last executing test programs: 10.475261407s ago: executing program 3 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYBLOB="309e1cb0e7a11c322dee9892a42eb87e8f00a5fefe5339bd63e0109c681547cdb753bbe57ab9440c3e064d559260be95c80fb09df8e654306e3e482b4ac8bf66fffe8fd7235f43a7f4d51d2a60f8958f0f", @ANYRESOCT=r0, @ANYBLOB="8709f65dbfc2955e2366b202aef2d51cf0868e7a35c3cc9aed4bf15a4862f9aca9538c56c6762d9cf91205d993c89ced2217bfc1462c1e5fd7e8227320f3fd04776336050d27657edbc2c7e2f65facc807db609dfa98225b3ed2621d9e5f071bcb46a1429aae51e15316c7cb19dc63ee87368452be6e97c5a8f03be13ddbaf4c1c15e06deb5b90c0f4f254c1137e93392b0e55e66afcbad647389f5efc0646b7f51fdcba0e7e4f6490bb7d3d55730fb4de4d886dcca3322cb6ce09c8c014c58dee5581f3d340ad9662f8bde3e4"], 0xec}, 0x1, 0x0, 0x0, 0xb4}, 0x24048094) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x3404c8d4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000380)='net/arp\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r4 = fanotify_init(0x40, 0x40000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000009, 0x13, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 9.677253305s ago: executing program 0 (id=64): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2302, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x129d02, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xc, 0x2, @SEQ_NOTEON=@note=0x21, 0x8, 0x6, 0x5}) 9.543767102s ago: executing program 3 (id=65): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000b86dd0f1c3dc99e804000000", @ANYRES32=r2, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xfffb, 0x4, 0x7, 0x8, 0x61134d30, 0xdf9, 0x6, 0x6}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003200)={0xffffffffffffffff, 0xfffffffffffffff9, 0x9, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x9}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000, 0x56d], 0x80ad003}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.376758972s ago: executing program 1 (id=68): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffe01, 0x8080000, 0x2, 0xffffffffffffffff, 0x8}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = getpid() r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x5}, 0x4, [0x1, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xffffc, 0x0, 0x9, 0x9, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x5f1, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0xfffffffe, 0x2, 0x100e, 0x7, 0x100003, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xbcd5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x9, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x5]}, 0x45c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000240)={0x10, 0x1, {0x54, 0x3ff, 0xf80, {0x78, 0x4}, {0xcc, 0x5}, @ramp={0x81, 0x1, {0x8000, 0x2, 0x1}}}, {0x53, 0x9, 0x2, {0x6, 0x1}, {0x401, 0xfff}, @cond=[{0x5, 0x9, 0x1, 0x9, 0x6}, {0x3, 0x6, 0x80, 0x5, 0x7, 0xc000}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r6}, 0x10) r7 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) 8.258436828s ago: executing program 3 (id=69): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) setuid(0xee00) (async) open$dir(0x0, 0x26003, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0xcc, 0x0, &(0x7f0000000340)=""/204, 0x7d, 0x0, 0x50, 0x33, &(0x7f0000000440)="d7bf79c0777dcae7c0f6263a79bf0526a545ceec253563ca7bfe057c0b3a64f431ac2602052cb3aa12e1a6bd479dcb0120f42e668c5b41290a34d99d3323f79fdc52a255a4ca6d86b44721c7fda489c4", &(0x7f0000000540)="33f2b10ae7e2d621c4ac24e85a7ed4d56f40f8d9720224c4d9eb483f9c5fa6d86c829cba5fdb80c0503443b30b03d439767f9a", 0x2, 0x0, 0x80000001}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000060000008000000042000000", @ANYRES32, @ANYBLOB="0000040000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r4}, 0x38) 8.008151203s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x9, 0x3) 7.846177384s ago: executing program 3 (id=71): r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000000)=0x9, 0x0, 0x4) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)={0x0, 0x18, 0x4, "a7c3ad4c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0xc, 0x4, "0efc39b5"}, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xd, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.579093704s ago: executing program 0 (id=72): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', 0x659bcf45390a88fd}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00068018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 6.455731867s ago: executing program 1 (id=73): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x19d1, &(0x7f0000000500)={0x0, 0x36b7, 0x10100, 0x7fffffd, 0x18000020}, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000840)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = socket(0x80000000000000a, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)={0x1e8, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r10 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r11}}, 0x48) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x4) 6.103983371s ago: executing program 1 (id=75): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f0000000000), 0x0) accept4(r0, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 5.841048551s ago: executing program 4 (id=76): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x59565955, 0x280, 0x168, 0x0, @stepwise={{0x1ff, 0x6}, {0x3, 0xb}, {0x80007ff, 0x81}}}) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000300)='e', 0x1, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000002c0)={0x1, 0x10001, 0x3}) keyctl$read(0xb, r2, &(0x7f00000001c0)=""/172, 0xac) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000005c0)="2f26a02a6e90a3f073a2194b62c0c051ce5e593dc9dd6555ac9f496b0756f0b2fc907d416e56860700000000000000aae2d29cfdf0531e94fdc22ab89ce45c0f8db6c31aaf43c4c6dcd54dda6490902de25dc499665422706a55d92f59139edd8c5f373aa72dfedeef7355b6866cdacf20d7c3a2262fcd6d662a5dd230fcc07dce2a60ccaf35b0fe0200000000000000c1d18acde4f9b3274c19bfff3b44c82c4823f1edd63c8b0993b35ff4d0bab1198bfb3e0ea932d7ab0a520d6cc7394a4aa86913a429b8df12", 0xc8, r2) r4 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r1, r3}, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x5e22, 0x400f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x8}, 0x1c) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000400)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa737", 0xd}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9c, '\x00', r10}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003c00080028bd7000fddbdf2502080003000300000008002400080000000c00020007000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) sendmmsg$unix(r5, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x40000a0) 5.600504582s ago: executing program 0 (id=77): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x81) socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x3, 0x3f, 0x0, r2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.508062538s ago: executing program 4 (id=78): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x80046) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000094616049d88f377a5b6136319038e4859f9f5e42dd", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r9, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000140)=0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.703573823s ago: executing program 2 (id=79): r0 = socket$kcm(0x10, 0x2, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket$key(0xf, 0x3, 0x2) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439, 0xffffffffffffffff}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) (async) get_robust_list(r1, &(0x7f0000000400)=&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)}}, &(0x7f0000000440)=0x18) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@getqdisc={0x30, 0x26, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x6, 0xfff1}, {0x10, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0xc095) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002", 0x17}, {&(0x7f00000001c0)="eb0b0baae0b3736f28e6bf666e452458829a79c3c3d6f76e54f14ae1cb0e5b80a59315810e90d94cd19786b489337dd3c3", 0x31}, {&(0x7f0000000280)="4a87530ba77d97235ca5b5448a24cde12b644b9f6dba230a9436ae549bbbb871a74f5cd299de1d5a1ba57ac12a77", 0x2e}], 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200400, 0xa) (async) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)="180c4552", 0x4) (async) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) socket$nl_generic(0x10, 0x3, 0x10) 4.638385703s ago: executing program 3 (id=80): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000008, 0x31, 0xffffffffffffffff, 0x7dbee000) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a00000009500000000000000375d707c50a665bdbb0192a5385748d1e061ae1ff64cd83a87301d4df359834deb6d9430b29cbf2f816075e35b1ecdb30e76662d5052593f7aa8e1a32c87940e258725b5bc2e2b01589debbc8b2941abda29488155732b913be663dbe8956c05cd7cdd62cfe5dba668a680c9069fe3bd05e1c4049ab4d6d155a2fdc63014d28e28"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x10, 0x2c, 0xff, @remote, @local, {[@dstopts={0x21, 0x0, '\x00', [@generic={0x4}]}]}}}}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) r5 = inotify_init1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x400000000000002, 0x5, 0x3}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000002c0)={r10, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f00000001c0)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="e00844a8c4e9e336f39db893e8e5572b6d9f75aebf5e55f2eaa02d5b1acffcf377e6352cbac042a15eca0a6f1e5e02246636954a2b8807c490d9548fae948e85ca2b597566b803e1abd2f87b6042b7311e1e5de437d57a4e0aaac74aaf362e90a74ac39f3e39e595a9ee3355af7fec68b727409f13a5c78e8f1bbd9b891dc2ea73606c8e85987972c8e14e765859925577a8dd98", 0x94}, {&(0x7f00000002c0)="c6e37e7103dfda9aa9241fbe06cecf0e7edc16445ad6dcb090b027723b74b99f54f636eb911038ff996b227bcdd241b161cbaa896fb1322f1de00dd8b66a2accda031e15556462c935cd790a721fe571b72a9844b883", 0x56}], 0x2, &(0x7f0000000380)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xab}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffff5e83}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0x0, 0x5, 0x1000, 0xd, 0x4451, 0x8, r10}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x800, 0x8, 0x7, 0xfffffffa, 0x200, 0x1, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8601, 0x2, 0x1}}, @init={0x18, 0x84, 0x0, {0x36, 0xf, 0x9, 0x5}}], 0x100, 0x42840}, 0x24004811) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000000c0)=0x8000007, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.587476385s ago: executing program 0 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x309, 0x0, 0x25dfdbfe, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000104050000000000000000000000000006000640000300d98b2c09747a2b2dbfa794b83c3e000500010001000000"], 0x24}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)="27b3353a51c5a424b3a2860dc16981421b3baf347b", 0x15}, {&(0x7f0000000500)="85b652de4421c01ae210beac3d29310c6005ea9b99c4846c16730f0d535167534a79b818c7463c8d1a7a70f2b8b97577d66d090d1eb02b99b4b5e45c2d92919b7feb084ee8de60712ec7e50323076ed6212d21485e5ee1ebc57909309e884ac4f17208162cbc80524d84c06133c2cfa062734de5a811a3f8e2a7e9550ca16f0bf6382faab0155841a995d143b1d62707a6095813ed2c0a95053f0102b51cb7cfa9a6", 0xa2}, {&(0x7f0000000680)="1e4a9174c920743b184123d734103a2a6686b398337bdb2e39260ec57198f1d77d677b7fed755d3cc0fce224cdbf24a1f747bfe859088eacd89c0aab12c7c3e6377e1ff314fe8ac98b20ef8d06eae7606bb231eed1d0b0df19ba9abb37054b259b7014361f1004ed8d1bda65f4d36b677b30f4b04d54433089f6295bea8e65693fe8e973a4e8d06b33a51073f9f4099e9519d0be0a31a20d420eedeaee", 0x9d}, {&(0x7f00000003c0)="efed426a7bbfa6160610918ca96ddfb32d5b4856beaf5cbdbdf5bc0a5172e0d090bc56759a067663923640c137073b4feb3c7d2ab2a2f9360fadd0cfe121337f3daac1fb325160c9e0aaac99", 0x4c}, {&(0x7f0000000740)="9865db561d9c47b650a8c2a001996db60adf5572d06a0d921424775d7df76f3873fe38bb0a5af5d9d7d71a436e9aaac68e34612ef0d1b9d286682039ec73b3755ffe5e8b370785e77b806ac4968c5563ae8456d54dff7bf47fd0b67070cd7acc84c618b6bf943ded3a6d1773d742c56b2c437fd197a5c43682bb7c1d7109163c48e9fe3f7fff74dbf65c2270f4e8fb6cc884dee0149dc91af3a437a5468d50143bd901a2b8976a15ab4084f3458267b167c28f70fb4e9be16157cd38376382f392d1a54021ae9c7fc1f816cf3d", 0xcd}], 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 4.581791069s ago: executing program 4 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='f2fs_issue_reset_zone\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r2, 0x2) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)={0x68, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x377}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x75c}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x24000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c060000000000000031ffd78c471237d81e914914ab77713c597b8fb33da8f16dff4af118267581e38620a6e8df27948b154fb8fd3448549b42e68957febb0622db8e4c8286e883bacdf5800387410fb6aae6cdd8c373961a3bdc50771636fbbd5ed0aa26ef56e217e67c44154046562b2ea1d9e174b1e4dc8c29da8ca675dc0cc7505eb63d8baff4f812e0e8f69dde09497efab2425a988408", @ANYRES16=r5, @ANYBLOB="04002cbd7000fcdbdf250100000008000400ae0a000005000500070000000500050008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e", 0x2c}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) fcntl$lock(r2, 0x24, &(0x7f0000000740)={0x1, 0x0, 0xe6a, 0xa}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021810001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ac1414aa000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc01000000000000000000000000000000000000000000000700190000000000020000000000000000000000000000000a000000000000000000000000000000000000000000000100"/216], 0xd8}}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00'], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYRES64=r4], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) wait4(0x0, 0x0, 0x2, 0x0) 4.408105307s ago: executing program 1 (id=83): unshare(0x6a040000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$inet6(0x10, 0x3, 0x0) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 4.407645575s ago: executing program 4 (id=84): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x2a4c0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r3}, 0x10) socketpair(0x0, 0x0, 0x0, 0x0) 4.240207482s ago: executing program 2 (id=85): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 3.580354875s ago: executing program 0 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xdc, 0x2f, 0xf1, 0x8, 0x3eb, 0x21fe, 0x4ef3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0xac, 0x1, 0x95, 0x7e, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x1, 0xb}}]}}]}}]}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, r4, 0x2f, 0x18, 0x4, @void, @value=r3}, 0x20) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg(r0, &(0x7f0000009840)=[{{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f0000000640)=""/160, 0xa0}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000004c0)=""/110, 0x6e}], 0x6, &(0x7f0000000840)=""/90, 0x5a}, 0x7}, {{&(0x7f00000008c0)=@un=@abs, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000200)}, {&(0x7f0000001a80)=""/128, 0x80}, {&(0x7f0000001b00)=""/95, 0x5f}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/161, 0xa1}, {&(0x7f0000001d40)=""/179, 0xb3}, {&(0x7f0000001e00)=""/100, 0x64}, {&(0x7f0000001e80)=""/224, 0xe0}, {&(0x7f0000000280)}], 0xa, &(0x7f0000002040)=""/237, 0xed}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002140)=""/165, 0xa5}, {&(0x7f0000002200)=""/56, 0x38}, {&(0x7f0000002240)=""/19, 0x13}], 0x3}, 0xa994}, {{&(0x7f00000022c0)=@alg, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)=""/209, 0xd1}], 0x1}, 0x5}, {{&(0x7f0000002480)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002500)=""/1, 0x1}, {&(0x7f0000005a80)=""/4096, 0x1000}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000007b80)=[{&(0x7f0000002580)=""/113, 0x71}, {&(0x7f0000006a80)=""/246, 0xf6}, {&(0x7f0000002600)=""/192, 0xc0}, {&(0x7f0000006b80)=""/4096, 0x1000}], 0x4, &(0x7f0000007bc0)=""/19, 0x13}, 0x3ad6}, {{&(0x7f0000007c00)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000007c80)=""/35, 0x23}, {&(0x7f0000007cc0)=""/90, 0x5a}, {&(0x7f0000007d40)=""/67, 0x43}], 0x3}, 0xa}, {{0x0, 0x0, &(0x7f0000008240)=[{&(0x7f0000007e00)=""/133, 0x85}, {&(0x7f0000007ec0)}, {&(0x7f0000007f00)=""/205, 0xcd}, {&(0x7f0000008000)=""/177, 0xb1}, {&(0x7f00000080c0)=""/216, 0xd8}, {&(0x7f00000081c0)=""/40, 0x28}, {&(0x7f0000008200)=""/62, 0x3e}], 0x7, &(0x7f00000082c0)=""/236, 0xec}, 0x5}, {{&(0x7f00000083c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000009700)=[{&(0x7f0000008440)=""/225, 0xe1}, {&(0x7f0000008540)}, {&(0x7f0000008580)=""/4096, 0x1000}, {&(0x7f0000009580)=""/24, 0x18}, {&(0x7f00000095c0)=""/88, 0x58}, {&(0x7f0000009640)=""/146, 0x92}], 0x6, &(0x7f0000009780)=""/153, 0x99}, 0x1200}], 0x9, 0x2020, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) r7 = syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xffffffffffffffdd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_pressure(r10, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r11) 3.469236707s ago: executing program 3 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000700)={0x18, &(0x7f0000000440)={0x40, 0x13, 0x1, "cb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000002a80)={0x44, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x4) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0xce, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 2.608955395s ago: executing program 4 (id=88): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a3", 0x1) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0xc00) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=@delqdisc={0x25c, 0x25, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x8, 0x13}, {0x3, 0x5}, {0xffe5, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x100, 0x4, 0x0, 0xffff, 0x0, 0x4}}, {0xc, 0x2, [0x5, 0x0, 0x100, 0x4]}}, {{0x1c, 0x1, {0x3, 0x4, 0x2, 0x2, 0x2, 0xfffffffe, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x6, 0x9, 0x4, 0x0, 0xfffffff9, 0x8, 0x4}}, {0xc, 0x2, [0x9d, 0x4, 0x5, 0x5]}}, {{0x1c, 0x1, {0xa4, 0x0, 0x10, 0x9, 0x0, 0x0, 0x100, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x2, 0x5, 0x10001, 0x2, 0xdeb2, 0xfffffffc, 0x9}}, {0x16, 0x2, [0x9, 0x9, 0x2, 0x4, 0x8, 0xec33, 0x8, 0x3, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xea81}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0x2, 0xd7, 0x0, 0x7fffffff, 0x4f45, 0x4}}, {0xc, 0x2, [0x9, 0x6, 0x9e50, 0x8]}}, {{0x1c, 0x1, {0x7, 0x3, 0x0, 0x24, 0x2, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0xc, 0x3, 0x0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x7, 0x3, 0x1, 0xfffffff7, 0x20, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x8, 0x8, 0x19, 0x2, 0x0, 0x3ff, 0x3, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x5, 0x4, 0x6, 0x3, 0x2, 0xfffffffd, 0x18b, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0x9, 0x2, 0xa, 0x8, 0x1, 0x5, 0x2, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0x3, 0x9, 0xf2e7, 0x2, 0xdb0699b7bce12fd5, 0x80000000, 0x4, 0x8}}, {0x14, 0x2, [0x1, 0x8, 0xfffa, 0x7, 0x1, 0x7, 0x3, 0x7]}}, {{0x1c, 0x1, {0x9, 0x2, 0x6, 0x5, 0x1, 0x8, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0x8]}}, {{0x1c, 0x1, {0x9, 0x80, 0x4, 0x6, 0xcd434952dedacc0d, 0x80000001, 0x7, 0x2}}, {0x8, 0x2, [0x7f, 0xf5d]}}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x2008000) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 2.482978935s ago: executing program 2 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x8080000, 0x4000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x20}}, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x570, 0x0, 0x3}]}) 2.226542944s ago: executing program 2 (id=90): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80046) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000094616049d88f377a5b6136319038e4859f9f5e42dd", @ANYRES16=r11, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000140)=0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.625106133s ago: executing program 1 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x80) 813.639384ms ago: executing program 1 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x80) 791.159419ms ago: executing program 2 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2032) sendmmsg$alg(r7, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="0212eef6833ad3ae31a362cc6ffd182b30df8fb9cdb8c629e33c76", 0x1b}, {&(0x7f0000000340)="761ce81ca33927d08d66811e5e6cd1219a1eb1a2ee7ea03f110038c33320b34cedcdc63719", 0x25}, {&(0x7f00000004c0)="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", 0xfb}], 0x3, 0x0, 0x0, 0x4c0c0}, {0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)="ffe5953298f1a00ed63cc109f8dc234a12f205353949d19e154f4beb56e8b601dd88880ab13001db16ec83e461a00337582442ad703fb1b03552e0c59e6c61495ba61d0e3256b7071e092c00696c3880f3ed6fc8948b2a16905194d8c369de8888168bf3ae058e902f9f516e0fc069c3cdc38bc64c45565e5e8d634841bc20736d9deede3ad2ad6ececd00d9fb42702535dec549edaec3ad4e010eea5ea5459abf7476ec0450adbbdf0b58fcc479c612645e98d2087c00238d9b56a1c4d33f8a836c7c51cf2135fea4723d1276cc3c103e3966d48c423b1a24ab96cf0e488e84ede932247ae3e570de59ef", 0xeb}, {&(0x7f00000005c0)="53806f3cabb00d1836d651cb7a7e299bf53019a324c6be5e515c9789b9ea916944b5b86fe2ae5dc8d12fc8a3f58733dc18990cb7177b51226574d73c20d852d707146eafa9222963d2ef5ab62c94e49a6337580c712f7b3776ca21264e", 0x5d}, {&(0x7f0000000780)="424f3a28de387652c39d62e0aa5301646fdc373153092152c49b5588d2afb2937aa5af0cf56fbb5e9dee75dfee5024616a97747fa606837cee746df0f0a02e83d3e6b3260aee8614d1cd46f384", 0x4d}, {&(0x7f00000003c0)="9a6756c8b3655f59a2b2", 0xa}], 0x4, &(0x7f0000000800)=[@op={0x18}], 0x18, 0x1840}, {0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="b17616459a60228db12696a80f222af0184b07a4e5b1acf2a231e4d6bc8bacbeb0b51c1e1a1e43cd1f6d8d789594acc123b469b28e6abbd1ec8ab4900fae550f93e8aa110c691f8d826645a3fb58722c4a7ed6ad693d8b6af1ab4cf57e8239c86a85355e312657142bb015c688c0baf1fea75f018ef01bf0b9827afd1549b66885c2b1420dccb613acc811afcd6ee8d97d493809862632384235d05b762a166099d923e9a32f25af82ce3c668d52f2f0d9eaa07329986895582e3817a79fbd39b3dbf8c44ff12899c2bcb62d1746352d23c64db58f0d90cd2f8dd1353d453e1cefd672f3ed29d98a8d", 0xe9}], 0x1, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000014c0)="3f6d4fcf0de8e9a996bdbc87d1535c9fd5429ffaeb79a4fac099fe483fd95e87578196fa4e1574e2e2d098bee54ce19f2722d22781f72dc46a4f590cb2c4067cbf64de8c93e3797ce54268a02e0d66760830ce354b2286988caf789d2f3e4cd6e0a8aa11eee296721c8e71d0bcbbe82435799ca82a122182c1bd54ed161b046c79b4db0215e339406ba62bcf5797c86aeb449b5ff62d2a0a2d808cb9513c306ca9c2e72c4fecd76d2bbf45700603229bf06be7f1b1187eb83ffc46293dcfab1d7f48bebb39e6b8b8afb867c7160b79c6009f7d0308d75a400a72ad946a078da8ea555ff2ce2de6a84fbcff4f4a15d495dc4fe008586b09ab8f08db7ecf81c6f45298b5c1bfa7cfb29ab525c4bad68006d5ba13ffdb0257a50733ac3267bfa4810140da147a91802777ae0d6c382f7a8d0b2b6849205904fbf6b39ddeb16a0982a9c28929f0345d8d1d0d019688319a9544075b3a828f74a8a83d746b8ebe223f523558bc13f99dc9387660efb375d9adf96d5ad1a796f1b89c0da7bdd760a19ad1271cce8c01ceac2e7f6e0a09343623b047d4488f8d78ceed2dc9e03909253325bc302514863dd95f3d1375646249998c37454d71f2e830e0570ac347b46c60275a5c923da69600f20766cb5e9b00d17494736fd0ff6e7972a0b60f27179969e1f159ff7d05eca4f773f76f46ad155a5ffd0128037efa549128394987549bfbc7159115d8b3e234c2f0a1b5a1b925f619021b84fe253521a58a8f10652e00186e6a134137f2a9f76241e7872b2b0f95a99a0296caa8a9c65ca4d2d4baeebe871dd95af51a5596493913a37450a458335b344fdeef817c4e188d3f0667dc72d90394d668226b390a6665c446beeb5df881f2304335b7f45d6336be9fc912fc302e8f68a8e61b79d38935cb8c09b900c9bca44f9ec5bac539fc888c21cf10b1f6888ed4682c09095e1155cdf8eda0802e63f4f27c489a1fc988d8da43b4b139294136483330086505be5127c67f2fd9a2d9c30386a45f2957be47f57ce763087a864f9788520a40da1f9d6f0ea6f08184ad7c504f2ca7101a24832d48ac7619bf1d46295014dbec2514d799404da9ef8c66af06422d566c22300919df854cd6a43ed8bd546bb6dee4da0d52a61bdff400b8ec6e1b199233b4690fd5528fb8d4f9ea098dd1c3b150f8835cf31de98e849bd7fde1b26124012651159172f61799aacc11f60e86be3417033d52fadde7e248931693b26b7a10403e12972c06636c5e385c06abd5b5de6b0c71a3f6cf439f085b97d98902ea16708726147df7133baa8b46cd40d32248e346fe1e145269a6f6fde3c956f7a0b1b29c86c05cb60fdfd363bcb00576e664573fe8c78db88d5e32979c08efca22c00212650fff2721c9aacaf6919087730c57d62d51ffb11d87b8c25a982715cbd92d07e97da918cc23a740dea265d66a80705738f892abf610a5f762949b43fc0bcc7c1e9ae0f5ba0917e7c24244e9c3575f2a97d5787a851e4b39b1488e54d9305084911d7abdb448d5f111ebeb2105362b28617f1cffa41334f7eb31904fbd05e220bca67a7185894bb06813b9654459c416f2cb332c1b0db3ace795f434bbe0d9a1934db728ddff51b3a658cba5157273822599c35815f816f93af2d1537e7b3b10de455de58ecabde1b58cf4de993450832a9a65224f4696dedb24bcc150716170850486f1c542a98ad34cecc130ab171860cc7f47140761c59400e6bc6a43c78efd87909fb5be8dc20045ee0b43f64a37ddf218b928ea864f1a95574b4dac08e0624f20106313104796c3c5301f2aea83d5e26b4998fa879c325bebfff5330848317bad43e42052dc3f95c5a3a802ca1ea4e51a10ce5ce3daea49e7a3131a16a61f13bcdc8200a49ad03a9a9894b450eef49fc36a3f38f65242611892311f5aae55aa2c921964307a213c466c3ce31ab9bafdf3246112effbb6ab4010d26689ce30d1508003bf4b8c6a3b00ab129fbae7f43969971dddb83d21c2715dd8cadc835778287b2c0fe31f860cb582a477fe9703fb2feb6929a2bbc268ee19e0bf8565159d907cbbfa12a7d5e9ab7bf567749ec27fe16dd40ed6c01e85b766d271e92aaf8dd2e3b4723fbdcc3fd69b9bd6503831f456d33fbd1a249c8947d921b37d704b5be92bf4d276cc1c5a687a9330f206ff77a18ab65910f310ecba66e1d2c6704432997a296c5e444d37d1d1644d73f110bf333aa117b8eee42f60e764ab14302da40d3bda7926da6c7ad05aaf6af144f81ec5da643bc2ff33f74f6672c1bb396c9db78f8ee779d5f5a8388213a27693a7e85623a2bf5b920fbc804378086038549af3ae2e78f9b23dfa950468319020a3a94cd69f4ef8fdd4f88fdadb63234b046ef71ddff3cfca290ce4769403f23e037478cd8f6006cf51175c73888798bb3e7e6db575b5d90bce7cce3372a5d6773049c9ac896fa7f93dc91e665bcf0908ec7aa8be6d25c17c18e92accd945f30fc473e5e7dcca6b7aaf9d935517d6e62e7e8ed9e49efc9ecfb19068e00d7137a70bb07d38728ab151f1d91bb8ebf4a0780b856867cc60e3e440fcaeeb11f9ea263dc47aad828a32f24433f43c152bdb7179a05fe8f92ed9b833d33aa3ddaee2f222465d352660c8416fc4c51d06b74b5493192e28ed748259c3f8276f905c45911bd7e7508a1683ab30e1a72db61ceba80e542b3b43f49c9b28d46029454327041e6faac10a1153e4fb249ea91f7fd7b0346085cfd643e9c9376f90248e2b5218ebc8d93755d646122b419f1596efb248e82f069231bfdb270c98839856a24052b932a2cec765b090b70e8da099fc73074980c9cd6cd5fb11353e75310615b7fd415511c59c2563e23f89470396b5c94b87edef11f7bfeaf286652037cc156ee92aae7a430e40b861389faa48a092d74c459c2d39338432863a9c541120609362f7ecf23d75a2210169f763815dfa239ab40fa72e1fc148fe311ace8f1265640c66d0749ea6135375427aad5c575b1f2e4d0c7251089c2de59bd83e594ef9be4acb34a3e581fe6892457d5e094256cd89c3b55210bce85ad1e301b30b7a2a0dfb67428fcc52fbe281ca88bcc5d4597355a92bab843b31ecc05fcc7e4d1410c3d0cef93ae90a99431cc086d502e54a65bfb5a257671eceab3bba63c4b3b80d825a303f52a9518d52ebe48cdbfca1b6db95ecace0d047c117ee8b4c13f6d12a1d16b09656681b65d2cf09c41951952a61bb6c3873f1b86bef8def2300db0789f3ccbfffba7e72fd8f3c09e3d8a9be64d1ac679863eff8e84b86de06d21dee770a08950e48b6a8da7e6f505903afe1296880dca0ab6063361f39eb94c43cc75009e80d99f783f98b3bf79cc46fe565f994e29b3fb4139b44e30406aa5bbbce8e032adfcb45e4dcb9ed1ebfb7912a4eee71c9d0349b704664e2a88ff46970032c7d0a4d3d62d49beeda9f04d83ec837569c869bc62b88fb2cb41654052c9a74b74c969c0660d1e404725c8425ea85055f6456eafd21285e8df30614e8f6655f2bdb81969df3e27ea27adc1d62917bcfa3b691ae5b7a969eee287bbf45b5213fc9bbf904966eeae29aa5131229f63275a9da527736652dac052e093f9ae8a87de7424d84456fc9c7fe7e1bcf8f3997cabad2dcfcc691ec3e4e259bd48d7b2f4cffb68ade0a662a55a97802956ba66c1a617f54895fdcb48ba4ebb3aec58a0ac59827aad6ee654785c6195fc333985bf1909c91d5fcabee43e47dc25dbdfc3cfbd3e3bf901583c35353a61ba4b1f3fc4ea6da48c60c0478690f4028bb13c9b18ae25169b6c271111267664ca0f275c66b27c7311af46c8295e3ec0cb9d267502e9c6202561065d19b4ea1f690026284f593e599a20e58696e11ea0d34c27e387fc4aa2f8a8de3a326c620388473f238bc2db49f36e8adafcad8735eddd06e0ca6dd9e1dd33e28cd91806ff2047b0a897bb21f6425af1ba91cce5a04df91770a423879a84bb12070c7f021ee90149dcef2e2a6f8f0dcad8e97733a397f9342f1a54d14021b4f6fe37a90390928b0891de62894a337bedaadec6d97044fa862779637782febdfc7f8195e74f578c7171f34275493e249df1eb375530982c40e9fe5e55c5b90907b1eecd22187a63566baa1cc804b57f4057bab9fda842176cee17459ae70570fc3ad52e87f9182bec3aadbf3632e096122d44732a152e0652e3c17750fd4ca1278660ed1db89d129b8cd4ac37ffe420b2300167e52a8a0ecbd3112f9bec564e8f335235b30a9c5c6eccd27f18e7a6426fe2908086eaf2deee4f565393702dc98bc489da47777361b99a66242643ae4ffc624f94696c4f830167e40c749bb6b868100ae8e2ade29ca177d69a78f64a66dd97efebaf736d7867afdface643d95e3be2b31124f579b100f12955bdec35e95e50dd1a20bf94fded1c9e6a222993aa5a9bc489180aa2e45dad820708aef66510d74fd4767b38f616f94077775d8d85212a61c31902298bc5cd95ab7c15921227db96c116ef6142165b3ba58575e55be1f5a2524a26ff0c7e3e842f3ae37cf33c34f523e9b2d570cc98942029d391c6fa8a89b6191658579c020ccb306e4d17600bb4a8c943846cd66b3a12d831013c5cf7754bc99f65994e80bd7ed4184d269615c446384ebbd8e7777b0795a443cd53710916e540fa2a2b44f1c2c6b52f7491b522b8ab0314a9e6cc742c544bb4b49d062729a3c27c65bb40b122661ecc9c4efef12989c5fa1a802964113d71af18910ff441ef37baac9bf372aae6d9a2543928804a5712d28091db5f03378b2018663778e41950f7559674c7b05074749554fc58ba396603ba54f1d109a19d6a086c2d4641e36f7c82d306276ad7065b486e1aa1a576a0fb6dbad01276eb9dca89105f749a61b97a69e3f4bdb4ffb8f1c306c0bc8bd28f218523f7920ba229917972bddadc63314f56e2cfdb197958083fb8d5b1dee6a142a9418a505290e97744c94ed8e6c133a6dad8807802178db0418417a172e40bb6d28755d64865e98949617b444c4f506a98138526a13a764a55fa97f4332c13574d1dfccc42b0136646faf29240613825b026bb78bc1c386c66e4ae7e0c543dd14838cc704d0ecc6d4bdf9124b424262268e762a87cf8d3b40f0b31908b3ce206a8ebe247161b14a33e28c2f2c7b1da749c1af80f8546e5db1c8ab5cbd25058e408bd8a814c4c072cdca55fd54b682c02b5323b9c4a0febf447a04c08f5b550e7e432a2a30dbea054872b112bd6aaf0620c6ee435d053218728e9fd799559f6a75786725edfde83534c6ecb59c49675638f32a60eaaba988ea250b2824157ac37564023375266f6ed296a2aa8dae1103d0866e735dc78330b9f20500fffd62285cd260425fd880ce992373669fb99e31835011b85012be2dcc57e569f2e0f24c13730b7b55084dc4d44e0844e0d49847ae34f2ac7fcb10d3ac652bfab5b93f5a4fc1b60ce40ed1d74b96e69ea37abc9c71fd8f64b54655be2f35193e76cf2d00f09d0626a3e214ca10780044875cc271c31fdddb51dcb4a8934f35b7baddad6746b688f2453c0fb9a6822a1df7fa4dcbe9f597eacf75b18a37bcb96796f11623682de964cd9bbaf049547949df82d7ffd73e7a54d99e751049dbfbb5b82e98d70f3d7bde77d5b8339fd5062d182e6515c4ddc5e32af444318b848b785833a9a3fc88103bfb03814a0facfa70475b0d43f1a6c779e1e58c24f5b441bd02f8bec8de7e8795e117a32cc2bfe94fa71b9409c69b1e3b915a679dfe062f3b23c7ac", 0x1000}, {&(0x7f0000000980)="ca327373acd5c5f835932f26f4e7bb3f71bc12eb88d1c062aa26334be8c2dbc7daf7d68e62851f4052b966c9f3ac07d8c8362e5de9d5ef8d10fdcce43629c4e65af3ea13dfe95446e95e036bd6d78129f0713a4b47b92abaf8447749923742a3eba20753121818437859bece5f086ab16d14b309c3d628f0690be23ad7614f75bd9cbbbb3b854731ce05aad9533cb2df5871345bd7fbe0fc6d82fcada3428d9663ebb68ae9a9f3d50a2731d5d6e298bfbd7432e5326afc4a32c3531ebda5a09d86d9a8", 0xc3}], 0x2, &(0x7f0000000ac0)=[@iv={0x98, 0x117, 0x2, 0x81, "e02edaf3d4f61f41d5dbfac3c5c4136d89cc9c698c861bd0f854ccebd497a7c7ff27b1fedf8eccc1e49b132f16ba619682a4478609812dc10b397a909b63ebbbcb848a1ee4a9ae23b5dd1cfc96fbd1215aa8a9e96a4bbd73e6e3825a5b67630c37d4454eb8484a3a37be59be1c77254151b7c8f1507f681b280fae2b83f963f3af"}, @iv={0x30, 0x117, 0x2, 0x15, "b97ad69faa06a841ab403aafdc3ff5b7e94a8da445"}, @assoc={0x18, 0x117, 0x4, 0xfffffffd}], 0xe0, 0x20040001}], 0x4, 0x4) sendfile(r5, r7, &(0x7f0000000180)=0xb4, 0xfd7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000180c200d2ef0f78a4a450590c8d000008004500001c00000000001190780800001ce2000001000017c100089078"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x80) 592.564847ms ago: executing program 4 (id=94): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x4001, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x1, 0xefff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, 0x0, 0x0) syz_usb_connect(0x2, 0x5a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) dup(0xffffffffffffffff) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 0s ago: executing program 2 (id=95): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x80046) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000094616049d88f377a5b6136319038e4859f9f5e42dd", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r9, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000140)=0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. [ 58.655347][ T30] audit: type=1400 audit(1753561217.272:62): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.658854][ T5815] cgroup: Unknown subsys name 'net' [ 58.678107][ T30] audit: type=1400 audit(1753561217.272:63): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.707886][ T30] audit: type=1400 audit(1753561217.332:64): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.892710][ T5815] cgroup: Unknown subsys name 'cpuset' [ 58.900770][ T5815] cgroup: Unknown subsys name 'rlimit' [ 59.045173][ T30] audit: type=1400 audit(1753561217.662:65): avc: denied { setattr } for pid=5815 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.076955][ T30] audit: type=1400 audit(1753561217.662:66): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.108963][ T30] audit: type=1400 audit(1753561217.662:67): avc: denied { write } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.129636][ T30] audit: type=1400 audit(1753561217.662:68): avc: denied { read } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.137167][ T5817] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.150384][ T30] audit: type=1400 audit(1753561217.672:69): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.183835][ T30] audit: type=1400 audit(1753561217.672:70): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.207084][ T30] audit: type=1400 audit(1753561217.702:71): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.071638][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.823689][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.834469][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.842000][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.849801][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.857219][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.864921][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.867592][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.872884][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.880220][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.887745][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.894926][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.902199][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.915307][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.922427][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.930491][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.940915][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.950594][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.959708][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.968389][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.975771][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.985542][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.991192][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.000107][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.023076][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.030752][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.398366][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 63.424997][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 63.572432][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 63.581979][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 63.602512][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.610063][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.617606][ T5827] bridge_slave_0: entered allmulticast mode [ 63.624338][ T5827] bridge_slave_0: entered promiscuous mode [ 63.673190][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.680356][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.687516][ T5827] bridge_slave_1: entered allmulticast mode [ 63.695523][ T5827] bridge_slave_1: entered promiscuous mode [ 63.747776][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 63.759909][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.767094][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.774343][ T5832] bridge_slave_0: entered allmulticast mode [ 63.781698][ T5832] bridge_slave_0: entered promiscuous mode [ 63.794216][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.810386][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.817484][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.824841][ T5832] bridge_slave_1: entered allmulticast mode [ 63.831615][ T5832] bridge_slave_1: entered promiscuous mode [ 63.843986][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.923497][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.930664][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.937796][ T5825] bridge_slave_0: entered allmulticast mode [ 63.945536][ T5825] bridge_slave_0: entered promiscuous mode [ 63.954248][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.966359][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.975528][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.982833][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.989928][ T5833] bridge_slave_0: entered allmulticast mode [ 63.996661][ T5833] bridge_slave_0: entered promiscuous mode [ 64.005509][ T5827] team0: Port device team_slave_0 added [ 64.013776][ T5827] team0: Port device team_slave_1 added [ 64.023025][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.030247][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.037368][ T5825] bridge_slave_1: entered allmulticast mode [ 64.044162][ T5825] bridge_slave_1: entered promiscuous mode [ 64.065475][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.072978][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.080067][ T5833] bridge_slave_1: entered allmulticast mode [ 64.086941][ T5833] bridge_slave_1: entered promiscuous mode [ 64.137806][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.145029][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.171588][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.184715][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.191886][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.218084][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.238143][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.249397][ T5832] team0: Port device team_slave_0 added [ 64.276470][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.295839][ T5832] team0: Port device team_slave_1 added [ 64.311857][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.323421][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.343716][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.350834][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.357943][ T5828] bridge_slave_0: entered allmulticast mode [ 64.365895][ T5828] bridge_slave_0: entered promiscuous mode [ 64.401540][ T5833] team0: Port device team_slave_0 added [ 64.416703][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.423943][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.431451][ T5828] bridge_slave_1: entered allmulticast mode [ 64.438032][ T5828] bridge_slave_1: entered promiscuous mode [ 64.454285][ T5825] team0: Port device team_slave_0 added [ 64.461269][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.468210][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.494193][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.505823][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.512833][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.538771][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.553210][ T5833] team0: Port device team_slave_1 added [ 64.569014][ T5827] hsr_slave_0: entered promiscuous mode [ 64.575462][ T5827] hsr_slave_1: entered promiscuous mode [ 64.591713][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.602410][ T5825] team0: Port device team_slave_1 added [ 64.609558][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.666102][ T5828] team0: Port device team_slave_0 added [ 64.679979][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.687713][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.713786][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.733958][ T5828] team0: Port device team_slave_1 added [ 64.740194][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.747124][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.773253][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.789789][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.796826][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.822888][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.848396][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.855469][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.881704][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.926070][ T5832] hsr_slave_0: entered promiscuous mode [ 64.932234][ T5832] hsr_slave_1: entered promiscuous mode [ 64.938049][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.946342][ T5832] Cannot create hsr debugfs directory [ 64.959970][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.966994][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.993014][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.005128][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.012388][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.038954][ T5845] Bluetooth: hci0: command tx timeout [ 65.042369][ T5845] Bluetooth: hci4: command tx timeout [ 65.044397][ T5838] Bluetooth: hci2: command tx timeout [ 65.050016][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.100271][ T5838] Bluetooth: hci1: command tx timeout [ 65.100275][ T5845] Bluetooth: hci3: command tx timeout [ 65.156921][ T5828] hsr_slave_0: entered promiscuous mode [ 65.163767][ T5828] hsr_slave_1: entered promiscuous mode [ 65.169938][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.177862][ T5828] Cannot create hsr debugfs directory [ 65.198027][ T5833] hsr_slave_0: entered promiscuous mode [ 65.204095][ T5833] hsr_slave_1: entered promiscuous mode [ 65.209904][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.217681][ T5833] Cannot create hsr debugfs directory [ 65.254040][ T5825] hsr_slave_0: entered promiscuous mode [ 65.259994][ T5825] hsr_slave_1: entered promiscuous mode [ 65.266239][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.274069][ T5825] Cannot create hsr debugfs directory [ 65.500775][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.511202][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.534157][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.569625][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.638334][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.661491][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.677903][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.688074][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.741314][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.754878][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.770584][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.782251][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.864604][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.874985][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.884051][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.899122][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.919739][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.986460][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.996519][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.009047][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.016292][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.028774][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.040072][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.049994][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.059502][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.087765][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.094863][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.129824][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.157017][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.164186][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.233219][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.242380][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.249462][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.262927][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 66.262939][ T30] audit: type=1400 audit(1753561224.882:86): avc: denied { sys_module } for pid=5827 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.284371][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.310103][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.361988][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.377422][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.384570][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.409882][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.417033][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.432008][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.439098][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.466175][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.473251][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.513916][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.578400][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.593717][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.646343][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.747317][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.791341][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.798426][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.815894][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.823036][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.836555][ T5827] veth0_vlan: entered promiscuous mode [ 66.901604][ T5827] veth1_vlan: entered promiscuous mode [ 66.913031][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.935063][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.956091][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.013605][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.079842][ T5827] veth0_macvtap: entered promiscuous mode [ 67.101113][ T5845] Bluetooth: hci2: command tx timeout [ 67.112944][ T5838] Bluetooth: hci0: command tx timeout [ 67.112938][ T5845] Bluetooth: hci4: command tx timeout [ 67.145817][ T5828] veth0_vlan: entered promiscuous mode [ 67.152752][ T5827] veth1_macvtap: entered promiscuous mode [ 67.176584][ T5828] veth1_vlan: entered promiscuous mode [ 67.183136][ T5838] Bluetooth: hci1: command tx timeout [ 67.190336][ T5838] Bluetooth: hci3: command tx timeout [ 67.216313][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.250055][ T5832] veth0_vlan: entered promiscuous mode [ 67.276481][ T5832] veth1_vlan: entered promiscuous mode [ 67.299214][ T5828] veth0_macvtap: entered promiscuous mode [ 67.310083][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.329393][ T5828] veth1_macvtap: entered promiscuous mode [ 67.356395][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.365464][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.378398][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.387293][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.438850][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.468003][ T5832] veth0_macvtap: entered promiscuous mode [ 67.488451][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.503455][ T5832] veth1_macvtap: entered promiscuous mode [ 67.522860][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.547033][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.550809][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.560446][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.572391][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.581843][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.590713][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.624799][ T5833] veth0_vlan: entered promiscuous mode [ 67.638997][ T5833] veth1_vlan: entered promiscuous mode [ 67.683092][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.695644][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.713471][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.735030][ T5825] veth0_vlan: entered promiscuous mode [ 67.746854][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.754661][ T30] audit: type=1400 audit(1753561226.372:87): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.v3ghWr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.779387][ T30] audit: type=1400 audit(1753561226.372:88): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.801746][ T30] audit: type=1400 audit(1753561226.372:89): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.v3ghWr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.828500][ T30] audit: type=1400 audit(1753561226.372:90): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.832111][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.859067][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.864005][ T5825] veth1_vlan: entered promiscuous mode [ 67.874811][ T30] audit: type=1400 audit(1753561226.372:91): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.v3ghWr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.903896][ T30] audit: type=1400 audit(1753561226.372:92): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.v3ghWr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.934701][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943700][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.952485][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.961359][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.970429][ T30] audit: type=1400 audit(1753561226.382:93): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.992539][ T5833] veth0_macvtap: entered promiscuous mode [ 68.002651][ T5833] veth1_macvtap: entered promiscuous mode [ 68.014241][ T30] audit: type=1400 audit(1753561226.402:94): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.015448][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.059273][ T30] audit: type=1400 audit(1753561226.402:95): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="gadgetfs" ino=6934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.102049][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.115883][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.127482][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.186092][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.263897][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.275452][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.290958][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.299725][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.586650][ T5825] veth0_macvtap: entered promiscuous mode [ 68.635706][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.644578][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.657712][ T5825] veth1_macvtap: entered promiscuous mode [ 68.712175][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.764667][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.777706][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.792492][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.803161][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.839889][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.872884][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.882487][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.181193][ T5838] Bluetooth: hci0: command tx timeout [ 69.185421][ T5845] Bluetooth: hci4: command tx timeout [ 69.186699][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.191998][ T5831] Bluetooth: hci2: command tx timeout [ 69.210609][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.261372][ T5838] Bluetooth: hci3: command tx timeout [ 69.261380][ T5845] Bluetooth: hci1: command tx timeout [ 69.359658][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.422849][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.472734][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 69.520888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.529963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.538665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.714218][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.762186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.771065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.864591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.873520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.967098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.976068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.069410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.352995][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.419125][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.748181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.766755][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.877536][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.885291][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.901138][ T5967] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.908685][ T5971] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.968187][ T5977] ======================================================= [ 70.968187][ T5977] WARNING: The mand mount option has been deprecated and [ 70.968187][ T5977] and is ignored by this kernel. Remove the mand [ 70.968187][ T5977] option from the mount to silence this warning. [ 70.968187][ T5977] ======================================================= [ 71.004569][ T5977] Invalid source name [ 71.008540][ T5977] UBIFS error (pid: 5977): cannot open "./file0", error -22 [ 71.090254][ T5973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.107297][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 71.114578][ T5971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.267856][ T5838] Bluetooth: hci4: command tx timeout [ 71.267873][ T5845] Bluetooth: hci2: command tx timeout [ 71.273649][ T5845] Bluetooth: hci0: command tx timeout [ 71.341379][ T5838] Bluetooth: hci3: command tx timeout [ 71.347278][ T5845] Bluetooth: hci1: command tx timeout [ 71.532476][ T5967] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 71.976488][ T5971] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 71.986807][ T5967] usb 5-1: config 64 has no interface number 0 [ 71.995348][ T5967] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.025448][ T5967] usb 5-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 72.037101][ T5967] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 72.047662][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.056036][ T5971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.065264][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.100328][ T5971] usb 3-1: Product: syz [ 72.118650][ T5971] usb 3-1: Manufacturer: syz [ 72.136881][ T5967] usb 5-1: probing VID:PID(2201:012C) [ 72.161755][ T5971] usb 3-1: SerialNumber: syz [ 72.169008][ T5973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.182944][ T5967] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 72.198109][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 72.198122][ T30] audit: type=1400 audit(1753561230.812:130): avc: denied { create } for pid=5980 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.232212][ T5973] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 72.250527][ T5967] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 72.270950][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.303449][ T5973] usb 1-1: config 0 descriptor?? [ 72.324573][ T5967] vub300 5-1:64.19: probe with driver vub300 failed with error -22 [ 72.374483][ T5973] pwc: Askey VC010 type 2 USB webcam detected. [ 72.536577][ T5984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50704 sclass=netlink_route_socket pid=5984 comm=syz.3.10 [ 72.570794][ T30] audit: type=1400 audit(1753561231.152:131): avc: denied { ioctl } for pid=5980 comm="syz.3.10" path="socket:[7442]" dev="sockfs" ino=7442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.724179][ T5985] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 72.855900][ T30] audit: type=1400 audit(1753561231.152:132): avc: denied { create } for pid=5980 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.879625][ T30] audit: type=1400 audit(1753561231.152:133): avc: denied { write } for pid=5980 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.881798][ T5973] pwc: recv_control_msg error -32 req 02 val 2b00 [ 72.919734][ T30] audit: type=1400 audit(1753561231.172:134): avc: denied { setopt } for pid=5980 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.920889][ T5973] pwc: recv_control_msg error -32 req 02 val 2700 [ 73.239494][ T5973] pwc: recv_control_msg error -32 req 02 val 2c00 [ 73.251101][ T5898] usb 5-1: USB disconnect, device number 2 [ 73.268815][ T5973] pwc: recv_control_msg error -32 req 04 val 1000 [ 73.308499][ T30] audit: type=1400 audit(1753561231.912:135): avc: denied { kexec_image_load } for pid=5986 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 73.308695][ T5973] pwc: recv_control_msg error -32 req 04 val 1300 [ 73.452818][ T5973] pwc: recv_control_msg error -32 req 04 val 1400 [ 73.459787][ T5973] pwc: recv_control_msg error -32 req 02 val 2000 [ 73.466703][ T5973] pwc: recv_control_msg error -32 req 02 val 2100 [ 73.483753][ T5973] pwc: recv_control_msg error -32 req 04 val 1500 [ 73.489475][ T5970] trusted_key: syz.2.8 sent an empty control message without MSG_MORE. [ 73.491553][ T5973] pwc: recv_control_msg error -32 req 02 val 2500 [ 73.499172][ T30] audit: type=1400 audit(1753561232.102:136): avc: denied { create } for pid=5965 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.510813][ T5973] pwc: recv_control_msg error -32 req 02 val 2400 [ 73.540947][ T30] audit: type=1400 audit(1753561232.102:137): avc: denied { bind } for pid=5965 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.543624][ T5970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 73.562686][ T30] audit: type=1400 audit(1753561232.102:138): avc: denied { setopt } for pid=5965 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.619337][ T30] audit: type=1400 audit(1753561232.102:139): avc: denied { accept } for pid=5965 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.880425][ T5973] pwc: recv_control_msg error -32 req 02 val 2900 [ 73.892382][ T5973] pwc: recv_control_msg error -32 req 02 val 2800 [ 73.899416][ T5971] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 73.907227][ T5971] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 73.915584][ T5971] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 73.950755][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 73.959783][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 73.971332][ T6000] netlink: 'syz.4.14': attribute type 6 has an invalid length. [ 74.074641][ T6001] process 'syz.1.13' launched '/dev/fd/7' with NULL argv: empty string added [ 74.104435][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.180940][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.211566][ T5973] pwc: recv_control_msg error -71 req 04 val 1200 [ 74.243130][ T5973] pwc: Registered as video103. [ 74.266536][ T5971] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 74.324883][ T5973] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 74.341936][ T5971] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 74.400391][ T5973] usb 1-1: USB disconnect, device number 2 [ 74.412880][ T5971] wwan wwan0: port wwan0mbim0 attached [ 74.448794][ T5971] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 74.480836][ T5848] udevd[5848]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 74.531734][ T5898] usb 3-1: USB disconnect, device number 2 [ 74.635232][ T5898] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 74.794724][ T5898] wwan wwan0: port wwan0mbim0 disconnected [ 75.058693][ T6018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.280568][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.570340][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 75.577652][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.591439][ T6029] capability: warning: `syz.1.20' uses deprecated v2 capabilities in a way that may be insecure [ 75.602403][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.796759][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.928186][ T6029] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 75.975826][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 76.034565][ T975] cfg80211: failed to load regulatory.db [ 76.061444][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.064870][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 76.064902][ T5898] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 76.064920][ T5898] usb 1-1: Manufacturer: syz [ 76.068242][ T5898] usb 1-1: config 0 descriptor?? [ 76.422524][ T6034] FAULT_INJECTION: forcing a failure. [ 76.422524][ T6034] name failslab, interval 1, probability 0, space 0, times 1 [ 76.441624][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: syz.2.21 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 76.441651][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.441661][ T6034] Call Trace: [ 76.441667][ T6034] [ 76.441673][ T6034] dump_stack_lvl+0x16c/0x1f0 [ 76.441705][ T6034] should_fail_ex+0x512/0x640 [ 76.441731][ T6034] ? fs_reclaim_acquire+0xae/0x150 [ 76.441753][ T6034] ? tomoyo_encode2+0x100/0x3e0 [ 76.441769][ T6034] should_failslab+0xc2/0x120 [ 76.441786][ T6034] __kmalloc_noprof+0xd2/0x510 [ 76.441811][ T6034] ? d_absolute_path+0x136/0x1a0 [ 76.441836][ T6034] tomoyo_encode2+0x100/0x3e0 [ 76.441856][ T6034] tomoyo_encode+0x29/0x50 [ 76.441871][ T6034] tomoyo_realpath_from_path+0x18f/0x6e0 [ 76.441895][ T6034] tomoyo_path_number_perm+0x245/0x580 [ 76.441917][ T6034] ? tomoyo_path_number_perm+0x237/0x580 [ 76.441942][ T6034] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 76.441968][ T6034] ? find_held_lock+0x2b/0x80 [ 76.442012][ T6034] ? find_held_lock+0x2b/0x80 [ 76.442031][ T6034] ? hook_file_ioctl_common+0x145/0x410 [ 76.442057][ T6034] ? __fget_files+0x20e/0x3c0 [ 76.442084][ T6034] security_file_ioctl+0x9b/0x240 [ 76.442103][ T6034] __x64_sys_ioctl+0xb7/0x210 [ 76.442128][ T6034] do_syscall_64+0xcd/0x4c0 [ 76.442146][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.442168][ T6034] RIP: 0033:0x7f359618e9a9 [ 76.442182][ T6034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.442197][ T6034] RSP: 002b:00007f3596f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.442214][ T6034] RAX: ffffffffffffffda RBX: 00007f35963b5fa0 RCX: 00007f359618e9a9 [ 76.442225][ T6034] RDX: 0000200000000080 RSI: 0000000000004b67 RDI: 0000000000000003 [ 76.442235][ T6034] RBP: 00007f3596f73090 R08: 0000000000000000 R09: 0000000000000000 [ 76.442245][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.442255][ T6034] R13: 0000000000000000 R14: 00007f35963b5fa0 R15: 00007ffe9e1ea1c8 [ 76.442278][ T6034] [ 76.442297][ T6034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 76.690193][ T5898] rc_core: IR keymap rc-hauppauge not found [ 76.696124][ T5898] Registered IR keymap rc-empty [ 76.711279][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.736607][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.829068][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 77.104688][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 77.170758][ T5973] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.183097][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.230280][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.261548][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.300739][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.317520][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 77.317535][ T30] audit: type=1400 audit(1753561235.932:180): avc: denied { ioctl } for pid=6042 comm="syz.2.24" path="socket:[8522]" dev="sockfs" ino=8522 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.330313][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.367853][ T5973] usb 2-1: Using ep0 maxpacket: 8 [ 77.570257][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.612822][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.623523][ T5973] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.634415][ T30] audit: type=1400 audit(1753561236.252:181): avc: denied { connect } for pid=6042 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.642452][ T5973] usb 2-1: config 179 has no interface number 0 [ 77.660357][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.684065][ T5973] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 77.690264][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.702015][ T5973] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 77.718197][ T5973] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.729905][ T5973] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 77.740502][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 77.743969][ T5973] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.769031][ T30] audit: type=1400 audit(1753561236.382:182): avc: denied { create } for pid=6049 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.788915][ T5973] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 77.790742][ T5898] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 77.800376][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.837286][ T6037] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 77.839137][ T30] audit: type=1400 audit(1753561236.382:183): avc: denied { bind } for pid=6049 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.864140][ T5898] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 77.869659][ T30] audit: type=1400 audit(1753561236.382:184): avc: denied { write } for pid=6049 comm="syz.4.26" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.951163][ T30] audit: type=1400 audit(1753561236.382:185): avc: denied { open } for pid=6049 comm="syz.4.26" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.079217][ T30] audit: type=1400 audit(1753561236.382:186): avc: denied { ioctl } for pid=6049 comm="syz.4.26" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.136842][ T5973] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 78.205482][ T30] audit: type=1400 audit(1753561236.442:187): avc: denied { write } for pid=6049 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.329709][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.338482][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.550718][ T30] audit: type=1400 audit(1753561237.172:188): avc: denied { write } for pid=6035 comm="syz.1.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.635383][ T5898] usb 2-1: USB disconnect, device number 2 [ 78.635397][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 78.649765][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 78.819735][ T5973] usb 1-1: USB disconnect, device number 3 [ 78.925450][ T6063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6063 comm=syz.4.29 [ 79.260334][ T30] audit: type=1400 audit(1753561237.592:189): avc: denied { ioctl } for pid=6060 comm="syz.4.29" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7699 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.829092][ T5973] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 81.751338][ T5973] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.773917][ T5973] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.797045][ T5973] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.836059][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.068464][ T5973] usb 2-1: usb_control_msg returned -32 [ 82.075338][ T5973] usbtmc 2-1:16.0: can't read capabilities [ 82.640821][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 82.640836][ T30] audit: type=1400 audit(1753561241.252:207): avc: denied { write } for pid=6085 comm="syz.1.35" name="usbtmc0" dev="devtmpfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.841275][ T30] audit: type=1400 audit(1753561241.452:208): avc: denied { getattr } for pid=6102 comm="syz.2.40" path="cgroup:[4026532800]" dev="nsfs" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.879655][ T6106] warning: `syz.0.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.892842][ T30] audit: type=1400 audit(1753561241.492:209): avc: denied { create } for pid=6105 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.936972][ T30] audit: type=1400 audit(1753561241.492:210): avc: denied { ioctl } for pid=6105 comm="syz.0.41" path="socket:[7887]" dev="sockfs" ino=7887 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.965634][ T30] audit: type=1400 audit(1753561241.492:211): avc: denied { create } for pid=6105 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.990655][ T30] audit: type=1400 audit(1753561241.492:212): avc: denied { ioctl } for pid=6105 comm="syz.0.41" path="socket:[7888]" dev="sockfs" ino=7888 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.119373][ T30] audit: type=1400 audit(1753561241.612:213): avc: denied { map } for pid=6109 comm="syz.0.43" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.146638][ T30] audit: type=1400 audit(1753561241.612:214): avc: denied { execute } for pid=6109 comm="syz.0.43" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.299632][ T975] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 83.454488][ T975] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 83.462856][ T975] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 83.473709][ T975] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 83.482760][ T975] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 83.495457][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.505517][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 83.524297][ T975] usb 3-1: string descriptor 0 read error: -22 [ 83.534610][ T975] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 83.544865][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.563670][ T975] usb 3-1: config 0 descriptor?? [ 83.579113][ T975] hub 3-1:0.0: bad descriptor, ignoring hub [ 83.587934][ T975] hub 3-1:0.0: probe with driver hub failed with error -5 [ 83.712812][ T30] audit: type=1400 audit(1753561242.322:215): avc: denied { mounton } for pid=6113 comm="syz.3.44" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.773587][ T975] usb 2-1: USB disconnect, device number 3 [ 83.911945][ T5898] IPVS: starting estimator thread 0... [ 83.974167][ T30] audit: type=1400 audit(1753561242.592:216): avc: denied { create } for pid=6118 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.993460][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.040274][ T6116] IPVS: using max 50 ests per chain, 120000 per kthread [ 84.061337][ T5898] usb 3-1: USB disconnect, device number 3 [ 84.146910][ T6125] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.315158][ T6131] netdevsim netdevsim3: Direct firmware load for „ failed with error -2 [ 87.324917][ T6131] netdevsim netdevsim3: Falling back to sysfs fallback for: „ [ 87.947632][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 87.947645][ T30] audit: type=1400 audit(1753561246.562:222): avc: denied { kexec_image_load } for pid=6129 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 88.153217][ T30] audit: type=1400 audit(1753561246.762:223): avc: denied { sys_module } for pid=6129 comm="syz.1.49" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 89.351335][ T6154] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.407951][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 89.432805][ T6158] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 89.466582][ T30] audit: type=1400 audit(1753561248.082:224): avc: denied { getopt } for pid=6155 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.486744][ T973] IPVS: starting estimator thread 0... [ 89.608458][ T30] audit: type=1400 audit(1753561248.082:225): avc: denied { ioctl } for pid=6155 comm="syz.1.55" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 89.715605][ T6160] IPVS: using max 75 ests per chain, 180000 per kthread [ 89.847746][ T30] audit: type=1400 audit(1753561248.452:226): avc: denied { create } for pid=6157 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.020204][ T30] audit: type=1400 audit(1753561248.582:227): avc: denied { create } for pid=6157 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.289248][ T30] audit: type=1400 audit(1753561248.902:228): avc: denied { ioctl } for pid=6167 comm="syz.1.59" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.348103][ T30] audit: type=1400 audit(1753561248.962:229): avc: denied { read write } for pid=6167 comm="syz.1.59" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.348152][ T30] audit: type=1400 audit(1753561248.962:230): avc: denied { open } for pid=6167 comm="syz.1.59" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.487199][ T30] audit: type=1400 audit(1753561249.092:231): avc: denied { append } for pid=6176 comm="syz.4.61" name="v4l-subdev6" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.291670][ T5973] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.457542][ T5973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.460183][ T5910] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.486388][ T5973] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.511872][ T5973] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 91.521113][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.529706][ T5973] usb 5-1: Product: syz [ 91.534845][ T5973] usb 5-1: Manufacturer: syz [ 91.539489][ T5973] usb 5-1: SerialNumber: syz [ 91.561656][ T5973] usb 5-1: config 0 descriptor?? [ 91.586953][ T5973] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 91.625379][ T5973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.642711][ T5910] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.654557][ T5973] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 91.659076][ T5910] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.665261][ T5973] usb 5-1: media controller created [ 91.709754][ T5910] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.746616][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.759626][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.927868][ T6188] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.974880][ T5910] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.003339][ T5973] DVB: Unable to find symbol tda10046_attach() [ 92.009517][ T5973] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 92.020473][ T5973] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 92.217045][ T5910] usb 1-1: USB disconnect, device number 4 [ 92.801100][ T6211] FAULT_INJECTION: forcing a failure. [ 92.801100][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.054527][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.2.66 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 93.054551][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.054560][ T6211] Call Trace: [ 93.054566][ T6211] [ 93.054572][ T6211] dump_stack_lvl+0x16c/0x1f0 [ 93.054602][ T6211] should_fail_ex+0x512/0x640 [ 93.054631][ T6211] _copy_from_user+0x2e/0xd0 [ 93.054649][ T6211] copy_msghdr_from_user+0x98/0x160 [ 93.054666][ T6211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 93.054693][ T6211] ___sys_sendmsg+0xfe/0x1d0 [ 93.054710][ T6211] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.054724][ T6211] ? __lock_acquire+0x622/0x1c90 [ 93.054770][ T6211] __sys_sendmsg+0x16d/0x220 [ 93.054787][ T6211] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.054818][ T6211] do_syscall_64+0xcd/0x4c0 [ 93.054844][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.054860][ T6211] RIP: 0033:0x7f359618e9a9 [ 93.054873][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.054889][ T6211] RSP: 002b:00007f3596f31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.054905][ T6211] RAX: ffffffffffffffda RBX: 00007f35963b6160 RCX: 00007f359618e9a9 [ 93.054915][ T6211] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000007 [ 93.054925][ T6211] RBP: 00007f3596f31090 R08: 0000000000000000 R09: 0000000000000000 [ 93.054934][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.054944][ T6211] R13: 0000000000000000 R14: 00007f35963b6160 R15: 00007ffe9e1ea1c8 [ 93.054966][ T6211] [ 93.222710][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.440194][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.390334][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 94.408749][ T5898] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 94.427286][ T5898] usb 4-1: config 0 has no interface number 0 [ 94.429351][ T5898] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 94.429373][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.429391][ T5898] usb 4-1: Product: syz [ 94.429405][ T5898] usb 4-1: Manufacturer: syz [ 94.429419][ T5898] usb 4-1: SerialNumber: syz [ 94.432421][ T5898] usb 4-1: config 0 descriptor?? [ 94.443511][ T5898] smsc95xx v2.0.0 [ 94.959130][ T5973] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 95.000888][ T5973] usb 5-1: USB disconnect, device number 3 [ 95.069983][ T6233] trusted_key: encrypted_key: insufficient parameters specified [ 95.089740][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 95.089755][ T30] audit: type=1400 audit(1753561253.702:245): avc: denied { bind } for pid=6232 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.119701][ T6233] Bluetooth: MGMT ver 1.23 [ 95.121841][ T6235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.147158][ T30] audit: type=1400 audit(1753561253.722:246): avc: denied { create } for pid=6234 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.172356][ T30] audit: type=1400 audit(1753561253.742:247): avc: denied { ioctl } for pid=6234 comm="syz.0.72" path="socket:[9230]" dev="sockfs" ino=9230 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.205213][ T30] audit: type=1400 audit(1753561253.742:248): avc: denied { write } for pid=6232 comm="syz.4.76" path="socket:[8938]" dev="sockfs" ino=8938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.238419][ T30] audit: type=1400 audit(1753561253.752:249): avc: denied { ioctl } for pid=6232 comm="syz.4.76" path="socket:[8939]" dev="sockfs" ino=8939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.269778][ T5898] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 95.403689][ T6241] netlink: 168 bytes leftover after parsing attributes in process `syz.4.78'. [ 95.734702][ T5898] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 95.761429][ T5898] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 95.794878][ T5898] usb 4-1: USB disconnect, device number 2 [ 96.734628][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 96.902608][ T30] audit: type=1400 audit(1753561255.452:250): avc: denied { create } for pid=6258 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.921741][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.207232][ T30] audit: type=1400 audit(1753561255.572:251): avc: denied { setopt } for pid=6258 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.228292][ T30] audit: type=1400 audit(1753561255.712:252): avc: denied { setopt } for pid=6258 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.308005][ T6280] Zero length message leads to an empty skb [ 97.337138][ T24] libceph: connect (1)[c::]:6789 error -101 [ 97.364747][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 97.371197][ T54] libceph: connect (1)[c::]:6789 error -101 [ 97.399150][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 97.620201][ T5973] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.674488][ T54] libceph: connect (1)[c::]:6789 error -101 [ 97.729367][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 97.739802][ T24] libceph: connect (1)[c::]:6789 error -101 [ 97.812679][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 98.100536][ T6274] ceph: No mds server is up or the cluster is laggy [ 98.100620][ T6281] ceph: No mds server is up or the cluster is laggy [ 98.172961][ T30] audit: type=1400 audit(1753561256.772:253): avc: denied { bind } for pid=6285 comm="syz.3.87" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.287985][ T30] audit: type=1400 audit(1753561256.772:254): avc: denied { name_bind } for pid=6285 comm="syz.3.87" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 98.300396][ T5973] usb 1-1: Using ep0 maxpacket: 8 [ 98.392020][ T5973] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 98.412499][ T5973] usb 1-1: config 0 has no interface number 0 [ 98.430849][ T5973] usb 1-1: config 0 interface 112 has no altsetting 0 [ 98.443348][ T5973] usb 1-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=4e.f3 [ 98.459727][ T6289] netdevsim netdevsim4: Direct firmware load for „ failed with error -2 [ 98.469600][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.472215][ T6289] netdevsim netdevsim4: Falling back to sysfs fallback for: „ [ 98.488362][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.510522][ T5973] usb 1-1: Product: syz [ 98.514719][ T5973] usb 1-1: Manufacturer: syz [ 98.519312][ T5973] usb 1-1: SerialNumber: syz [ 98.555160][ T5973] usb 1-1: config 0 descriptor?? [ 98.574565][ T5973] igorplugusb 1-1:0.112: endpoint incorrect [ 98.640282][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 98.649535][ T54] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 98.671510][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.702332][ T54] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.736963][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.754724][ T6296] netlink: 244 bytes leftover after parsing attributes in process `syz.2.90'. [ 99.066845][ T54] usb 4-1: Product: syz [ 99.083895][ T54] usb 4-1: Manufacturer: syz [ 99.144814][ T54] usb 4-1: SerialNumber: syz [ 99.249695][ T54] usb 4-1: config 0 descriptor?? [ 99.320819][ T54] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 99.335835][ T54] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 99.997343][ T54] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 100.016132][ T54] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 100.801760][ T54] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 100.808710][ T54] em28xx 4-1:0.0: No AC97 audio processor [ 101.040388][ T6327] netlink: 168 bytes leftover after parsing attributes in process `syz.2.95'. [ 101.131576][ T6329] FAULT_INJECTION: forcing a failure. [ 101.131576][ T6329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.132341][ T6329] [ 101.132347][ T6329] ====================================================== [ 101.132353][ T6329] WARNING: possible circular locking dependency detected [ 101.132359][ T6329] 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 Not tainted [ 101.132368][ T6329] ------------------------------------------------------ [ 101.132373][ T6329] syz.1.92/6329 is trying to acquire lock: [ 101.132381][ T6329] ffffffff8e4d2380 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 101.132425][ T6329] [ 101.132425][ T6329] but task is already holding lock: [ 101.132430][ T6329] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 101.132467][ T6329] [ 101.132467][ T6329] which lock already depends on the new lock. [ 101.132467][ T6329] [ 101.132472][ T6329] [ 101.132472][ T6329] the existing dependency chain (in reverse order) is: [ 101.132477][ T6329] [ 101.132477][ T6329] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 101.132497][ T6329] _raw_spin_lock_nested+0x31/0x40 [ 101.132519][ T6329] raw_spin_rq_lock_nested+0x29/0x130 [ 101.132537][ T6329] task_rq_lock+0xcf/0x490 [ 101.132555][ T6329] cgroup_move_task+0x81/0x2a0 [ 101.132575][ T6329] css_set_move_task+0x288/0x5f0 [ 101.132589][ T6329] cgroup_post_fork+0x201/0x9e0 [ 101.132606][ T6329] copy_process+0x5c82/0x7650 [ 101.132627][ T6329] kernel_clone+0xfc/0x960 [ 101.132645][ T6329] user_mode_thread+0xc7/0x110 [ 101.132665][ T6329] rest_init+0x23/0x2b0 [ 101.132680][ T6329] start_kernel+0x3ee/0x4d0 [ 101.132693][ T6329] x86_64_start_reservations+0x18/0x30 [ 101.132718][ T6329] x86_64_start_kernel+0x130/0x190 [ 101.132731][ T6329] common_startup_64+0x13e/0x148 [ 101.132746][ T6329] [ 101.132746][ T6329] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 101.132766][ T6329] _raw_spin_lock_irqsave+0x3a/0x60 [ 101.132786][ T6329] try_to_wake_up+0xb2/0x1680 [ 101.132803][ T6329] __wake_up_common+0x132/0x1f0 [ 101.132816][ T6329] __wake_up+0x31/0x60 [ 101.132835][ T6329] tty_port_default_wakeup+0x2a/0x40 [ 101.132858][ T6329] serial8250_tx_chars+0x68e/0x860 [ 101.132875][ T6329] serial8250_handle_irq+0x761/0xcb0 [ 101.132893][ T6329] serial8250_default_handle_irq+0x9a/0x210 [ 101.132911][ T6329] serial8250_interrupt+0x106/0x210 [ 101.132930][ T6329] __handle_irq_event_percpu+0x22c/0x7d0 [ 101.132949][ T6329] handle_irq_event+0xab/0x1e0 [ 101.132967][ T6329] handle_edge_irq+0x28e/0xab0 [ 101.132983][ T6329] __common_interrupt+0xdf/0x250 [ 101.133002][ T6329] common_interrupt+0xba/0xe0 [ 101.133020][ T6329] asm_common_interrupt+0x26/0x40 [ 101.133035][ T6329] pv_native_safe_halt+0xf/0x20 [ 101.133057][ T6329] default_idle+0x13/0x20 [ 101.133072][ T6329] default_idle_call+0x6d/0xb0 [ 101.133087][ T6329] do_idle+0x391/0x510 [ 101.133103][ T6329] cpu_startup_entry+0x4f/0x60 [ 101.133122][ T6329] start_secondary+0x21d/0x2b0 [ 101.133141][ T6329] common_startup_64+0x13e/0x148 [ 101.133155][ T6329] [ 101.133155][ T6329] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 101.133174][ T6329] _raw_spin_lock_irqsave+0x3a/0x60 [ 101.133194][ T6329] __wake_up+0x1c/0x60 [ 101.133213][ T6329] tty_port_default_wakeup+0x2a/0x40 [ 101.133228][ T6329] serial8250_tx_chars+0x68e/0x860 [ 101.133244][ T6329] serial8250_handle_irq+0x761/0xcb0 [ 101.133261][ T6329] serial8250_default_handle_irq+0x9a/0x210 [ 101.133279][ T6329] serial8250_interrupt+0x106/0x210 [ 101.133297][ T6329] __handle_irq_event_percpu+0x22c/0x7d0 [ 101.133316][ T6329] handle_irq_event+0xab/0x1e0 [ 101.133333][ T6329] handle_edge_irq+0x28e/0xab0 [ 101.133349][ T6329] __common_interrupt+0xdf/0x250 [ 101.133367][ T6329] common_interrupt+0xba/0xe0 [ 101.133384][ T6329] asm_common_interrupt+0x26/0x40 [ 101.133398][ T6329] pv_native_safe_halt+0xf/0x20 [ 101.133419][ T6329] default_idle+0x13/0x20 [ 101.133433][ T6329] default_idle_call+0x6d/0xb0 [ 101.133449][ T6329] do_idle+0x391/0x510 [ 101.133465][ T6329] cpu_startup_entry+0x4f/0x60 [ 101.133484][ T6329] start_secondary+0x21d/0x2b0 [ 101.133503][ T6329] common_startup_64+0x13e/0x148 [ 101.133516][ T6329] [ 101.133516][ T6329] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 101.133535][ T6329] _raw_spin_lock_irqsave+0x3a/0x60 [ 101.133555][ T6329] serial8250_console_write+0x181/0x1890 [ 101.133573][ T6329] console_flush_all+0x801/0xc60 [ 101.133590][ T6329] console_unlock+0xd8/0x210 [ 101.133607][ T6329] vprintk_emit+0x418/0x6d0 [ 101.133625][ T6329] _printk+0xc7/0x100 [ 101.133637][ T6329] register_console+0xc2d/0x11b0 [ 101.133656][ T6329] univ8250_console_init+0x5f/0x90 [ 101.133670][ T6329] console_init+0x14f/0x680 [ 101.133683][ T6329] start_kernel+0x29f/0x4d0 [ 101.133695][ T6329] x86_64_start_reservations+0x18/0x30 [ 101.133718][ T6329] x86_64_start_kernel+0x130/0x190 [ 101.133731][ T6329] common_startup_64+0x13e/0x148 [ 101.133745][ T6329] [ 101.133745][ T6329] -> #0 (console_owner){-.-.}-{0:0}: [ 101.133764][ T6329] __lock_acquire+0x126f/0x1c90 [ 101.133777][ T6329] lock_acquire+0x179/0x350 [ 101.133790][ T6329] console_lock_spinning_enable+0xb0/0xd0 [ 101.133808][ T6329] console_flush_all+0x7aa/0xc60 [ 101.133825][ T6329] console_unlock+0xd8/0x210 [ 101.133842][ T6329] vprintk_emit+0x418/0x6d0 [ 101.133866][ T6329] _printk+0xc7/0x100 [ 101.133878][ T6329] should_fail_ex+0x4e7/0x640 [ 101.133900][ T6329] strncpy_from_user+0x3b/0x2e0 [ 101.133920][ T6329] strncpy_from_user_nofault+0x7f/0x180 [ 101.133935][ T6329] bpf_probe_read_user_str+0x26/0x70 [ 101.133957][ T6329] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 101.133969][ T6329] bpf_trace_run4+0x24c/0x5a0 [ 101.133983][ T6329] __bpf_trace_sched_switch+0x145/0x190 [ 101.134001][ T6329] __traceiter_sched_switch+0x6f/0xc0 [ 101.134017][ T6329] __schedule+0x1bee/0x5dd0 [ 101.134037][ T6329] schedule+0xe7/0x3a0 [ 101.134056][ T6329] exit_to_user_mode_loop+0x67/0x110 [ 101.134073][ T6329] do_syscall_64+0x3f6/0x4c0 [ 101.134086][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.134100][ T6329] [ 101.134100][ T6329] other info that might help us debug this: [ 101.134100][ T6329] [ 101.134104][ T6329] Chain exists of: [ 101.134104][ T6329] console_owner --> &p->pi_lock --> &rq->__lock [ 101.134104][ T6329] [ 101.134126][ T6329] Possible unsafe locking scenario: [ 101.134126][ T6329] [ 101.134130][ T6329] CPU0 CPU1 [ 101.134133][ T6329] ---- ---- [ 101.134137][ T6329] lock(&rq->__lock); [ 101.134146][ T6329] lock(&p->pi_lock); [ 101.134156][ T6329] lock(&rq->__lock); [ 101.134166][ T6329] lock(console_owner); [ 101.134175][ T6329] [ 101.134175][ T6329] *** DEADLOCK *** [ 101.134175][ T6329] [ 101.134178][ T6329] 4 locks held by syz.1.92/6329: [ 101.134186][ T6329] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 101.134225][ T6329] #1: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 101.134260][ T6329] #2: ffffffff8e5b27c0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 101.134292][ T6329] #3: ffffffff8e5b2830 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 101.134330][ T6329] [ 101.134330][ T6329] stack backtrace: [ 101.134337][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.1.92 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 101.134356][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.134365][ T6329] Call Trace: [ 101.134370][ T6329] [ 101.134376][ T6329] dump_stack_lvl+0x116/0x1f0 [ 101.134401][ T6329] print_circular_bug+0x275/0x350 [ 101.134426][ T6329] check_noncircular+0x14c/0x170 [ 101.134453][ T6329] __lock_acquire+0x126f/0x1c90 [ 101.134471][ T6329] lock_acquire+0x179/0x350 [ 101.134484][ T6329] ? console_lock_spinning_enable+0x9f/0xd0 [ 101.134504][ T6329] ? console_lock_spinning_enable+0x88/0xd0 [ 101.134525][ T6329] console_lock_spinning_enable+0xb0/0xd0 [ 101.134544][ T6329] ? console_lock_spinning_enable+0x9f/0xd0 [ 101.134562][ T6329] console_flush_all+0x7aa/0xc60 [ 101.134584][ T6329] ? __pfx_console_flush_all+0x10/0x10 [ 101.134606][ T6329] ? is_printk_cpu_sync_owner+0x32/0x40 [ 101.134628][ T6329] console_unlock+0xd8/0x210 [ 101.134646][ T6329] ? __pfx_console_unlock+0x10/0x10 [ 101.134665][ T6329] ? do_raw_spin_unlock+0xd0/0x230 [ 101.134684][ T6329] ? _printk+0xc7/0x100 [ 101.134697][ T6329] ? __down_trylock_console_sem+0xb0/0x140 [ 101.134714][ T6329] vprintk_emit+0x418/0x6d0 [ 101.134734][ T6329] ? __pfx_vprintk_emit+0x10/0x10 [ 101.134752][ T6329] ? rcu_is_watching+0x12/0xc0 [ 101.134773][ T6329] ? trace_sched_exit_tp+0xde/0x130 [ 101.134794][ T6329] ? __schedule+0x1181/0x5dd0 [ 101.134817][ T6329] _printk+0xc7/0x100 [ 101.134831][ T6329] ? __pfx__printk+0x10/0x10 [ 101.134846][ T6329] ? bpf_trace_run4+0x27e/0x5a0 [ 101.134866][ T6329] ? __pfx____ratelimit+0x10/0x10 [ 101.134889][ T6329] ? __lock_acquire+0x622/0x1c90 [ 101.134905][ T6329] should_fail_ex+0x4e7/0x640 [ 101.134928][ T6329] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 101.134945][ T6329] strncpy_from_user+0x3b/0x2e0 [ 101.134966][ T6329] ? lock_acquire+0x179/0x350 [ 101.134981][ T6329] strncpy_from_user_nofault+0x7f/0x180 [ 101.134997][ T6329] bpf_probe_read_user_str+0x26/0x70 [ 101.135020][ T6329] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 101.135033][ T6329] bpf_trace_run4+0x24c/0x5a0 [ 101.135049][ T6329] ? __pfx_bpf_trace_run4+0x10/0x10 [ 101.135070][ T6329] __bpf_trace_sched_switch+0x145/0x190 [ 101.135090][ T6329] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 101.135110][ T6329] ? plist_check_prev_next+0x12a/0x1a0 [ 101.135134][ T6329] __traceiter_sched_switch+0x6f/0xc0 [ 101.135150][ T6329] ? set_next_task_rt+0x403/0x6a0 [ 101.135175][ T6329] __schedule+0x1bee/0x5dd0 [ 101.135197][ T6329] ? ksys_write+0x190/0x250 [ 101.135222][ T6329] ? irqentry_exit+0x3b/0x90 [ 101.135238][ T6329] ? __pfx___schedule+0x10/0x10 [ 101.135262][ T6329] ? fput+0x70/0xf0 [ 101.135278][ T6329] ? ksys_write+0x1ac/0x250 [ 101.135302][ T6329] schedule+0xe7/0x3a0 [ 101.135324][ T6329] exit_to_user_mode_loop+0x67/0x110 [ 101.135342][ T6329] do_syscall_64+0x3f6/0x4c0 [ 101.135357][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.135372][ T6329] RIP: 0033:0x7fc30918d45f [ 101.135384][ T6329] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 101.135399][ T6329] RSP: 002b:00007fc309f37030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 101.135414][ T6329] RAX: 0000000000000001 RBX: 000000000000000a RCX: 00007fc30918d45f [ 101.135424][ T6329] RDX: 0000000000000001 RSI: 00007fc309f37090 RDI: 000000000000000a [ 101.135433][ T6329] RBP: 00007fc309f37090 R08: 0000000000000000 R09: 00007fc309f36df7 [ 101.135442][ T6329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 101.135451][ T6329] R13: 0000000000000000 R14: 00007fc3093b6160 R15: 00007ffe1cbbd2b8 [ 101.135466][ T6329] [ 102.221112][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.1.92 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 102.221126][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.221132][ T6329] Call Trace: [ 102.221137][ T6329] [ 102.221142][ T6329] dump_stack_lvl+0x116/0x1f0 [ 102.221163][ T6329] should_fail_ex+0x512/0x640 [ 102.221179][ T6329] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 102.221190][ T6329] strncpy_from_user+0x3b/0x2e0 [ 102.221205][ T6329] ? lock_acquire+0x179/0x350 [ 102.221214][ T6329] strncpy_from_user_nofault+0x7f/0x180 [ 102.221226][ T6329] bpf_probe_read_user_str+0x26/0x70 [ 102.221240][ T6329] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 102.221249][ T6329] bpf_trace_run4+0x24c/0x5a0 [ 102.221259][ T6329] ? __pfx_bpf_trace_run4+0x10/0x10 [ 102.221272][ T6329] __bpf_trace_sched_switch+0x145/0x190 [ 102.221285][ T6329] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 102.221298][ T6329] ? plist_check_prev_next+0x12a/0x1a0 [ 102.221313][ T6329] __traceiter_sched_switch+0x6f/0xc0 [ 102.221324][ T6329] ? set_next_task_rt+0x403/0x6a0 [ 102.221339][ T6329] __schedule+0x1bee/0x5dd0 [ 102.221354][ T6329] ? ksys_write+0x190/0x250 [ 102.221370][ T6329] ? irqentry_exit+0x3b/0x90 [ 102.221380][ T6329] ? __pfx___schedule+0x10/0x10 [ 102.221395][ T6329] ? fput+0x70/0xf0 [ 102.221404][ T6329] ? ksys_write+0x1ac/0x250 [ 102.221419][ T6329] schedule+0xe7/0x3a0 [ 102.221432][ T6329] exit_to_user_mode_loop+0x67/0x110 [ 102.221444][ T6329] do_syscall_64+0x3f6/0x4c0 [ 102.221455][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.221466][ T6329] RIP: 0033:0x7fc30918d45f [ 102.221474][ T6329] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 102.221483][ T6329] RSP: 002b:00007fc309f37030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 102.221493][ T6329] RAX: 0000000000000001 RBX: 000000000000000a RCX: 00007fc30918d45f [ 102.221499][ T6329] RDX: 0000000000000001 RSI: 00007fc309f37090 RDI: 000000000000000a [ 102.221505][ T6329] RBP: 00007fc309f37090 R08: 0000000000000000 R09: 00007fc309f36df7 [ 102.221510][ T6329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 102.221516][ T6329] R13: 0000000000000000 R14: 00007fc3093b6160 R15: 00007ffe1cbbd2b8 [ 102.221525][ T6329] [ 102.221593][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.454390][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.460351][ C1] hrtimer: interrupt took 1320242361 ns [ 102.579114][ T24] usb 4-1: USB disconnect, device number 3 [ 102.585162][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 102.590945][ T24] em28xx 4-1:0.0: Freeing device [ 102.626724][ T54] usb 1-1: USB disconnect, device number 5 [ 102.644599][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 102.673586][ T6328] bridge_slave_1: left allmulticast mode [ 102.679302][ T6328] bridge_slave_1: left promiscuous mode [ 102.685658][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.693781][ T6328] bridge_slave_0: left allmulticast mode [ 102.699456][ T6328] bridge_slave_0: left promiscuous mode [ 102.708161][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state