalid length. [ 454.327326][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1540'. [ 454.350919][T11799] ================================================================== [ 454.358997][T11799] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 454.366451][T11799] Read of size 8 at addr ffff888092eec748 by task v4l_id/11799 [ 454.373965][T11799] [ 454.376285][T11799] CPU: 0 UID: 0 PID: 11799 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 454.376301][T11799] Tainted: [L]=SOFTLOCKUP [ 454.376304][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 454.376312][T11799] Call Trace: [ 454.376319][T11799] [ 454.376324][T11799] dump_stack_lvl+0x100/0x190 [ 454.376345][T11799] print_report+0x156/0x4c9 [ 454.376367][T11799] ? __virt_addr_valid+0x81/0x620 [ 454.376383][T11799] ? __phys_addr+0xe8/0x180 [ 454.376398][T11799] ? v4l2_fh_init+0x27d/0x2c0 [ 454.376411][T11799] kasan_report+0xdf/0x1e0 [ 454.376422][T11799] ? v4l2_fh_init+0x27d/0x2c0 [ 454.376436][T11799] v4l2_fh_init+0x27d/0x2c0 [ 454.376449][T11799] v4l2_fh_open+0x64/0xa0 [ 454.376462][T11799] em28xx_v4l2_open+0x11e/0x570 [ 454.376476][T11799] v4l2_open+0x1d2/0x490 [ 454.376490][T11799] ? __pfx_v4l2_open+0x10/0x10 [ 454.376503][T11799] chrdev_open+0x234/0x6a0 [ 454.376514][T11799] ? __pfx_chrdev_open+0x10/0x10 [ 454.376524][T11799] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 454.376539][T11799] do_dentry_open+0x6d8/0x1660 [ 454.376556][T11799] ? __pfx_chrdev_open+0x10/0x10 [ 454.376567][T11799] vfs_open+0x82/0x3f0 [ 454.376580][T11799] path_openat+0x208c/0x31a0 [ 454.376593][T11799] ? __pfx_path_openat+0x10/0x10 [ 454.376606][T11799] do_file_open+0x20e/0x430 [ 454.376617][T11799] ? __pfx_do_file_open+0x10/0x10 [ 454.376632][T11799] ? alloc_fd+0x476/0x790 [ 454.376644][T11799] ? do_getname+0x191/0x390 [ 454.376657][T11799] do_sys_openat2+0x10d/0x1e0 [ 454.376669][T11799] ? __pfx_do_sys_openat2+0x10/0x10 [ 454.376684][T11799] __x64_sys_openat+0x12d/0x210 [ 454.376697][T11799] ? __pfx___x64_sys_openat+0x10/0x10 [ 454.376711][T11799] ? do_user_addr_fault+0x8d6/0x12f0 [ 454.376724][T11799] do_syscall_64+0x106/0xf80 [ 454.376736][T11799] ? clear_bhb_loop+0x40/0x90 [ 454.376749][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.376760][T11799] RIP: 0033:0x7f94d5aa7407 [ 454.376770][T11799] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 454.376780][T11799] RSP: 002b:00007fff75c553a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 454.376792][T11799] RAX: ffffffffffffffda RBX: 00007f94d62ac880 RCX: 00007f94d5aa7407 [ 454.376799][T11799] RDX: 0000000000000000 RSI: 00007fff75c55f1c RDI: ffffffffffffff9c [ 454.376805][T11799] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 454.376811][T11799] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 454.376817][T11799] R13: 00007fff75c555f0 R14: 00007f94d6413000 R15: 000055ac5cddf4d8 [ 454.376828][T11799] [ 454.376832][T11799] [ 454.637470][T11799] Allocated by task 792: [ 454.641693][T11799] kasan_save_stack+0x30/0x50 [ 454.646365][T11799] kasan_save_track+0x14/0x30 [ 454.651044][T11799] __kasan_kmalloc+0xaa/0xb0 [ 454.655635][T11799] em28xx_v4l2_init.cold+0x94/0x3503 [ 454.660914][T11799] em28xx_init_extension+0x13a/0x200 [ 454.666178][T11799] request_module_async+0x61/0x80 [ 454.671184][T11799] process_one_work+0x9d7/0x1920 [ 454.676106][T11799] worker_thread+0x5da/0xe40 [ 454.680685][T11799] kthread+0x370/0x450 [ 454.684728][T11799] ret_from_fork+0x754/0xd80 [ 454.689306][T11799] ret_from_fork_asm+0x1a/0x30 [ 454.694067][T11799] [ 454.696377][T11799] Freed by task 792: [ 454.700287][T11799] kasan_save_stack+0x30/0x50 [ 454.704975][T11799] kasan_save_track+0x14/0x30 [ 454.709636][T11799] kasan_save_free_info+0x3b/0x70 [ 454.714636][T11799] __kasan_slab_free+0x5f/0x80 [ 454.719382][T11799] kfree+0x1f6/0x6b0 [ 454.723251][T11799] kref_put.isra.0+0x56/0x90 [ 454.727826][T11799] em28xx_v4l2_init.cold+0x280/0x3503 [ 454.733182][T11799] em28xx_init_extension+0x13a/0x200 [ 454.738448][T11799] request_module_async+0x61/0x80 [ 454.743452][T11799] process_one_work+0x9d7/0x1920 [ 454.748381][T11799] worker_thread+0x5da/0xe40 [ 454.752961][T11799] kthread+0x370/0x450 [ 454.757011][T11799] ret_from_fork+0x754/0xd80 [ 454.761577][T11799] ret_from_fork_asm+0x1a/0x30 [ 454.766329][T11799] [ 454.768643][T11799] The buggy address belongs to the object at ffff888092eec000 [ 454.768643][T11799] which belongs to the cache kmalloc-8k of size 8192 [ 454.782674][T11799] The buggy address is located 1864 bytes inside of [ 454.782674][T11799] freed 8192-byte region [ffff888092eec000, ffff888092eee000) [ 454.796628][T11799] [ 454.798928][T11799] The buggy address belongs to the physical page: [ 454.805310][T11799] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x92ee8 [ 454.814053][T11799] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 454.822535][T11799] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 454.830050][T11799] page_type: f5(slab) [ 454.834007][T11799] raw: 00fff00000000040 ffff88813fe40280 dead000000000122 0000000000000000 [ 454.842574][T11799] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 454.851139][T11799] head: 00fff00000000040 ffff88813fe40280 dead000000000122 0000000000000000 [ 454.859783][T11799] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 454.868435][T11799] head: 00fff00000000003 ffffea00024bba01 00000000ffffffff 00000000ffffffff [ 454.877080][T11799] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 454.885726][T11799] page dumped because: kasan: bad access detected [ 454.892108][T11799] page_owner tracks the page as allocated [ 454.897797][T11799] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11766, tgid 11745 (syz.7.1528), ts 452101907724, free_ts 440920673821 [ 454.919313][T11799] post_alloc_hook+0x153/0x170 [ 454.924066][T11799] get_page_from_freelist+0x111d/0x3140 [ 454.929589][T11799] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 454.935457][T11799] new_slab+0xa6/0x6c0 [ 454.939512][T11799] refill_objects+0x26b/0x400 [ 454.944165][T11799] __pcs_replace_empty_main+0x1ab/0x600 [ 454.949701][T11799] __kmalloc_cache_noprof+0x493/0x6f0 [ 454.955055][T11799] audit_log_d_path+0xed/0x210 [ 454.959807][T11799] audit_log_d_path_exe+0x46/0x80 [ 454.964806][T11799] audit_log_task+0x2fe/0x3a0 [ 454.969458][T11799] audit_seccomp+0x7a/0x1f0 [ 454.973934][T11799] __seccomp_filter+0x896/0x1140 [ 454.978844][T11799] __secure_computing+0x221/0x2e0 [ 454.983847][T11799] do_syscall_64+0x568/0xf80 [ 454.988439][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.994310][T11799] page last free pid 1212 tgid 1212 stack trace: [ 455.000616][T11799] __free_frozen_pages+0x7e1/0x10d0 [ 455.005801][T11799] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 455.011511][T11799] __apply_to_page_range+0xb1d/0x1520 [ 455.016861][T11799] __kasan_release_vmalloc+0xd7/0xe0 [ 455.022136][T11799] purge_vmap_node+0x210/0xb40 [ 455.026892][T11799] __purge_vmap_area_lazy+0x935/0xc20 [ 455.032250][T11799] drain_vmap_area_work+0x27/0x40 [ 455.037253][T11799] process_one_work+0x9d7/0x1920 [ 455.042169][T11799] worker_thread+0x5da/0xe40 [ 455.046732][T11799] kthread+0x370/0x450 [ 455.050771][T11799] ret_from_fork+0x754/0xd80 [ 455.055359][T11799] ret_from_fork_asm+0x1a/0x30 [ 455.060117][T11799] [ 455.062426][T11799] Memory state around the buggy address: [ 455.068028][T11799] ffff888092eec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.076085][T11799] ffff888092eec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.084125][T11799] >ffff888092eec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.092162][T11799] ^ [ 455.098558][T11799] ffff888092eec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.106594][T11799] ffff888092eec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.114626][T11799] ================================================================== [ 455.247118][ T792] em28xx 8-1:0.89: Registering snapshot button... [ 455.345567][ T792] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input31 [ 455.473457][ T792] em28xx 8-1:0.89: Remote control support is not available for this card. [ 455.503600][ T5872] em28xx 8-1:0.89: Closing input extension [ 455.534998][ T5872] em28xx 8-1:0.89: Deregistering snapshot button [ 455.542658][T11799] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 455.549901][T11799] CPU: 0 UID: 0 PID: 11799 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 455.560473][T11799] Tainted: [L]=SOFTLOCKUP [ 455.564776][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 455.574810][T11799] Call Trace: [ 455.578087][T11799] [ 455.580998][T11799] dump_stack_lvl+0x100/0x190 [ 455.585661][T11799] vpanic+0x552/0x970 [ 455.589628][T11799] ? __pfx_vpanic+0x10/0x10 [ 455.594142][T11799] ? v4l2_fh_init+0x27d/0x2c0 [ 455.598812][T11799] panic+0xd1/0xe0 [ 455.602530][T11799] ? __pfx_panic+0x10/0x10 [ 455.606928][T11799] ? v4l2_fh_init+0x27d/0x2c0 [ 455.611592][T11799] ? preempt_schedule_common+0x42/0xc0 [ 455.617036][T11799] ? check_panic_on_warn+0x1f/0x90 [ 455.622138][T11799] check_panic_on_warn.cold+0x19/0x34 [ 455.627497][T11799] end_report.part.0+0x3a/0x90 [ 455.632252][T11799] kasan_report.cold+0xe/0x18 [ 455.636918][T11799] ? v4l2_fh_init+0x27d/0x2c0 [ 455.641582][T11799] v4l2_fh_init+0x27d/0x2c0 [ 455.646091][T11799] v4l2_fh_open+0x64/0xa0 [ 455.650427][T11799] em28xx_v4l2_open+0x11e/0x570 [ 455.655270][T11799] v4l2_open+0x1d2/0x490 [ 455.659502][T11799] ? __pfx_v4l2_open+0x10/0x10 [ 455.664255][T11799] chrdev_open+0x234/0x6a0 [ 455.668659][T11799] ? __pfx_chrdev_open+0x10/0x10 [ 455.673578][T11799] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 455.679890][T11799] do_dentry_open+0x6d8/0x1660 [ 455.684643][T11799] ? __pfx_chrdev_open+0x10/0x10 [ 455.689576][T11799] vfs_open+0x82/0x3f0 [ 455.693628][T11799] path_openat+0x208c/0x31a0 [ 455.698203][T11799] ? __pfx_path_openat+0x10/0x10 [ 455.703126][T11799] do_file_open+0x20e/0x430 [ 455.707614][T11799] ? __pfx_do_file_open+0x10/0x10 [ 455.712639][T11799] ? alloc_fd+0x476/0x790 [ 455.716954][T11799] ? do_getname+0x191/0x390 [ 455.721457][T11799] do_sys_openat2+0x10d/0x1e0 [ 455.726119][T11799] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.731306][T11799] __x64_sys_openat+0x12d/0x210 [ 455.736146][T11799] ? __pfx___x64_sys_openat+0x10/0x10 [ 455.741503][T11799] ? do_user_addr_fault+0x8d6/0x12f0 [ 455.746773][T11799] do_syscall_64+0x106/0xf80 [ 455.751349][T11799] ? clear_bhb_loop+0x40/0x90 [ 455.756009][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.761885][T11799] RIP: 0033:0x7f94d5aa7407 [ 455.766284][T11799] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 455.785874][T11799] RSP: 002b:00007fff75c553a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 455.794289][T11799] RAX: ffffffffffffffda RBX: 00007f94d62ac880 RCX: 00007f94d5aa7407 [ 455.802332][T11799] RDX: 0000000000000000 RSI: 00007fff75c55f1c RDI: ffffffffffffff9c [ 455.810285][T11799] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 455.818237][T11799] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 455.826192][T11799] R13: 00007fff75c555f0 R14: 00007f94d6413000 R15: 000055ac5cddf4d8 [ 455.834154][T11799] [ 455.837400][T11799] Kernel Offset: disabled [ 455.841701][T11799] Rebooting in 86400 seconds..